last executing test programs:

5m23.252319403s ago: executing program 2 (id=1266):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

5m20.703666004s ago: executing program 2 (id=1271):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10)
bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1b)

5m16.372196769s ago: executing program 2 (id=1276):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
io_uring_setup(0x5ba8, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
write(r0, &(0x7f0000000000)="01", 0x1)

5m14.838786806s ago: executing program 2 (id=1281):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzs281uElEYgOFvAH/iysSdcWfV+lMGCpou9VKadmwap2qsmzYu9Aq8Bq/M3oALb0BMR8BEGCaRyAnyPKsvvEzmsDjM2UwAm6vzPLLIYutyvnP95udbWeoVASsySnz/HyMgnfZF6hUAaXx7EXEREV+/fziI9tbM8/myf5z01r3Z/inidmfcs/vx4I8++hLVZ7/69tzrb0z7w7l9++7k/o/icTyJnehGHr3oj/vh9PrhkqcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZVFt2mvvALrXh5XBa92n6l6v3afrXquw19UNuvVb178KY8XLRMYI7Wkvu/3bD/Ow37H0jn9Oz81X5ZFu8MBoNhOqT+ZwL+tfz9ydv89Ox85/hk/6g4Kl4P+8Nne4PB3tNeXp3s88Xne2B9/X7op14JAAAAAAAAAPC3dqP+3RoAAOD/sorXiVL/RgAAAAAAAAAAAAAAWHc/AwAA//8c7qwa")
truncate(&(0x7f00000000c0)='./file1\x00', 0x3db1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x48000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, 0x0, 0x1)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x10, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0x6, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x3, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x205, 0x0, 0x4, 0x5, 0x9, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x42f, 0x1, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x20006, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0x9, 0x8, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x0, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000007, 0x2, 0x6d03, 0x5, 0xd, 0x17, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0xb, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7fffffff, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0x4, 0x3, 0x101, 0x10003, 0x2, 0xfffff001, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffbfd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
unshare(0x20400)

5m14.639260741s ago: executing program 2 (id=1282):
socket$rxrpc(0x21, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x300000000000000, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)

5m14.067618745s ago: executing program 2 (id=1284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r1)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

4m59.003293671s ago: executing program 32 (id=1284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r1)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

4m6.379622628s ago: executing program 1 (id=1385):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)

4m4.946068723s ago: executing program 1 (id=1387):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xfe}, 0x18)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

3m54.114044056s ago: executing program 1 (id=1399):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x60, 0x1, [@m_ct={0x2c, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
r0 = socket$inet(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='proc\x00', 0x121)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0)
lseek(r1, 0x186a0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000340)={@multicast1, @empty}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[], 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "dc9b14135872301e6dce2615e41d4cf223fe3e5ea53cf85c58625758a1bb32db", "7633ce98abb90d70d5ff41d91f8323afb1dbb9db2c72238f4a585f6df17bf33b", "2a8bc33aaf8dd858614264a95b0f1199a0551237c78bc7a84de26dfbf575d0fd", "f621f1ae07ac12c0590359c110a80092ed45792422ba95ab0de1785a0f98601d", "6177acf87205fd647454b88389e9ff5db7eb51de28e5efae75edc5f28c461694", "35a098240d01f4127858f7ed", 0xfad6, 0x0, 0x9e57, 0xfff, 0x2}})

3m53.075135231s ago: executing program 1 (id=1402):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050082}, 0x4000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000540)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}})
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

3m51.022413681s ago: executing program 1 (id=1405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000480)="0c7d18b0d81b997e", 0x8}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000100)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'cp869'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000280)=0xfffffff8, 0x4)

3m48.17170869s ago: executing program 1 (id=1409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

3m32.338189604s ago: executing program 33 (id=1409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

27.511619355s ago: executing program 3 (id=1670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000100), 0x0, 0x1c0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r6, &(0x7f0000000180)='+5', 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x9, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x5, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x26, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x400, 0x6, 0x2, 0x43, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x1000, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0xf8f, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x1, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x7, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xffd, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x434}}, 0x0)

25.139363405s ago: executing program 3 (id=1673):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

21.629610874s ago: executing program 5 (id=1676):
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='rt1719 0x49\x00', 0xc)
write(r2, &(0x7f0000000400)='wusb3801 0x4', 0xc)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4)

20.045764094s ago: executing program 4 (id=1678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

19.943736046s ago: executing program 5 (id=1679):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000)
syz_usb_disconnect(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

18.837038855s ago: executing program 4 (id=1680):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0)

17.04674243s ago: executing program 3 (id=1681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000100), 0x0, 0x1c0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r6, &(0x7f0000000180)='+5', 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x9, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x5, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x2, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x26, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x400, 0x6, 0x2, 0x43, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x1000, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0xf8f, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x1, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x7, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xffd, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x434}}, 0x0)

16.719092338s ago: executing program 0 (id=1682):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0xc001)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xfe}, 0x18)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r2, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)

15.921200768s ago: executing program 0 (id=1683):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

15.608562196s ago: executing program 4 (id=1684):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)

14.813573696s ago: executing program 5 (id=1685):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

14.26760694s ago: executing program 4 (id=1686):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10)
bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1b)

11.585389157s ago: executing program 0 (id=1687):
memfd_create(0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r2, 0x40186f40, &(0x7f0000000100))

9.216247798s ago: executing program 5 (id=1688):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.084717961s ago: executing program 3 (id=1689):
socket(0x1d, 0x2, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
userfaultfd(0x80001)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_create(0x9)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

8.388660098s ago: executing program 4 (id=1690):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

7.223752408s ago: executing program 0 (id=1691):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0xc001)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xfe}, 0x18)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r2, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0)

7.223427918s ago: executing program 5 (id=1692):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0)

5.387573654s ago: executing program 4 (id=1693):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)={0x1, 0x8000})
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0)

4.966233105s ago: executing program 0 (id=1694):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000)
syz_usb_disconnect(r0)

4.859577007s ago: executing program 3 (id=1695):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

2.694557882s ago: executing program 3 (id=1696):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB="000000003e6d5fab03b6176e0b3f0000002000"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

2.440286148s ago: executing program 5 (id=1697):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r5=>0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
unshare(0x22020600)
syz_ublk_setup_queues(r0, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x20, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)

0s ago: executing program 0 (id=1698):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10)
bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1b)

kernel console output (not intermixed with test programs):

73] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575674][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575703][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575729][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575755][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575781][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575807][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575832][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575859][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575886][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575911][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575938][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575965][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.575990][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576016][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576043][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576070][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576106][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576134][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576162][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576190][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576216][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576243][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576270][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576297][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576324][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576352][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576378][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576405][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576432][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576460][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576487][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576514][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576541][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576569][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576596][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576624][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576651][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576679][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576707][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576735][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576763][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576790][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576818][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576845][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576872][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576899][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576926][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576953][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.576981][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.577009][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.577037][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.577064][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.577101][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.577128][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.602997][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603045][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603075][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603111][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603139][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603167][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603196][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603224][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603252][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603280][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603309][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603337][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603365][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603392][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603421][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603449][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603477][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603506][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603535][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603563][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603592][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603621][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603649][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603677][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603705][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603733][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603760][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603789][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603817][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603845][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603873][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603901][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603928][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603956][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.603985][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604013][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604041][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604069][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604103][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604131][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604159][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604187][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604215][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604243][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604270][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.604299][  T973] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[  147.631460][  T973] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.22 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  147.644992][  T973] logitech 0003:046D:C29C.0001: no inputs found
[  148.474854][ T6227] loop0: detected capacity change from 0 to 4096
[  149.337032][ T6239] loop3: detected capacity change from 0 to 136
[  150.003779][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.292653][  T973] usb 4-1: USB disconnect, device number 2
[  157.276073][ T6255] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  158.002754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  158.442614][ T6260] loop1: detected capacity change from 0 to 4096
[  158.472771][ T6260] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  158.613136][ T6262] 0x000000000007-0x000000020000 : ""
[  158.645386][ T6262] ftl_cs: FTL header corrupt!
[  159.836656][ T6275] loop0: detected capacity change from 0 to 136
[  160.562684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  162.363698][ T6290] loop2: detected capacity change from 0 to 256
[  162.483583][ T6288] loop0: detected capacity change from 0 to 4096
[  162.508843][ T6288] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  162.692725][ T6292] 0x000000000007-0x000000020000 : ""
[  162.730662][ T6292] ftl_cs: FTL header corrupt!
[  163.971646][ T6306] loop2: detected capacity change from 0 to 136
[  165.512458][    C1] sched: RT throttling activated
[  165.682734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  166.874631][ T6323] loop3: detected capacity change from 0 to 1024
[  167.716931][ T6325] netlink: 140 bytes leftover after parsing attributes in process `syz.0.162'.
[  168.178804][ T6327] loop0: detected capacity change from 0 to 4096
[  168.194248][ T6327] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  168.364665][ T6328] 0x000000000007-0x000000020000 : ""
[  168.385942][ T6328] ftl_cs: FTL header corrupt!
[  169.429328][ T6334] loop0: detected capacity change from 0 to 4096
[  169.475517][ T6334] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  169.716360][ T6339] 0x000000000007-0x000000020000 : ""
[  169.755945][ T6339] ftl_cs: FTL header corrupt!
[  170.506200][ T6345] loop0: detected capacity change from 0 to 136
[  171.204531][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[  171.308710][ T6360] loop3: detected capacity change from 0 to 256
[  172.333560][ T6374] loop0: detected capacity change from 0 to 4096
[  172.410478][ T6374] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  172.466086][ T6379] loop1: detected capacity change from 0 to 512
[  172.478351][ T6379] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.529918][ T6382] loop3: detected capacity change from 0 to 136
[  172.551716][ T6379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  172.568292][ T6379] Quota error (device loop1): write_blk: dquota write failed
[  172.576230][ T6379] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  172.585529][ T6379] Quota error (device loop1): write_blk: dquota write failed
[  172.594114][ T6379] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  172.604119][ T6379] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.161: Failed to acquire dquot type 1
[  172.618119][ T6379] EXT4-fs (loop1): 1 truncate cleaned up
[  172.625541][ T6379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.782709][ T6385] 0x000000000007-0x000000020000 : ""
[  172.801002][ T6385] ftl_cs: FTL header corrupt!
[  173.550874][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.591718][ T6396] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  175.760001][ T6402] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  175.890305][ T6404] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  179.154112][ T6422] loop3: detected capacity change from 0 to 128
[  180.679704][ T6419] loop0: detected capacity change from 0 to 512
[  180.695074][ T6419] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  181.734392][ T6433] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[  181.923903][ T6433] netlink: 'syz.0.193': attribute type 2 has an invalid length.
[  182.196970][ T6439] Config c/1 of g1 needs at least one function.
[  182.228112][ T6439] udc dummy_udc.0: failed to start g1: -22
[  182.252516][ T6439] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  182.364910][ T6439] UDC core: g1: couldn't find an available UDC or it's busy
[  183.652694][ T6449] loop1: detected capacity change from 0 to 1024
[  183.698584][  T973] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  183.944763][  T973] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  183.965127][  T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  184.026034][  T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  184.051073][  T973] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  184.062838][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.095285][  T973] usb 4-1: config 0 descriptor??
[  184.110897][ T6446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  184.445685][  T973] usbhid 4-1:0.0: can't add hid device: -71
[  184.451779][  T973] usbhid: probe of 4-1:0.0 failed with error -71
[  184.470403][  T973] usb 4-1: USB disconnect, device number 3
[  184.643238][  T971] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  184.852633][  T971] usb 1-1: Using ep0 maxpacket: 16
[  184.926007][  T971] usb 1-1: unable to get BOS descriptor or descriptor too short
[  184.945787][  T971] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.012537][  T971] usb 1-1: config 1 interface 0 has no altsetting 0
[  185.064937][  T971] usb 1-1: language id specifier not provided by device, defaulting to English
[  185.891428][  T971] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40
[  185.900625][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.908762][  T971] usb 1-1: Product: syz
[  185.913049][  T971] usb 1-1: Manufacturer: 䬦ḹ딋襩啜옡쿀ꩩ⠗梥郛㉈쩏뉌臁鿴褖嘓ꂪ榙ᳮꡀ◕򐉬
[  185.924507][  T971] usb 1-1: SerialNumber: syz
[  186.567972][  T971] usbhid 1-1:1.0: can't add hid device: -71
[  186.638741][  T971] usbhid: probe of 1-1:1.0 failed with error -71
[  186.686250][  T971] usb 1-1: USB disconnect, device number 4
[  186.932511][ T5823] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  187.171052][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  187.224079][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  187.314368][ T5823] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  187.360610][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  187.407029][ T5823] usb 3-1: Product: syz
[  187.437925][ T5823] usb 3-1: Manufacturer: syz
[  189.196645][ T6470] loop0: detected capacity change from 0 to 4096
[  189.204934][ T5823] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  189.214932][ T6470] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  189.416767][ T6476] 0x000000000007-0x000000020000 : ""
[  189.589879][ T6476] ftl_cs: FTL header corrupt!
[  190.140601][ T6484] Config c/1 of g1 needs at least one function.
[  190.147222][ T6484] udc dummy_udc.0: failed to start g1: -22
[  190.162965][ T6484] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  190.190933][ T6484] UDC core: g1: couldn't find an available UDC or it's busy
[  190.582444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  192.062449][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  192.092448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  192.102459][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  193.107405][ T6491] loop0: detected capacity change from 0 to 1024
[  193.402437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  193.422453][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  193.592145][ T5823] mos7840: probe of ttyUSB0 failed with error -71
[  193.635625][ T5823] usb 3-1: USB disconnect, device number 3
[  193.722111][ T5823] mos7840 3-1:1.0: device disconnected
[  195.212739][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  195.219574][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  196.133211][ T6507] loop1: detected capacity change from 0 to 4096
[  196.159628][ T6507] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  196.783297][ T6512] 0x000000000007-0x000000020000 : ""
[  196.812514][ T6512] ftl_cs: FTL header corrupt!
[  197.244689][ T6518] loop0: detected capacity change from 0 to 136
[  197.277748][ T6523] Config c/1 of g1 needs at least one function.
[  197.285277][ T6523] udc dummy_udc.0: failed to start g1: -22
[  197.291243][ T6523] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  197.299619][ T6523] UDC core: g1: couldn't find an available UDC or it's busy
[  201.522848][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  201.814342][ T6537] loop1: detected capacity change from 0 to 1024
[  202.809926][ T6547] Config c/1 of g1 needs at least one function.
[  202.828469][ T6547] udc dummy_udc.0: failed to start g1: -22
[  202.859875][ T6547] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  202.894026][ T6547] UDC core: g1: couldn't find an available UDC or it's busy
[  205.035152][ T6558] loop3: detected capacity change from 0 to 4096
[  205.054032][ T6558] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  205.431141][ T6563] 0x000000000007-0x000000020000 : ""
[  205.455725][ T6563] ftl_cs: FTL header corrupt!
[  210.125026][ T6583] loop3: detected capacity change from 0 to 1024
[  210.778788][ T6586] Config c/1 of g1 needs at least one function.
[  210.802735][ T6586] udc dummy_udc.0: failed to start g1: -22
[  210.808635][ T6586] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  210.914380][ T6586] UDC core: g1: couldn't find an available UDC or it's busy
[  212.084159][ T6582] Bluetooth: hci1: command 0x0406 tx timeout
[  212.091934][ T6582] Bluetooth: hci2: command 0x0406 tx timeout
[  212.098536][ T6582] Bluetooth: hci3: command 0x0406 tx timeout
[  212.104938][ T6597] Bluetooth: hci0: command 0x0406 tx timeout
[  213.639713][ T6603] loop2: detected capacity change from 0 to 4096
[  213.762884][ T6603] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  216.326780][ T6610] 0x000000000007-0x000000020000 : ""
[  216.344068][ T6610] ftl_cs: FTL header corrupt!
[  217.221385][ T6619] Config c/1 of g1 needs at least one function.
[  217.233491][ T6619] udc dummy_udc.0: failed to start g1: -22
[  217.241419][ T6619] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  217.260721][ T6619] UDC core: g1: couldn't find an available UDC or it's busy
[  217.595217][ T6623] loop2: detected capacity change from 0 to 1024
[  221.069045][ T6641] loop2: detected capacity change from 0 to 4096
[  221.219197][ T6645] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.585088][ T6651] loop2: detected capacity change from 0 to 4096
[  224.613592][ T6653] Config c/1 of g1 needs at least one function.
[  224.632534][ T6651] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  224.653044][ T6653] udc dummy_udc.0: failed to start g1: -22
[  224.659035][ T6653] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  224.695288][ T6653] UDC core: g1: couldn't find an available UDC or it's busy
[  224.943221][ T6657] 0x000000000007-0x000000020000 : ""
[  224.961781][ T6657] ftl_cs: FTL header corrupt!
[  225.410646][ T6662] loop0: detected capacity change from 0 to 1024
[  229.665714][ T6689] loop0: detected capacity change from 0 to 4096
[  229.770764][ T6690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.093776][ T6694] Config c/1 of g1 needs at least one function.
[  230.113080][ T6694] udc dummy_udc.0: failed to start g1: -22
[  230.119004][ T6694] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  230.161691][ T6694] UDC core: g1: couldn't find an available UDC or it's busy
[  231.076559][ T6699] loop1: detected capacity change from 0 to 1024
[  232.113753][ T6703] loop2: detected capacity change from 0 to 4096
[  232.287683][ T6703] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  233.602734][ T6712] 0x000000000007-0x000000020000 : ""
[  233.619318][ T6712] ftl_cs: FTL header corrupt!
[  236.342236][ T6732] loop3: detected capacity change from 0 to 4096
[  236.728706][ T6734] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.131388][ T6740] Config c/1 of g1 needs at least one function.
[  237.159390][ T6740] udc dummy_udc.0: failed to start g1: -22
[  237.189684][ T6740] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  237.231257][ T6740] UDC core: g1: couldn't find an available UDC or it's busy
[  237.530731][ T6744] loop1: detected capacity change from 0 to 4096
[  237.548761][ T6744] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  238.467623][ T6749] loop3: detected capacity change from 0 to 1024
[  239.088163][ T6751] 0x000000000007-0x000000020000 : ""
[  239.542212][ T6751] ftl_cs: FTL header corrupt!
[  243.108817][ T6780] loop3: detected capacity change from 0 to 4096
[  243.173311][ T6781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.221567][ T6783] Config c/1 of g1 needs at least one function.
[  243.249276][ T6783] udc dummy_udc.0: failed to start g1: -22
[  243.255870][ T6783] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  243.264232][ T6783] UDC core: g1: couldn't find an available UDC or it's busy
[  244.706214][ T6788] loop1: detected capacity change from 0 to 1024
[  247.465047][ T6793] loop2: detected capacity change from 0 to 4096
[  247.481850][ T6793] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  247.677516][ T6798] 0x000000000007-0x000000020000 : ""
[  247.694537][ T6798] ftl_cs: FTL header corrupt!
[  250.712267][ T6819] Config c/1 of g1 needs at least one function.
[  250.758338][ T6819] udc dummy_udc.0: failed to start g1: -22
[  250.767974][ T6819] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  250.778851][ T6819] UDC core: g1: couldn't find an available UDC or it's busy
[  250.938587][ T6824] loop2: detected capacity change from 0 to 4096
[  251.017158][ T6827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  252.380631][ T6842] loop1: detected capacity change from 0 to 1024
[  252.820006][ T6849] loop2: detected capacity change from 0 to 4096
[  252.852578][ T6849] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  253.264731][ T6853] 0x000000000007-0x000000020000 : ""
[  253.283006][ T6853] ftl_cs: FTL header corrupt!
[  256.015103][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  256.021563][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  256.342896][ T6872] loop2: detected capacity change from 0 to 4096
[  256.461420][ T6875] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.534217][ T6874] Config c/1 of g1 needs at least one function.
[  256.612270][ T6874] udc dummy_udc.0: failed to start g1: -22
[  256.674401][ T6874] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  259.875827][ T6874] UDC core: g1: couldn't find an available UDC or it's busy
[  261.960498][ T6895] loop2: detected capacity change from 0 to 1024
[  265.332882][ T6902] loop3: detected capacity change from 0 to 4096
[  265.454392][ T6902] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  266.027603][ T6902] ntfs3: loop3: Failed to read $AttrDef (-4).
[  266.668850][ T6912] Config c/1 of g1 needs at least one function.
[  266.734690][ T6912] udc dummy_udc.0: failed to start g1: -22
[  266.815247][ T6912] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  266.994621][ T6912] UDC core: g1: couldn't find an available UDC or it's busy
[  274.936299][ T6945] loop2: detected capacity change from 0 to 4096
[  274.956022][ T6945] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  275.974695][ T6954] 0x000000000007-0x000000020000 : ""
[  275.986031][ T6954] ftl_cs: FTL header corrupt!
[  283.218161][ T6983] Config c/1 of g1 needs at least one function.
[  283.224774][ T6983] udc dummy_udc.0: failed to start g1: -22
[  283.230821][ T6983] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  283.315847][ T6983] UDC core: g1: couldn't find an available UDC or it's busy
[  284.150838][ T6988] loop0: detected capacity change from 0 to 4096
[  284.208535][ T6988] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  284.383350][ T6995] 0x000000000007-0x000000020000 : ""
[  284.400531][ T6995] ftl_cs: FTL header corrupt!
[  292.696824][ T7023] Config c/1 of g1 needs at least one function.
[  292.745815][ T7023] udc dummy_udc.0: failed to start g1: -22
[  292.823251][ T7023] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  294.942887][ T7023] UDC core: g1: couldn't find an available UDC or it's busy
[  297.585615][ T7030] loop0: detected capacity change from 0 to 4096
[  297.604114][ T7030] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  297.814485][ T7036] 0x000000000007-0x000000020000 : ""
[  297.833365][ T7036] ftl_cs: FTL header corrupt!
[  301.726693][ T7055] Config c/1 of g1 needs at least one function.
[  301.744040][ T7055] udc dummy_udc.0: failed to start g1: -22
[  301.749952][ T7055] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  301.767321][ T7055] UDC core: g1: couldn't find an available UDC or it's busy
[  304.335846][ T7076] loop2: detected capacity change from 0 to 1024
[  306.471033][ T7089] loop0: detected capacity change from 0 to 128
[  308.942107][ T7091] udc dummy_udc.0: failed to start g1: -19
[  308.964235][ T7091] UDC core: g1: couldn't find an available UDC or it's busy
[  315.905779][ T7119] loop2: detected capacity change from 0 to 1024
[  316.067195][ T7127] udc dummy_udc.0: failed to start g1: -19
[  316.962840][ T7127] UDC core: g1: couldn't find an available UDC or it's busy
[  318.283133][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  318.302529][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  325.465794][ T7168] loop3: detected capacity change from 0 to 4096
[  325.515781][ T7168] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  325.755972][ T7170] 0x000000000007-0x000000020000 : ""
[  325.772810][ T7170] ftl_cs: FTL header corrupt!
[  326.964150][ T7181] loop3: detected capacity change from 0 to 128
[  327.738824][ T7184] udc dummy_udc.0: failed to start g1: -19
[  327.745782][ T7184] UDC core: g1: couldn't find an available UDC or it's busy
[  333.380755][ T7217] loop0: detected capacity change from 0 to 128
[  334.754850][ T7228] loop1: detected capacity change from 0 to 4096
[  334.775828][ T7228] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  336.010155][ T7238] random: crng reseeded on system resumption
[  336.625251][ T7245] 0x000000000007-0x000000020000 : ""
[  336.666706][ T7245] ftl_cs: FTL header corrupt!
[  340.081126][ T7268] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  341.282566][   T28] audit: type=1804 audit(1788031191.413:2): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.432" name="bus" dev="ramfs" ino=13113 res=1 errno=0
[  341.368184][   T28] audit: type=1804 audit(1788031191.473:3): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.432" name="bus" dev="ramfs" ino=13113 res=1 errno=0
[  341.462811][ T7276] loop1: detected capacity change from 0 to 4096
[  341.500795][ T7276] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  346.724855][ T7306] loop2: detected capacity change from 0 to 128
[  347.056062][ T7308] loop1: detected capacity change from 0 to 4096
[  347.080732][ T7308] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  347.956530][ T7309] 0x000000000007-0x000000020000 : ""
[  347.972581][ T7309] ftl_cs: FTL header corrupt!
[  349.493922][ T7313] netlink: 68 bytes leftover after parsing attributes in process `syz.0.443'.
[  355.385334][ T7345] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  355.674080][ T7345] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  356.149445][ T7347] syzkaller0: entered promiscuous mode
[  356.166873][ T7347] syzkaller0: entered allmulticast mode
[  357.226299][ T7358] loop0: detected capacity change from 0 to 1024
[  357.759113][ T7354] loop2: detected capacity change from 0 to 4096
[  357.783990][ T7354] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  358.045231][ T7359] 0x000000000007-0x000000020000 : ""
[  358.071798][ T7359] ftl_cs: FTL header corrupt!
[  359.012884][ T7365] loop2: detected capacity change from 0 to 128
[  365.020100][ T7379] loop0: detected capacity change from 0 to 128
[  367.778424][ T6609] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  367.983770][ T6609] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  367.998511][ T6609] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  368.010872][ T6609] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  368.026154][ T6609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.058406][ T6609] spcp8x5 1-1:1.0: SPCP8x5 converter detected
[  368.098755][ T6609] usb 1-1: SPCP8x5 converter now attached to ttyUSB0
[  368.494598][ T7391] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  368.510808][ T7391] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  368.535934][ T7391] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  368.749220][ T7390] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  368.876619][ T5823] usb 1-1: USB disconnect, device number 5
[  369.216828][ T5823] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  369.301737][ T5823] spcp8x5 1-1:1.0: device disconnected
[  370.235179][ T7411] ip_tables: iptables: counters copy to user failed while replacing table
[  371.018086][ T7412] loop3: detected capacity change from 0 to 128
[  371.697857][ T7420] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  377.006422][ T7432] program syz.2.477 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  377.380017][ T7437] loop2: detected capacity change from 0 to 1024
[  378.417982][ T7433] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  378.459700][ T7433] kvm: requested 35200 ns i8254 timer period limited to 200000 ns
[  378.886833][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  378.893315][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  383.861813][ T7475] loop0: detected capacity change from 0 to 1024
[  386.229898][ T7485] loop2: detected capacity change from 0 to 128
[  391.629127][ T7506] loop1: detected capacity change from 0 to 128
[  393.378915][ T7525] autofs4:pid:7525:autofs_fill_super: called with bogus options
[  397.774939][ T7540] loop0: detected capacity change from 0 to 128
[  399.769094][ T7548] input: syz0 as /devices/virtual/input/input8
[  403.410887][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  406.328794][ T7583] loop2: detected capacity change from 0 to 128
[  413.678565][ T7615] loop3: detected capacity change from 0 to 128
[  414.713567][ T7623] loop2: detected capacity change from 0 to 128
[  414.813827][ T7624] process 'syz.0.536' launched './file1' with NULL argv: empty string added
[  416.619572][ T7641] jffs2: notice: (7641) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  417.644251][ T7646] UDC core: g1: couldn't find an available UDC or it's busy
[  418.072512][ T7601] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  418.420798][ T7601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  418.433507][ T7601] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00
[  418.442838][ T7601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  418.450881][ T7601] usb 1-1: Product: syz
[  418.464117][ T7601] usb 1-1: Manufacturer: syz
[  418.514215][ T7601] ldusb 1-1:1.0: Interrupt in endpoint not found
[  419.790423][ T7666] loop1: detected capacity change from 0 to 128
[  419.805530][ T7650] ldusb 1-1:1.0: Interrupt in endpoint not found
[  419.998084][  T973] usb 1-1: USB disconnect, device number 7
[  420.663360][ T7676] UDC core: g1: couldn't find an available UDC or it's busy
[  420.853409][ T7682] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  420.889024][ T7682] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  426.663978][ T7708] loop2: detected capacity change from 0 to 128
[  426.897248][ T7712] UDC core: g1: couldn't find an available UDC or it's busy
[  427.077545][ T7714] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  428.842903][ T7717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  428.854400][ T7714] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  430.746416][ T7737] loop3: detected capacity change from 0 to 128
[  432.187027][ T7746] UDC core: g1: couldn't find an available UDC or it's busy
[  432.473011][ T7753] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  432.512262][ T7753] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  432.667274][ T7757] ip_tables: iptables: counters copy to user failed while replacing table
[  434.261167][ T7778] loop2: detected capacity change from 0 to 128
[  435.303106][ T7782] ip_tables: iptables: counters copy to user failed while replacing table
[  438.982924][ T7793] loop1: detected capacity change from 0 to 1024
[  440.234336][ T7810] loop3: detected capacity change from 0 to 64
[  440.326762][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  440.333325][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  441.460531][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  443.412501][ T5822] usb 2-1: Using ep0 maxpacket: 16
[  446.834048][ T5822] usb 2-1: device descriptor read/all, error -71
[  447.867745][ T7858] gadgetfs: bound to dummy_udc driver
[  448.183583][ T7601] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  448.292376][    C1] gadgetfs: connected
[  448.319938][ T7601] gadgetfs: disconnected
[  448.593828][ T7856] gadgetfs: suspended from state 2
[  448.892554][ T7601] usb 1-1: device not accepting address 8, error -71
[  449.498238][ T7865] netlink: 'syz.3.615': attribute type 1 has an invalid length.
[  449.597832][ T7865] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.622107][ T7868] bond1: (slave ip6erspan0): making interface the new active one
[  449.784682][ T7868] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  454.851324][ T7923] loop0: detected capacity change from 0 to 1024
[  455.599284][ T7923] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  455.817327][ T7923] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  455.885470][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.257816][ T7969] loop1: detected capacity change from 0 to 128
[  457.158384][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.505504][ T8004] loop0: detected capacity change from 0 to 512
[  463.540226][ T8004] =======================================================
[  463.540226][ T8004] WARNING: The mand mount option has been deprecated and
[  463.540226][ T8004]          and is ignored by this kernel. Remove the mand
[  463.540226][ T8004]          option from the mount to silence this warning.
[  463.540226][ T8004] =======================================================
[  463.714479][ T8007] loop2: detected capacity change from 0 to 128
[  463.866116][ T8004] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  464.706441][ T8009] udc dummy_udc.0: failed to start g1: -19
[  464.722828][ T8009] UDC core: g1: couldn't find an available UDC or it's busy
[  468.777132][ T8029] loop0: detected capacity change from 0 to 512
[  468.899001][ T8029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  469.410938][   T28] audit: type=1326 audit(1788031319.553:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.429039][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.457612][   T28] audit: type=1326 audit(1788031319.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.615378][   T28] audit: type=1326 audit(1788031319.603:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.688043][   T28] audit: type=1326 audit(1788031319.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.769839][   T28] audit: type=1326 audit(1788031319.663:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.837917][   T28] audit: type=1326 audit(1788031319.683:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  469.912460][ T8033] loop1: detected capacity change from 0 to 1024
[  470.025886][   T28] audit: type=1326 audit(1788031319.683:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  470.105127][   T28] audit: type=1326 audit(1788031319.683:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  470.187522][   T28] audit: type=1326 audit(1788031319.683:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  470.234156][   T28] audit: type=1326 audit(1788031319.683:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.3.649" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc193d9e159 code=0x7ffc0000
[  471.183423][ T8046] loop3: detected capacity change from 0 to 128
[  475.875858][ T8052] nbd0: detected capacity change from 0 to 63
[  475.910049][   T51] block nbd0: Receive control failed (result -32)
[  475.977082][ T5845] block nbd0: Dead connection, failed to find a fallback
[  475.985561][ T5845] block nbd0: shutting down sockets
[  475.996329][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  476.021023][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.034599][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  476.043993][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.051799][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  476.060657][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  476.070352][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  476.079686][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.087606][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.095476][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  476.103338][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  476.111376][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  476.120606][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  476.128552][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  476.136653][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  476.145958][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  476.155178][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  476.165272][ T5845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  476.174681][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  476.192769][ T5896] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  476.220939][ T7845] ldm_validate_partition_table(): Disk read failed.
[  476.321518][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.329696][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.345494][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.353220][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.458714][ T7845] Dev nbd0: unable to read RDB block 0
[  476.560593][ T7845]  nbd0: unable to read partition table
[  480.797487][ T7845] ldm_validate_partition_table(): Disk read failed.
[  480.876317][ T7845] Dev nbd0: unable to read RDB block 0
[  480.994789][ T7845]  nbd0: unable to read partition table
[  481.012658][ T5845] blk_print_req_error: 36 callbacks suppressed
[  481.012674][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  481.029064][ T5845] buffer_io_error: 118 callbacks suppressed
[  481.029081][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  481.056536][ T5845] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  481.065924][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  481.076104][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  481.084290][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  481.112514][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  481.121874][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  481.133764][ T5896] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  481.143177][ T5896] Buffer I/O error on dev nbd0, logical block 1, async page read
[  481.150952][ T5896] Buffer I/O error on dev nbd0, logical block 2, async page read
[  481.158912][ T5896] Buffer I/O error on dev nbd0, logical block 3, async page read
[  481.172391][ T5896] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  481.182216][ T5896] Buffer I/O error on dev nbd0, logical block 0, async page read
[  481.190191][ T5896] Buffer I/O error on dev nbd0, logical block 1, async page read
[  481.198972][ T5896] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  481.209067][ T5896] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  481.396182][ T8065] loop3: detected capacity change from 0 to 256
[  481.495647][ T8065] exfat: Deprecated parameter 'utf8'
[  481.795457][ T8065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  483.624613][ T8084] loop0: detected capacity change from 0 to 1024
[  487.810913][ T8100] loop0: detected capacity change from 0 to 128
[  490.717289][ T5844] IPVS: starting estimator thread 0...
[  490.822644][ T8117] IPVS: using max 18 ests per chain, 43200 per kthread
[  492.753451][ T8124] jffs2: notice: (8124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  493.301364][ T8129] input: syz1 as /devices/virtual/input/input9
[  495.974714][ T8141] loop3: detected capacity change from 0 to 1024
[  496.050776][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'.
[  497.901141][ T8148] loop0: detected capacity change from 0 to 131072
[  497.942722][ T8148] F2FS-fs (loop0): invalid crc value
[  497.975756][ T8148] F2FS-fs (loop0): Found nat_bits in checkpoint
[  498.039424][ T8148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  501.243589][ T8183] loop1: detected capacity change from 0 to 64
[  501.436343][ T8187] loop3: detected capacity change from 0 to 128
[  502.178693][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  502.199293][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  502.346297][ T5778] hfs: node 4:3 still has 1 user(s)!
[  503.482122][ T8198] loop2: detected capacity change from 0 to 1024
[  507.961076][ T8237] loop3: detected capacity change from 0 to 128
[  508.556881][ T8240] loop1: detected capacity change from 0 to 256
[  509.463158][ T8249] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  509.558893][ T8250] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  510.570723][ T8260] autofs4:pid:8260:autofs_fill_super: called with bogus options
[  513.464436][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  514.616274][ T8291] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  514.667407][ T8291] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  516.189906][ T8309] FAULT_INJECTION: forcing a failure.
[  516.189906][ T8309] name failslab, interval 1, probability 0, space 0, times 1
[  516.272224][ T8309] CPU: 1 PID: 8309 Comm: syz.0.730 Not tainted syzkaller #0
[  516.279725][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  516.289854][ T8309] Call Trace:
[  516.293195][ T8309]  <TASK>
[  516.296168][ T8309]  dump_stack_lvl+0x18c/0x250
[  516.301019][ T8309]  ? show_regs_print_info+0x20/0x20
[  516.306267][ T8309]  ? load_image+0x420/0x420
[  516.310850][ T8309]  ? __might_sleep+0xe0/0xe0
[  516.315594][ T8309]  ? __lock_acquire+0x7d80/0x7d80
[  516.320694][ T8309]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[  516.327446][ T8309]  should_fail_ex+0x394/0x4c0
[  516.332237][ T8309]  should_failslab+0x9/0x20
[  516.336798][ T8309]  slab_pre_alloc_hook+0x59/0x300
[  516.341910][ T8309]  ? pcpu_alloc+0x11e7/0x1880
[  516.346638][ T8309]  ? percpu_ref_init+0xc3/0x340
[  516.351535][ T8309]  __kmem_cache_alloc_node+0x53/0x250
[  516.356978][ T8309]  ? percpu_ref_init+0xc3/0x340
[  516.361898][ T8309]  ? io_allocate_scq_urings+0x620/0x620
[  516.367544][ T8309]  kmalloc_trace+0x2a/0xe0
[  516.372024][ T8309]  percpu_ref_init+0xc3/0x340
[  516.376758][ T8309]  io_ring_ctx_alloc+0x205/0xc10
[  516.381758][ T8309]  io_uring_create+0x2df/0x1330
[  516.386677][ T8309]  ? __might_fault+0xc6/0x120
[  516.391398][ T8309]  ? __might_fault+0xaa/0x120
[  516.396130][ T8309]  __se_sys_io_uring_setup+0x29f/0x2b0
[  516.401702][ T8309]  ? __x64_sys_io_uring_setup+0x60/0x60
[  516.407338][ T8309]  ? lockdep_hardirqs_on+0x98/0x150
[  516.412626][ T8309]  do_syscall_64+0x55/0xb0
[  516.417146][ T8309]  ? clear_bhb_loop+0x40/0x90
[  516.422019][ T8309]  ? clear_bhb_loop+0x40/0x90
[  516.426757][ T8309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.432723][ T8309] RIP: 0033:0x7efecab9e159
[  516.437176][ T8309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.456836][ T8309] RSP: 002b:00007efecbb45fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  516.465309][ T8309] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007efecab9e159
[  516.473313][ T8309] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 0000000000005ba4
[  516.481320][ T8309] RBP: 00007efecac35024 R08: 0000000000000000 R09: 0000000000000000
[  516.489338][ T8309] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0
[  516.497337][ T8309] R13: 0000200000000300 R14: 0000200000000280 R15: 00007fffcfdcdd98
[  516.505357][ T8309]  </TASK>
[  521.197634][ T8329] loop0: detected capacity change from 0 to 128
[  522.230556][ T8332] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  522.265413][ T8332] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  523.203178][ T8340] kvm: requested 133257 ns i8254 timer period limited to 200000 ns
[  523.250467][ T8340] kvm: requested 147504 ns i8254 timer period limited to 200000 ns
[  523.285076][ T8340] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[  523.308547][ T8340] kvm: requested 61180 ns i8254 timer period limited to 200000 ns
[  523.330208][ T8340] kvm: requested 9219 ns i8254 timer period limited to 200000 ns
[  523.351982][ T8340] kvm: requested 41066 ns i8254 timer period limited to 200000 ns
[  523.381298][ T8340] kvm: requested 123200 ns i8254 timer period limited to 200000 ns
[  523.391485][ T8340] kvm: requested 42742 ns i8254 timer period limited to 200000 ns
[  523.407302][ T8340] kvm: requested 59504 ns i8254 timer period limited to 200000 ns
[  523.425481][ T8340] kvm: requested 59504 ns i8254 timer period limited to 200000 ns
[  526.283329][ T8370] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  526.302638][ T8370] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  528.734498][ T8385] loop3: detected capacity change from 0 to 16
[  528.798087][ T8385] erofs: (device loop3): mounted with root inode @ nid 36.
[  533.054034][ T8400] loop2: detected capacity change from 0 to 128
[  536.357630][ T8403] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  536.461334][ T8404] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  538.486327][ T8415] netlink: 'syz.2.760': attribute type 10 has an invalid length.
[  539.436887][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.453872][ T8414] Cannot find add_set index 1 as target
[  539.515761][ T8415] bridge_slave_1: left allmulticast mode
[  539.521604][ T8415] bridge_slave_1: left promiscuous mode
[  539.528185][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.607588][ T8415] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  543.646383][ T8432] rtc_cmos 00:00: Alarms can be up to one day in the future
[  544.948585][ T8436] loop2: detected capacity change from 0 to 128
[  546.107870][   T51] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[  546.467359][ T8444] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  546.476529][ T8444] CPU: 1 PID: 8444 Comm: syz.0.772 Not tainted syzkaller #0
[  546.483886][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.493992][ T8444] Call Trace:
[  546.497406][ T8444]  <TASK>
[  546.500391][ T8444]  dump_stack_lvl+0x18c/0x250
[  546.505137][ T8444]  ? show_regs_print_info+0x20/0x20
[  546.510396][ T8444]  ? load_image+0x420/0x420
[  546.514973][ T8444]  sysfs_create_dir_ns+0x26e/0x2a0
[  546.520186][ T8444]  ? __lock_acquire+0x7d80/0x7d80
[  546.525271][ T8444]  ? sysfs_warn_dup+0xa0/0xa0
[  546.530085][ T8444]  ? do_raw_spin_unlock+0x121/0x230
[  546.535349][ T8444]  kobject_add_internal+0x617/0xc90
[  546.540721][ T8444]  kobject_add+0x164/0x240
[  546.545208][ T8444]  ? kobject_init+0x1d0/0x1d0
[  546.549956][ T8444]  ? get_device_parent+0x366/0x390
[  546.555191][ T8444]  device_add+0x3fa/0xc40
[  546.559584][ T8444]  tty_register_device_attr+0x425/0x950
[  546.565231][ T8444]  ? tty_register_device+0x30/0x30
[  546.570408][ T8444]  ? tty_port_init+0x132/0x1a0
[  546.575222][ T8444]  ? gsm_dlci_alloc+0x32a/0x630
[  546.580131][ T8444]  ? __might_fault+0xaa/0x120
[  546.584862][ T8444]  gsm_activate_mux+0x110/0x2a0
[  546.589777][ T8444]  gsmld_ioctl+0x12ca/0x1900
[  546.594436][ T8444]  ? gsmld_write+0x120/0x120
[  546.599265][ T8444]  ? __init_ldsem+0x150/0x150
[  546.603995][ T8444]  ? __fget_files+0x28/0x460
[  546.608690][ T8444]  ? gsmld_write+0x120/0x120
[  546.613349][ T8444]  tty_ioctl+0x9b5/0xdc0
[  546.617650][ T8444]  ? tty_get_icount+0xb0/0xb0
[  546.622379][ T8444]  __se_sys_ioctl+0xfd/0x170
[  546.627023][ T8444]  do_syscall_64+0x55/0xb0
[  546.631489][ T8444]  ? clear_bhb_loop+0x40/0x90
[  546.636224][ T8444]  ? clear_bhb_loop+0x40/0x90
[  546.640953][ T8444]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.646905][ T8444] RIP: 0033:0x7efecab9e159
[  546.651371][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.671036][ T8444] RSP: 002b:00007efecbb04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  546.679516][ T8444] RAX: ffffffffffffffda RBX: 00007efecae26180 RCX: 00007efecab9e159
[  546.687545][ T8444] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008
[  546.695568][ T8444] RBP: 00007efecac35024 R08: 0000000000000000 R09: 0000000000000000
[  546.703676][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  546.711694][ T8444] R13: 00007efecae26218 R14: 00007efecae26180 R15: 00007fffcfdcdd98
[  546.719735][ T8444]  </TASK>
[  546.767656][ T8444] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  547.981755][ T8458] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  548.024323][ T8458] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  549.351734][ T8467] loop0: detected capacity change from 0 to 1024
[  552.942553][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  553.142619][    T9] usb 3-1: Using ep0 maxpacket: 16
[  553.159090][    T9] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  553.205144][    T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  553.228439][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.263862][    T9] usb 3-1: Product: syz
[  553.292445][    T9] usb 3-1: Manufacturer: syz
[  553.302499][    T9] usb 3-1: SerialNumber: syz
[  553.328564][    T9] r8152-cfgselector 3-1: config 0 descriptor??
[  554.167109][ T8476] loop3: detected capacity change from 0 to 131072
[  554.242063][ T8476] F2FS-fs (loop3): invalid crc value
[  554.318158][ T8476] F2FS-fs (loop3): Found nat_bits in checkpoint
[  554.377414][ T8476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  555.401286][    T9] r8152-cfgselector 3-1: Needed 1 retries to read version
[  555.625172][    T9] r8152-cfgselector 3-1: Unknown version 0x0000
[  555.667881][    T9] r8152-cfgselector 3-1: USB disconnect, device number 4
[  559.556983][ T8511] loop2: detected capacity change from 0 to 1024
[  559.593576][ T8510] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  559.605501][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.664458][ T8510] bridge_slave_1: left allmulticast mode
[  559.670217][ T8510] bridge_slave_1: left promiscuous mode
[  559.676423][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.695553][ T8510] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  559.733280][    C0] Illegal XDP return value 16128 on prog  (id 15) dev bridge_slave_1, expect packet loss!
[  563.207754][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  563.216408][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  564.044651][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  564.333758][ T5844] usb 1-1: Using ep0 maxpacket: 16
[  564.435132][ T5844] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  564.554224][ T5844] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  564.654855][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.758278][ T5844] usb 1-1: Product: syz
[  564.811352][ T5844] usb 1-1: Manufacturer: syz
[  564.878357][ T5844] usb 1-1: SerialNumber: syz
[  565.009990][ T5844] r8152-cfgselector 1-1: config 0 descriptor??
[  565.597174][ T5844] r8152-cfgselector 1-1: Needed 1 retries to read version
[  568.554165][ T5844] r8152-cfgselector 1-1: Unknown version 0x0000
[  569.112517][ T5844] r8152-cfgselector 1-1: USB disconnect, device number 10
[  569.339837][ T8561] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  569.349063][ T8561] CPU: 0 PID: 8561 Comm: syz.3.805 Not tainted syzkaller #0
[  569.356463][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  569.366563][ T8561] Call Trace:
[  569.369884][ T8561]  <TASK>
[  569.372887][ T8561]  dump_stack_lvl+0x18c/0x250
[  569.377630][ T8561]  ? show_regs_print_info+0x20/0x20
[  569.382885][ T8561]  ? load_image+0x420/0x420
[  569.387454][ T8561]  sysfs_create_dir_ns+0x26e/0x2a0
[  569.392651][ T8561]  ? __lock_acquire+0x7d80/0x7d80
[  569.397762][ T8561]  ? sysfs_warn_dup+0xa0/0xa0
[  569.402486][ T8561]  ? preempt_schedule_thunk+0x1a/0x30
[  569.407972][ T8561]  kobject_add_internal+0x617/0xc90
[  569.413248][ T8561]  kobject_add+0x164/0x240
[  569.417752][ T8561]  ? kobject_init+0x1d0/0x1d0
[  569.422488][ T8561]  ? get_device_parent+0x366/0x390
[  569.427655][ T8561]  device_add+0x3fa/0xc40
[  569.432039][ T8561]  tty_register_device_attr+0x425/0x950
[  569.437648][ T8561]  ? tty_register_device+0x30/0x30
[  569.442822][ T8561]  ? tty_port_init+0x132/0x1a0
[  569.447629][ T8561]  ? gsm_dlci_alloc+0x32a/0x630
[  569.452530][ T8561]  ? __might_fault+0xaa/0x120
[  569.457263][ T8561]  gsm_activate_mux+0x110/0x2a0
[  569.462182][ T8561]  gsmld_ioctl+0x12ca/0x1900
[  569.466837][ T8561]  ? gsmld_write+0x120/0x120
[  569.471513][ T8561]  ? __init_ldsem+0x150/0x150
[  569.476236][ T8561]  ? lockdep_hardirqs_on+0x98/0x150
[  569.481497][ T8561]  ? tty_get_icount+0xb0/0xb0
[  569.486238][ T8561]  ? gsmld_write+0x120/0x120
[  569.490885][ T8561]  tty_ioctl+0x9b5/0xdc0
[  569.495182][ T8561]  ? tty_get_icount+0xb0/0xb0
[  569.499909][ T8561]  __se_sys_ioctl+0xfd/0x170
[  569.504560][ T8561]  do_syscall_64+0x55/0xb0
[  569.509069][ T8561]  ? clear_bhb_loop+0x40/0x90
[  569.513796][ T8561]  ? clear_bhb_loop+0x40/0x90
[  569.518527][ T8561]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  569.524556][ T8561] RIP: 0033:0x7fc193d9e159
[  569.529013][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.548672][ T8561] RSP: 002b:00007fc194ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  569.557144][ T8561] RAX: ffffffffffffffda RBX: 00007fc194026180 RCX: 00007fc193d9e159
[  569.565305][ T8561] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008
[  569.573326][ T8561] RBP: 00007fc193e35024 R08: 0000000000000000 R09: 0000000000000000
[  569.581359][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.589418][ T8561] R13: 00007fc194026218 R14: 00007fc194026180 R15: 00007ffea6477db8
[  569.597460][ T8561]  </TASK>
[  569.649140][ T8561] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  573.945060][ T8582] loop2: detected capacity change from 0 to 128
[  574.465754][ T8590] nfs4: Unknown parameter 's'
[  576.793396][ T8596] loop2: detected capacity change from 0 to 1024
[  577.942665][ T5821] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  578.582529][ T5821] usb 4-1: Using ep0 maxpacket: 16
[  578.619925][ T5821] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  578.744423][ T5821] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  578.845902][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.937819][ T5821] usb 4-1: Product: syz
[  578.973662][ T5821] usb 4-1: Manufacturer: syz
[  579.010862][ T5821] usb 4-1: SerialNumber: syz
[  579.062216][ T8616] loop2: detected capacity change from 0 to 512
[  579.101092][ T5821] r8152-cfgselector 4-1: config 0 descriptor??
[  579.112349][ T8616] EXT4-fs (loop2): Test dummy encryption mode enabled
[  579.119335][ T8616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  579.136423][ T8616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  579.183468][ T8616] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  579.208691][ T8616] EXT4-fs (loop2): 1 truncate cleaned up
[  579.233058][ T8616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  579.358754][ T5821] r8152-cfgselector 4-1: Needed 1 retries to read version
[  579.682900][ T8624] nfs4: Unknown parameter 's'
[  581.069754][ T5821] r8152-cfgselector 4-1: Unknown version 0x0000
[  581.113348][ T5821] r8152-cfgselector 4-1: USB disconnect, device number 4
[  581.272019][ T8616] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  584.083539][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.815858][ T8644] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  584.855352][ T8644] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  585.239943][ T8650] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  585.248679][ T8650] CPU: 0 PID: 8650 Comm: syz.2.831 Not tainted syzkaller #0
[  585.256020][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  585.266134][ T8650] Call Trace:
[  585.269456][ T8650]  <TASK>
[  585.272429][ T8650]  dump_stack_lvl+0x18c/0x250
[  585.277178][ T8650]  ? show_regs_print_info+0x20/0x20
[  585.282432][ T8650]  ? load_image+0x420/0x420
[  585.286995][ T8650]  sysfs_create_dir_ns+0x26e/0x2a0
[  585.292159][ T8650]  ? __lock_acquire+0x7d80/0x7d80
[  585.297239][ T8650]  ? sysfs_warn_dup+0xa0/0xa0
[  585.301966][ T8650]  ? rcu_is_watching+0x15/0xb0
[  585.306793][ T8650]  ? do_raw_spin_unlock+0x121/0x230
[  585.312059][ T8650]  kobject_add_internal+0x617/0xc90
[  585.317333][ T8650]  kobject_add+0x164/0x240
[  585.321818][ T8650]  ? kobject_init+0x1d0/0x1d0
[  585.326557][ T8650]  ? get_device_parent+0x366/0x390
[  585.331735][ T8650]  device_add+0x3fa/0xc40
[  585.336132][ T8650]  tty_register_device_attr+0x425/0x950
[  585.341744][ T8650]  ? tty_register_device+0x30/0x30
[  585.346921][ T8650]  ? tty_port_init+0x132/0x1a0
[  585.351734][ T8650]  ? gsm_dlci_alloc+0x32a/0x630
[  585.356641][ T8650]  ? __might_fault+0xaa/0x120
[  585.361408][ T8650]  gsm_activate_mux+0x110/0x2a0
[  585.366334][ T8650]  gsmld_ioctl+0x12ca/0x1900
[  585.370997][ T8650]  ? gsmld_write+0x120/0x120
[  585.375654][ T8650]  ? __init_ldsem+0x150/0x150
[  585.380389][ T8650]  ? lockdep_hardirqs_on+0x98/0x150
[  585.385650][ T8650]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  585.391344][ T8650]  ? gsmld_write+0x120/0x120
[  585.396028][ T8650]  tty_ioctl+0x9b5/0xdc0
[  585.400332][ T8650]  ? tty_get_icount+0xb0/0xb0
[  585.405062][ T8650]  __se_sys_ioctl+0xfd/0x170
[  585.409719][ T8650]  do_syscall_64+0x55/0xb0
[  585.414237][ T8650]  ? clear_bhb_loop+0x40/0x90
[  585.418963][ T8650]  ? clear_bhb_loop+0x40/0x90
[  585.423697][ T8650]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  585.429650][ T8650] RIP: 0033:0x7f5fb0b9e159
[  585.434117][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.453774][ T8650] RSP: 002b:00007f5faedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  585.462244][ T8650] RAX: ffffffffffffffda RBX: 00007f5fb0e26180 RCX: 00007f5fb0b9e159
[  585.470261][ T8650] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000008
[  585.478273][ T8650] RBP: 00007f5fb0c35024 R08: 0000000000000000 R09: 0000000000000000
[  585.486291][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  585.494302][ T8650] R13: 00007f5fb0e26218 R14: 00007f5fb0e26180 R15: 00007fff4a9042c8
[  585.502333][ T8650]  </TASK>
[  585.506581][ T8650] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  586.349919][ T8659] nfs4: Unknown parameter 's'
[  587.434868][ T8660] loop0: detected capacity change from 0 to 128
[  588.232510][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  588.453395][   T23] usb 1-1: Using ep0 maxpacket: 32
[  588.497700][   T23] usb 1-1: config 2 has an invalid interface number: 45 but max is 0
[  588.517759][   T23] usb 1-1: config 2 has no interface number 0
[  588.530932][   T23] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  588.562421][   T23] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  588.579867][   T23] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  588.592307][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.610358][   T23] usb 1-1: Product: syz
[  588.615320][   T23] usb 1-1: Manufacturer: syz
[  588.620385][   T23] usb 1-1: SerialNumber: syz
[  588.631070][   T23] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected
[  588.656777][   T23] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  589.857543][   T23] usb 1-1: USB disconnect, device number 11
[  589.991583][   T23] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  590.013113][   T23] kobil_sct 1-1:2.45: device disconnected
[  593.113549][ T8689] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  593.180598][ T8689] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  594.351524][ T8701] loop2: detected capacity change from 0 to 64
[  594.852726][   T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  595.118632][   T23] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  595.196225][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.220327][   T23] usb 1-1: Product: syz
[  595.230208][   T23] usb 1-1: Manufacturer: syz
[  595.385540][   T23] usb 1-1: SerialNumber: syz
[  595.416132][   T23] usb 1-1: config 0 descriptor??
[  595.457857][   T23] ch341 1-1:0.0: ch341-uart converter detected
[  595.794734][ T8708] loop3: detected capacity change from 0 to 1024
[  597.482047][   T23] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  597.675570][ T5822] usb 1-1: USB disconnect, device number 12
[  597.723871][ T5822] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  597.743490][ T5822] ch341 1-1:0.0: device disconnected
[  597.835049][ T8730] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  598.085632][ T5844] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  598.168658][ T8733] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  598.184299][ T8733] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  598.292341][ T5844] usb 4-1: Using ep0 maxpacket: 32
[  598.310639][ T5844] usb 4-1: config 2 has an invalid interface number: 45 but max is 0
[  598.345229][ T5844] usb 4-1: config 2 has no interface number 0
[  599.222611][ T5844] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  599.303622][ T5844] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  599.409506][ T5844] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  599.460710][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.492464][ T5844] usb 4-1: Product: syz
[  599.496816][ T5844] usb 4-1: Manufacturer: syz
[  599.501477][ T5844] usb 4-1: SerialNumber: syz
[  599.686464][ T5844] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected
[  601.892014][ T5844] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  603.130188][ T5844] usb 4-1: USB disconnect, device number 5
[  603.140195][ T5844] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  603.152866][ T5844] kobil_sct 4-1:2.45: device disconnected
[  607.084269][ T8771] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  607.110245][ T8771] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  608.868137][ T8782] rtc_cmos 00:00: Alarms can be up to one day in the future
[  610.447736][ T8786] loop2: detected capacity change from 0 to 1024
[  611.740732][ T8790] loop3: detected capacity change from 0 to 512
[  611.822429][ T8790] EXT4-fs (loop3): Test dummy encryption mode enabled
[  611.829384][ T8790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  611.922979][ T8790] EXT4-fs (loop3): 1 truncate cleaned up
[  611.930091][ T8790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.288393][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.408221][ T8816] loop0: detected capacity change from 0 to 128
[  618.437094][ T8817] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  618.475067][ T8817] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  620.246959][ T8832] loop0: detected capacity change from 0 to 512
[  620.467304][ T8832] EXT4-fs (loop0): Test dummy encryption mode enabled
[  621.264077][ T8832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  621.304481][ T8832] EXT4-fs (loop0): 1 truncate cleaned up
[  621.311639][ T8832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.007575][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.100254][ T8845] loop2: detected capacity change from 0 to 128
[  624.075153][ T8857] loop2: detected capacity change from 0 to 128
[  624.648921][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  624.661862][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  625.219035][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  626.169519][   T23] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  628.258372][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.266926][   T23] usb 4-1: Product: syz
[  628.271179][   T23] usb 4-1: Manufacturer: syz
[  628.275892][   T23] usb 4-1: SerialNumber: syz
[  628.286719][   T23] usb 4-1: config 0 descriptor??
[  628.299289][   T23] usb 4-1: can't set config #0, error -71
[  628.314027][   T23] usb 4-1: USB disconnect, device number 6
[  629.129553][ T8882] loop3: detected capacity change from 0 to 1024
[  630.646795][ T8894] loop0: detected capacity change from 0 to 128
[  638.392551][ T8935] misc userio: Invalid payload size
[  641.065310][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  641.954335][ T8952] loop3: detected capacity change from 0 to 1024
[  642.758782][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.782326][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  642.791445][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.004844][    T9] usb 3-1: can't set config #1, error -71
[  643.041822][    T9] usb 3-1: USB disconnect, device number 5
[  643.133376][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  643.133390][   T28] audit: type=1804 audit(1788031493.263:22): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.923" name="bus" dev="ramfs" ino=20183 res=1 errno=0
[  643.212375][   T28] audit: type=1804 audit(1788031493.263:23): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.923" name="bus" dev="ramfs" ino=20183 res=1 errno=0
[  643.305996][ T8958] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  643.351247][ T8958] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  647.329209][ T8983] loop3: detected capacity change from 0 to 128
[  648.067561][ T8986] loop2: detected capacity change from 0 to 1024
[  649.481849][ T8998] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  649.501138][ T8998] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  650.436772][ T9000] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  650.503825][   T28] audit: type=1804 audit(1788031500.643:24): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.939" name="bus" dev="ramfs" ino=20272 res=1 errno=0
[  650.572577][   T28] audit: type=1804 audit(1788031500.683:25): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.939" name="bus" dev="ramfs" ino=20272 res=1 errno=0
[  652.825286][ T9010] loop0: detected capacity change from 0 to 1024
[  660.157147][ T9041] loop0: detected capacity change from 0 to 128
[  661.097908][ T9045] loop2: detected capacity change from 0 to 1024
[  663.257285][ T9054] loop0: detected capacity change from 0 to 128
[  664.736039][ T9060] loop0: detected capacity change from 0 to 128
[  665.569892][ T9067] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  665.626498][ T9067] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  668.966483][ T9085] loop2: detected capacity change from 0 to 1024
[  673.620724][ T9098] loop3: detected capacity change from 0 to 128
[  674.065682][ T9104] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  674.093677][ T9104] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  680.138261][ T9125] loop2: detected capacity change from 0 to 1024
[  681.091679][ T9132] loop0: detected capacity change from 0 to 1024
[  683.525469][ T9132] hfsplus: failed to load extents file
[  684.714281][ T9144] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  684.749685][ T9144] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  685.716482][ T9150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.979'.
[  686.433312][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  686.439694][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  687.792655][ T9157] ip_tables: iptables: counters copy to user failed while replacing table
[  690.633174][ T9166] loop3: detected capacity change from 0 to 1024
[  693.226950][ T9173] loop0: detected capacity change from 0 to 128
[  695.750940][ T9187] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  697.928247][ T9187] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  701.528419][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.537679][ T5845] buffer_io_error: 10 callbacks suppressed
[  701.537689][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  701.551952][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  701.559955][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  701.792765][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  701.801828][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.812324][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  701.820401][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  701.828243][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  701.836163][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  701.844493][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.854461][ T5845] Buffer I/O error on dev nbd0, logical block 0, async page read
[  701.862346][ T5845] Buffer I/O error on dev nbd0, logical block 1, async page read
[  701.871526][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.880933][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.890291][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.899706][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.909101][ T9206] ldm_validate_partition_table(): Disk read failed.
[  701.915860][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.925257][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.934580][ T5845] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1
[  701.944170][ T9206] Dev nbd0: unable to read RDB block 0
[  701.950737][ T9206]  nbd0: unable to read partition table
[  702.180038][ T5141] ldm_validate_partition_table(): Disk read failed.
[  702.214005][ T5141] Dev nbd0: unable to read RDB block 0
[  702.232283][ T5141]  nbd0: unable to read partition table
[  702.277778][ T5141] ldm_validate_partition_table(): Disk read failed.
[  702.829768][ T9214] rtc_cmos 00:00: Alarms can be up to one day in the future
[  703.920330][ T5141] Dev nbd0: unable to read RDB block 0
[  703.980592][ T5141]  nbd0: unable to read partition table
[  704.070702][ T8967] ldm_validate_partition_table(): Disk read failed.
[  704.081882][ T8967] Dev nbd0: unable to read RDB block 0
[  704.090707][ T8967]  nbd0: unable to read partition table
[  704.110605][ T8967] ldm_validate_partition_table(): Disk read failed.
[  704.122354][ T8967] Dev nbd0: unable to read RDB block 0
[  704.129913][ T8967]  nbd0: unable to read partition table
[  709.998246][ T9248] loop2: detected capacity change from 0 to 1024
[  711.568154][ T9255] rtc_cmos 00:00: Alarms can be up to one day in the future
[  713.702556][ T9264] create_pit_timer: 15 callbacks suppressed
[  713.702573][ T9264] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  714.102080][ T9264] kvm: requested 35200 ns i8254 timer period limited to 200000 ns
[  718.719331][ T9287] input: syz0 as /devices/virtual/input/input12
[  719.626250][ T9294] loop3: detected capacity change from 0 to 128
[  720.841824][ T9305] loop2: detected capacity change from 0 to 1024
[  725.419249][ T9316] rtc_cmos 00:00: Alarms can be up to one day in the future
[  728.009737][ T9331] loop0: detected capacity change from 0 to 128
[  728.535489][ T9336] ip_tables: iptables: counters copy to user failed while replacing table
[  734.323334][ T9361] rtc_cmos 00:00: Alarms can be up to one day in the future
[  736.264214][ T9367] loop3: detected capacity change from 0 to 1024
[  739.011278][ T9383] jffs2: notice: (9383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  740.072571][ T9392] ip_tables: iptables: counters copy to user failed while replacing table
[  741.173594][ T9390] rtc_cmos 00:00: Alarms can be up to one day in the future
[  744.679436][ T9402] loop2: detected capacity change from 0 to 1024
[  746.653566][ T9416] ip_tables: iptables: counters copy to user failed while replacing table
[  748.242663][ T9434] loop2: detected capacity change from 0 to 1024
[  748.982473][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  748.988851][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  753.060414][ T9450] ip_tables: iptables: counters copy to user failed while replacing table
[  755.505615][ T9472] loop2: detected capacity change from 0 to 1024
[  755.950343][ T9476] loop3: detected capacity change from 0 to 128
[  756.976667][ T9487] loop3: detected capacity change from 0 to 128
[  758.552780][ T9553] ip_tables: iptables: counters copy to user failed while replacing table
[  759.575351][ T9559] gadgetfs: bound to dummy_udc driver
[  761.984695][ T9572] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  761.994580][ T9572] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  765.381653][ T9584] loop0: detected capacity change from 0 to 128
[  766.742583][ T9599] ip_tables: iptables: counters copy to user failed while replacing table
[  768.803015][ T9606] rtc_cmos 00:00: Alarms can be up to one day in the future
[  769.324468][ T9613] gadgetfs: bound to dummy_udc driver
[  775.880993][ T9677] loop3: detected capacity change from 0 to 1024
[  777.227207][ T9687] loop2: detected capacity change from 0 to 128
[  778.024173][ T9698] loop0: detected capacity change from 0 to 128
[  778.856901][ T9701] gadgetfs: bound to dummy_udc driver
[  779.427391][ T9708] nbd1: detected capacity change from 0 to 63
[  780.294092][ T9711] loop0: detected capacity change from 0 to 128
[  782.874531][   T51] block nbd1: Receive control failed (result -104)
[  783.184575][ T9719] loop3: detected capacity change from 0 to 512
[  783.964624][ T9719] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  788.211081][ T9745] loop0: detected capacity change from 0 to 128
[  790.805454][ T9753] loop2: detected capacity change from 0 to 128
[  791.949458][ T9760] loop0: detected capacity change from 0 to 1024
[  797.394313][ T9772] jffs2: notice: (9772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  797.639056][ T9780] loop2: detected capacity change from 0 to 128
[  798.677217][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.685220][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  798.712779][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.721223][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  808.882411][ T9808] nbd2: detected capacity change from 0 to 63
[  808.959342][   T51] block nbd2: Receive control failed (result -32)
[  808.973930][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  808.980311][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  808.991549][ T6778] block nbd2: Dead connection, failed to find a fallback
[  808.998975][ T6778] block nbd2: shutting down sockets
[  809.004660][ T6778] blk_print_req_error: 232 callbacks suppressed
[  809.004676][ T6778] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.020469][ T6778] buffer_io_error: 330 callbacks suppressed
[  809.020485][ T6778] Buffer I/O error on dev nbd2, logical block 0, async page read
[  809.034516][ T6778] Buffer I/O error on dev nbd2, logical block 1, async page read
[  809.042434][ T6778] Buffer I/O error on dev nbd2, logical block 2, async page read
[  809.050306][ T6778] Buffer I/O error on dev nbd2, logical block 3, async page read
[  809.058846][ T6778] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.072233][ T6778] Buffer I/O error on dev nbd2, logical block 0, async page read
[  809.080094][ T6778] Buffer I/O error on dev nbd2, logical block 1, async page read
[  809.088126][ T6778] Buffer I/O error on dev nbd2, logical block 2, async page read
[  809.095970][ T6778] Buffer I/O error on dev nbd2, logical block 3, async page read
[  809.104922][ T6778] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.114062][ T6778] Buffer I/O error on dev nbd2, logical block 0, async page read
[  809.121847][ T6778] Buffer I/O error on dev nbd2, logical block 1, async page read
[  809.130090][ T6778] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  809.139451][ T6778] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  809.148826][ T6778] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  809.162956][ T5896] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  809.173379][ T5896] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.184529][ T5896] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.196386][ T5896] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  809.217140][ T9705] ldm_validate_partition_table(): Disk read failed.
[  809.257800][ T9705] Dev nbd2: unable to read RDB block 0
[  809.267913][ T9815] loop2: detected capacity change from 0 to 64
[  809.283633][ T9705]  nbd2: unable to read partition table
[  809.328692][ T9705] ldm_validate_partition_table(): Disk read failed.
[  809.360600][ T9705] Dev nbd2: unable to read RDB block 0
[  809.382725][ T9705]  nbd2: unable to read partition table
[  809.515126][ T9818] loop0: detected capacity change from 0 to 128
[  809.530999][ T5781] hfs: node 4:3 still has 1 user(s)!
[  809.610584][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 30 seconds
[  811.547253][ T9829] jffs2: notice: (9829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  815.254867][ T9847] loop0: detected capacity change from 0 to 64
[  817.940288][ T5776] hfs: node 4:3 still has 1 user(s)!
[  817.956985][ T9853] loop2: detected capacity change from 0 to 128
[  819.871108][ T9861] loop2: detected capacity change from 0 to 1024
[  821.532013][ T9874] loop0: detected capacity change from 0 to 256
[  821.562561][ T9874] exfat: Deprecated parameter 'utf8'
[  821.588302][ T9874] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  822.084976][ T9882] loop0: detected capacity change from 0 to 128
[  823.292830][ T9889] rtc_cmos 00:00: Alarms can be up to one day in the future
[  825.280195][ T9901] loop0: detected capacity change from 0 to 1024
[  829.886929][ T9918] loop2: detected capacity change from 0 to 128
[  831.655044][ T9930] ip_tables: iptables: counters copy to user failed while replacing table
[  832.380732][ T9933] loop0: detected capacity change from 0 to 256
[  832.440388][ T9933] exfat: Deprecated parameter 'utf8'
[  832.790118][ T9933] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  837.810338][ T9963] ip_tables: iptables: counters copy to user failed while replacing table
[  841.042349][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 60 seconds
[  843.439004][ T9990] ip_tables: iptables: counters copy to user failed while replacing table
[  844.022195][ T9993] loop3: detected capacity change from 0 to 1024
[  846.038701][T10000] loop2: detected capacity change from 0 to 128
[  850.038977][T10024] ip_tables: iptables: counters copy to user failed while replacing table
[  856.914772][T10041] loop0: detected capacity change from 0 to 128
[  857.406968][T10051] ip_tables: iptables: counters copy to user failed while replacing table
[  860.561539][T10070] loop3: detected capacity change from 0 to 1024
[  861.565743][T10074] loop2: detected capacity change from 0 to 128
[  867.450474][T10099] loop0: detected capacity change from 0 to 1024
[  868.318586][T10103] loop3: detected capacity change from 0 to 128
[  868.672805][T10110] loop2: detected capacity change from 0 to 128
[  869.462312][T10115] ip_tables: iptables: counters copy to user failed while replacing table
[  870.573640][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  870.580139][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  872.648741][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 90 seconds
[  876.128047][T10153] ip_tables: iptables: counters copy to user failed while replacing table
[  881.675134][T10184] ip_tables: iptables: counters copy to user failed while replacing table
[  883.311088][T10186] loop0: detected capacity change from 0 to 1024
[  884.921207][T10199] loop2: detected capacity change from 0 to 128
[  886.485132][T10208] syzkaller0: entered promiscuous mode
[  886.540191][T10208] syzkaller0: entered allmulticast mode
[  888.747404][ T5141] udevd[5141]: worker [9679] /devices/virtual/block/nbd1 is taking a long time
[  889.571592][T10215] ip_tables: iptables: counters copy to user failed while replacing table
[  899.826472][T10262] ip_tables: iptables: counters copy to user failed while replacing table
[  903.101932][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 120 seconds
[  903.830942][ T9812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  903.848714][ T9812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  903.857702][ T9812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  904.040163][T10286] ip_tables: iptables: counters copy to user failed while replacing table
[  904.172768][ T9812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  904.180716][ T9812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  904.188280][ T9812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  905.660912][T10283] chnl_net:caif_netlink_parms(): no params data found
[  906.175796][T10310] ip_tables: iptables: counters copy to user failed while replacing table
[  906.264122][ T9812] Bluetooth: hci4: command tx timeout
[  908.322943][ T9812] Bluetooth: hci4: command tx timeout
[  910.952008][ T9812] Bluetooth: hci4: command tx timeout
[  911.053868][T10283] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.062821][T10283] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.070197][T10283] bridge_slave_0: entered allmulticast mode
[  911.079166][T10283] bridge_slave_0: entered promiscuous mode
[  911.093529][T10283] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.104744][T10283] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.122942][T10283] bridge_slave_1: entered allmulticast mode
[  911.134257][T10283] bridge_slave_1: entered promiscuous mode
[  911.225395][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  911.273348][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.378854][T10283] team0: Port device team_slave_0 added
[  911.455419][T10283] team0: Port device team_slave_1 added
[  911.721926][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.730394][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.404159][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.497835][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.504968][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.531189][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.618764][T10283] hsr_slave_0: entered promiscuous mode
[  912.628326][T10283] hsr_slave_1: entered promiscuous mode
[  912.634741][T10283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  912.652690][T10283] Cannot create hsr debugfs directory
[  912.852310][T10341] ip_tables: iptables: counters copy to user failed while replacing table
[  912.972427][ T9812] Bluetooth: hci4: command tx timeout
[  913.296376][T10283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  913.331967][T10283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  913.369192][T10283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  913.390585][T10283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  913.398312][T10344] Mount JFS Failure: -22
[  913.403578][T10344] jfs_mount failed w/return code = -22
[  914.372398][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec5fc00: rx timeout, send abort
[  914.874038][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802c3ef400: rx timeout, send abort
[  914.882646][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805ec5fc00: abort rx timeout. Force session deactivation
[  914.987806][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'.
[  915.175859][T10283] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.208910][T10283] 8021q: adding VLAN 0 to HW filter on device team0
[  915.238285][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.245538][ T7948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.266699][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.273966][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  915.382450][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802c3ef400: abort rx timeout. Force session deactivation
[  915.960188][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  916.103449][T10364] ip_tables: iptables: counters copy to user failed while replacing table
[  917.373465][T10283] veth0_vlan: entered promiscuous mode
[  917.415814][T10283] veth1_vlan: entered promiscuous mode
[  917.424779][T10380] loop3: detected capacity change from 0 to 128
[  918.188614][T10283] veth0_macvtap: entered promiscuous mode
[  918.244227][T10383] Mount JFS Failure: -22
[  918.248694][T10383] jfs_mount failed w/return code = -22
[  919.177470][    C0] vcan0: j1939_tp_rxtimer: 0xffff888025e0f800: rx timeout, send abort
[  919.677989][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030a94000: rx timeout, send abort
[  919.692314][    C0] vcan0: j1939_tp_rxtimer: 0xffff888025e0f800: abort rx timeout. Force session deactivation
[  919.835021][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'.
[  919.918234][T10283] veth1_macvtap: entered promiscuous mode
[  919.942556][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  919.956342][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.967594][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  919.978530][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.995251][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  920.006491][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.018541][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.029177][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.040175][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.053642][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  920.067767][T10283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.076642][T10283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.086397][T10283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  920.100595][T10283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  920.186415][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888030a94000: abort rx timeout. Force session deactivation
[  920.390789][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.427728][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.482461][ T9529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.498504][ T9529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.576955][T10393] ip_tables: iptables: counters copy to user failed while replacing table
[  923.679519][T10408] bridge0: port 3(syz_tun) entered blocking state
[  923.689853][T10408] bridge0: port 3(syz_tun) entered disabled state
[  923.698965][T10408] syz_tun: entered allmulticast mode
[  923.706584][T10408] syz_tun: entered promiscuous mode
[  923.714657][T10408] bridge0: port 3(syz_tun) entered blocking state
[  923.721269][T10408] bridge0: port 3(syz_tun) entered forwarding state
[  923.885659][T10412] loop3: detected capacity change from 0 to 128
[  924.283584][T10418] Mount JFS Failure: -22
[  924.287963][T10418] jfs_mount failed w/return code = -22
[  925.005316][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'.
[  925.240757][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d71bc00: rx timeout, send abort
[  925.741310][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f341c00: rx timeout, send abort
[  925.752198][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d71bc00: abort rx timeout. Force session deactivation
[  926.175074][T10423] ip_tables: iptables: counters copy to user failed while replacing table
[  926.249650][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802f341c00: abort rx timeout. Force session deactivation
[  930.749057][T10438] loop3: detected capacity change from 0 to 1024
[  931.572272][ T5822] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  931.847566][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  931.847883][ T5822] usb 1-1: Using ep0 maxpacket: 16
[  931.859297][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  931.882211][ T5822] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  931.890309][ T5822] usb 1-1: config 0 has no interface number 0
[  931.912273][ T5822] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  931.946128][ T5822] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  931.974686][ T5822] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  931.996844][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  932.017095][ T5822] usb 1-1: Product: syz
[  932.021349][ T5822] usb 1-1: SerialNumber: syz
[  932.046980][ T5822] usb 1-1: config 0 descriptor??
[  932.073021][ T5822] cm109 1-1:0.8: invalid payload size 0, expected 4
[  932.100474][ T5822] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input13
[  934.154274][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.167684][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.176355][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.183622][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.190839][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.202913][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.210256][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.217503][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.224793][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.232004][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  934.248696][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 150 seconds
[  934.260824][ T6609] usb 1-1: USB disconnect, device number 15
[  934.266877][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  934.354950][ T6609] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  936.624577][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'.
[  936.703597][T10458] Bluetooth: MGMT ver 1.22
[  939.311692][T10466] loop3: detected capacity change from 0 to 128
[  941.099339][T10475] loop0: detected capacity change from 0 to 128
[  947.157993][T10512] loop4: detected capacity change from 0 to 128
[  951.118536][T10528] rtc_cmos 00:00: Alarms can be up to one day in the future
[  952.505328][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'.
[  952.672241][ T5823] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  953.226496][ T5823] usb 5-1: Using ep0 maxpacket: 16
[  953.272725][ T5823] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  953.310738][ T5823] usb 5-1: config 0 has no interface number 0
[  953.377780][ T5823] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  953.415616][ T5823] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  953.462616][ T5823] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  954.529881][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  954.539220][ T5823] usb 5-1: Product: syz
[  954.544091][ T5823] usb 5-1: SerialNumber: syz
[  954.560455][ T5823] usb 5-1: config 0 descriptor??
[  954.569882][ T5823] cm109 5-1:0.8: invalid payload size 0, expected 4
[  954.649971][T10551] loop0: detected capacity change from 0 to 128
[  955.495020][ T5823] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input14
[  956.504351][T10559] loop0: detected capacity change from 0 to 128
[  961.912782][T10579] loop3: detected capacity change from 0 to 1024
[  964.570857][   T56] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 180 seconds
[  964.643662][T10591] ip_tables: iptables: counters copy to user failed while replacing table
[  965.951345][T10597] loop0: detected capacity change from 0 to 128
[  969.112208][T10617] ip_tables: iptables: counters copy to user failed while replacing table
[  974.352792][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'.
[  976.911656][T10632] loop3: detected capacity change from 0 to 128
[  981.749745][T10653] loop4: detected capacity change from 0 to 1024
[  983.963657][T10656] ip_tables: iptables: counters copy to user failed while replacing table
[  984.870298][    C1] cm109_urb_ctl_callback: 58 callbacks suppressed
[  984.870318][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.884591][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.891946][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.899168][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.912196][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.922232][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.929476][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.936859][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.948763][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.957172][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  984.967922][ T5823] usb 5-1: USB disconnect, device number 2
[  984.973887][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  987.234076][ T5823] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  988.272263][ T5822] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  988.383708][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  988.434132][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  988.444922][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  988.457595][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  988.467392][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  988.476201][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  988.509872][ T5822] usb 1-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  988.582682][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.590847][ T5822] usb 1-1: Product: syz
[  988.613135][ T5822] usb 1-1: Manufacturer: syz
[  988.617826][ T5822] usb 1-1: SerialNumber: syz
[  988.685093][ T5822] digi_acceleport 1-1:1.0: Digi 2 port USB adapter converter detected
[  988.737745][ T5822] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  988.803691][ T5822] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  988.825275][ T5822] usb 1-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  988.907990][ T5822] usb 1-1: USB disconnect, device number 16
[  988.954155][ T5822] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  989.056149][ T5822] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  989.093504][ T5822] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  989.105223][ T5822] digi_acceleport 1-1:1.0: device disconnected
[  989.180472][ T7936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.419367][ T7936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.630323][ T7936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.696645][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'.
[  989.829954][ T7936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.894649][T10668] chnl_net:caif_netlink_parms(): no params data found
[  990.176342][T10668] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.183942][T10668] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.191232][T10668] bridge_slave_0: entered allmulticast mode
[  990.208635][T10668] bridge_slave_0: entered promiscuous mode
[  990.357432][T10668] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.365136][T10668] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.372563][T10668] bridge_slave_1: entered allmulticast mode
[  990.380224][T10668] bridge_slave_1: entered promiscuous mode
[  991.282943][T10691] rtc_cmos 00:00: Alarms can be up to one day in the future
[  991.365712][   T51] Bluetooth: hci3: command tx timeout
[  991.494454][T10690] ip_tables: iptables: counters copy to user failed while replacing table
[  992.311722][T10698] loop3: detected capacity change from 0 to 1024
[  993.096587][T10668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  993.204320][T10668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  993.314590][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  993.321016][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  993.442191][   T51] Bluetooth: hci3: command tx timeout
[  993.468140][T10668] team0: Port device team_slave_0 added
[  993.487117][T10668] team0: Port device team_slave_1 added
[  993.529499][T10668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  993.554390][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  993.601768][T10668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  993.624049][T10668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  993.631077][T10668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  993.689142][T10668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  994.147903][T10668] hsr_slave_0: entered promiscuous mode
[  994.182748][T10668] hsr_slave_1: entered promiscuous mode
[  994.204047][T10668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  994.211705][T10668] Cannot create hsr debugfs directory
[  995.185616][T10718] loop0: detected capacity change from 0 to 128
[  995.522641][   T51] Bluetooth: hci3: command tx timeout
[  995.934854][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 210 seconds
[  996.152537][T10728] Mount JFS Failure: -22
[  996.156877][T10728] jfs_mount failed w/return code = -22
[  997.692309][   T51] Bluetooth: hci3: command tx timeout
[ 1000.341301][T10668] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1000.400268][T10668] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1000.574899][T10750] loop0: detected capacity change from 0 to 128
[ 1001.446781][T10668] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1001.526516][T10668] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1001.876607][ T7936] hsr_slave_0: left promiscuous mode
[ 1001.920249][ T7936] hsr_slave_1: left promiscuous mode
[ 1001.975495][ T7936] bridge_slave_0: left allmulticast mode
[ 1001.992518][ T7936] bridge_slave_0: left promiscuous mode
[ 1002.000492][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1002.023539][T10765] ip_tables: iptables: counters copy to user failed while replacing table
[ 1002.137870][ T7936] veth1_macvtap: left promiscuous mode
[ 1002.170034][ T7936] veth0_macvtap: left promiscuous mode
[ 1002.199095][ T7936] veth1_vlan: left promiscuous mode
[ 1002.373198][ T7936] veth0_vlan: left promiscuous mode
[ 1004.332960][T10775] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1007.826967][ T7936] team0 (unregistering): Port device team_slave_1 removed
[ 1007.910904][ T7936] team0 (unregistering): Port device team_slave_0 removed
[ 1007.979525][ T7936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.058370][ T7936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.187935][ T7936] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1009.330302][ T7936] bond0 (unregistering): Released all slaves
[ 1009.751107][T10796] loop0: detected capacity change from 0 to 128
[ 1011.175251][T10668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1011.698737][T10668] 8021q: adding VLAN 0 to HW filter on device team0
[ 1011.752531][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.759756][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1011.830769][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.838036][ T9554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1012.602801][T10822] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1012.744113][T10668] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1013.199375][T10840] loop3: detected capacity change from 0 to 128
[ 1015.467433][T10668] veth0_vlan: entered promiscuous mode
[ 1015.537445][T10668] veth1_vlan: entered promiscuous mode
[ 1016.245887][T10668] veth0_macvtap: entered promiscuous mode
[ 1017.035422][T10668] veth1_macvtap: entered promiscuous mode
[ 1017.130469][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1017.161170][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.213206][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1017.241618][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.276466][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1017.299069][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.330828][T10668] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1017.390805][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1017.452220][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.492222][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1017.552306][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.605525][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1017.732268][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1017.838020][T10668] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1017.857544][T10668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.866576][T10668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.876617][T10668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1017.885954][T10668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1018.242457][   T51] Bluetooth: hci0: unexpected event for opcode 0x2029
[ 1018.275961][T10879] ve: renamed from veth0_vlan (while UP)
[ 1019.441026][ T9554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.500596][ T9554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.676914][ T9554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.725351][ T9554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.094501][   T51] Bluetooth: hci2: unexpected event for opcode 0x2029
[ 1025.125904][T10939] ve: renamed from veth0_vlan (while UP)
[ 1027.400403][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 240 seconds
[ 1027.530839][T10956] loop0: detected capacity change from 0 to 128
[ 1028.885419][T10965] loop0: detected capacity change from 0 to 128
[ 1030.089592][T10958] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1031.246319][ T9812] Bluetooth: hci4: command 0x0406 tx timeout
[ 1035.698356][T11012] loop3: detected capacity change from 0 to 128
[ 1038.812886][T11020] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1045.474590][ T5141] udevd[5141]: worker [9679] /devices/virtual/block/nbd1 timeout; kill it
[ 1045.603674][ T5141] udevd[5141]: seq 13232 '/devices/virtual/block/nbd1' killed
[ 1045.993535][T11058] loop4: detected capacity change from 0 to 128
[ 1047.606956][T11067] loop3: detected capacity change from 0 to 128
[ 1052.001155][T11100] ip_tables: iptables: counters copy to user failed while replacing table
[ 1054.773195][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.237640][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.021761][   T51] Bluetooth: hci0: unexpected event for opcode 0x2029
[ 1057.881369][T11151] Mount JFS Failure: -22
[ 1057.885929][T11151] jfs_mount failed w/return code = -22
[ 1057.946323][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 270 seconds
[ 1058.525867][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1523'.
[ 1059.931387][T11160] loop3: detected capacity change from 0 to 128
[ 1061.386121][T11169] ip_tables: iptables: counters copy to user failed while replacing table
[ 1069.239761][T11209] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA
[ 1069.267545][T11209] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06
[ 1069.715528][T11214] capability: warning: `syz.5.1535' uses 32-bit capabilities (legacy support in use)
[ 1070.458384][ T5844] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1070.786883][ T5844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1070.969559][ T5844] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[ 1071.270444][ T5844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1071.448358][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1071.530165][ T5844] usb 6-1: SerialNumber: syz
[ 1072.803623][ T5844] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1072.809638][ T5844] hub: probe of 6-1:1.0 failed with error -5
[ 1072.863573][ T5844] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[ 1072.954232][ T5844] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[ 1072.988116][ T5844] cdc_acm: probe of 6-1:1.0 failed with error -22
[ 1073.095924][ T5844] usb 6-1: USB disconnect, device number 2
[ 1073.250699][T11232] loop0: detected capacity change from 0 to 128
[ 1076.763053][T11258] Mount JFS Failure: -22
[ 1076.767420][T11258] jfs_mount failed w/return code = -22
[ 1078.859314][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'.
[ 1081.205752][T11271] loop5: detected capacity change from 0 to 128
[ 1085.216950][T11292] loop4: detected capacity change from 0 to 128
[ 1086.012428][ T7601] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[ 1088.014101][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 300 seconds
[ 1088.076685][ T7601] usb 1-1: device descriptor read/all, error -71
[ 1088.140763][T11304] Mount JFS Failure: -22
[ 1088.145948][T11304] jfs_mount failed w/return code = -22
[ 1089.633493][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1558'.
[ 1091.098642][   T51] Bluetooth: hci0: unexpected event for opcode 0x2029
[ 1093.603891][T11342] Mount JFS Failure: -22
[ 1093.608236][T11342] jfs_mount failed w/return code = -22
[ 1094.144750][T11344] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1095.771261][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'.
[ 1098.993060][T11371] loop4: detected capacity change from 0 to 128
[ 1101.044278][T10390] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 1101.303691][   T51] Bluetooth: hci4: unexpected event for opcode 0x2029
[ 1101.502740][T10390] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.611385][T10390] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[ 1103.709113][T10390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1103.834787][T10390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1103.958138][T10390] usb 4-1: SerialNumber: syz
[ 1104.199175][T10390] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1104.334730][T10390] hub: probe of 4-1:1.0 failed with error -5
[ 1104.454258][T10390] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[ 1104.592990][T10390] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[ 1104.607822][T10390] cdc_acm: probe of 4-1:1.0 failed with error -22
[ 1106.982988][T10390] usb 4-1: USB disconnect, device number 7
[ 1107.323311][T11405] Mount JFS Failure: -22
[ 1107.327642][T11405] jfs_mount failed w/return code = -22
[ 1107.875540][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'.
[ 1112.252188][ T5821] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1115.354247][ T9812] Bluetooth: hci3: command 0x0406 tx timeout
[ 1115.416399][ T5821] usb 1-1: Using ep0 maxpacket: 32
[ 1115.533574][ T5821] usb 1-1: device descriptor read/all, error -71
[ 1116.189273][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.195922][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.446746][   T51] Bluetooth: hci3: unexpected event for opcode 0x2029
[ 1116.702369][T11466] Mount JFS Failure: -22
[ 1116.706693][T11466] jfs_mount failed w/return code = -22
[ 1117.267601][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'.
[ 1118.321271][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 330 seconds
[ 1118.423063][T11472] ip_tables: iptables: counters copy to user failed while replacing table
[ 1118.475103][T11455] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1123.695179][T11499] loop5: detected capacity change from 0 to 128
[ 1128.999361][T11518] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1129.093178][T11516] Mount JFS Failure: -22
[ 1129.097515][T11516] jfs_mount failed w/return code = -22
[ 1129.105250][T11519] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[ 1137.543438][T11558] Mount JFS Failure: -22
[ 1137.572360][T11558] jfs_mount failed w/return code = -22
[ 1137.683424][T11565] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1137.902614][T11566] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[ 1139.786736][T11577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1139.794612][T11577] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1139.907557][T11577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1139.916742][T11577] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1144.539828][T11596] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1144.557989][T11596] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[ 1145.312496][T11603] ip_tables: iptables: counters copy to user failed while replacing table
[ 1149.974722][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 360 seconds
[ 1150.441190][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1150.449081][T11634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1150.520030][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1150.528281][T11634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1160.382170][T11689] ip_tables: iptables: counters copy to user failed while replacing table
[ 1164.802609][T10390] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1165.003307][T10390] usb 1-1: Using ep0 maxpacket: 32
[ 1165.038164][T10390] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1165.225793][T10390] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1165.396939][T10390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1165.570115][T10390] usb 1-1: Product: syz
[ 1165.660476][T10390] usb 1-1: Manufacturer: syz
[ 1165.747925][T10390] usb 1-1: SerialNumber: syz
[ 1165.779185][T10390] usb 1-1: config 0 descriptor??
[ 1165.800556][T11708] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1165.813960][T10390] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1165.833172][T10390] hub: probe of 1-1:0.0 failed with error -5
[ 1165.856897][T10390] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[ 1166.081441][T10390] usb 1-1: USB disconnect, device number 21
[ 1166.087716][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1166.932873][T11727] Mount JFS Failure: -22
[ 1166.937331][T11727] jfs_mount failed w/return code = -22
[ 1168.128260][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'.
[ 1173.379812][T11751] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1174.592331][ T5823] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1174.812363][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1174.840930][ T5823] usb 6-1: not running at top speed; connect to a high speed hub
[ 1174.892508][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.905201][ T5823] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[ 1174.922103][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1174.932171][ T5823] usb 6-1: Product: syz
[ 1174.937065][ T5823] usb 6-1: Manufacturer: syz
[ 1174.992805][ T5823] usb 6-1: Found UVC 1.00 device syz (8086:0ad2)
[ 1174.999507][ T5823] usb 6-1: No streaming interface found for terminal 2.
[ 1175.219900][ T5823] usb 6-1: USB disconnect, device number 3
[ 1177.619780][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.672212][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.754212][T11774] rt1719: probe of 0-0049 failed with error -5
[ 1178.761207][T11774] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49
[ 1178.790144][T11774] wusb3801 0-0004: supply vbus not found, using dummy regulator
[ 1178.864423][T11774] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04
[ 1180.756943][ T5896] block nbd1: Possible stuck request ffff888021dc0000: control (read@0,4096B). Runtime 390 seconds
[ 1180.948155][T11786] Mount JFS Failure: -22
[ 1180.952666][T11786] jfs_mount failed w/return code = -22
[ 1181.639478][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[ 1182.932388][T10390] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1183.152582][T10390] usb 6-1: Using ep0 maxpacket: 32
[ 1183.186763][T10390] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1183.209412][T10390] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1183.222452][T10390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.234486][T10390] usb 6-1: Product: syz
[ 1183.238711][T10390] usb 6-1: Manufacturer: syz
[ 1183.243707][T10390] usb 6-1: SerialNumber: syz
[ 1183.255233][T10390] usb 6-1: config 0 descriptor??
[ 1183.261199][T11794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1183.274454][T10390] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1183.289164][T10390] hub: probe of 6-1:0.0 failed with error -5
[ 1183.303120][T10390] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16
[ 1183.546935][ T5823] usb 6-1: USB disconnect, device number 4
[ 1183.547097][    C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1189.243717][T11814] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1192.640058][T11834] Mount JFS Failure: -22
[ 1192.644568][T11834] jfs_mount failed w/return code = -22
[ 1193.343898][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'.
[ 1195.872609][   T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1196.092284][   T23] usb 1-1: Using ep0 maxpacket: 32
[ 1196.117430][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1196.204852][   T23] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1196.250203][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.281797][   T23] usb 1-1: Product: syz
[ 1196.303828][   T23] usb 1-1: Manufacturer: syz
[ 1196.347058][   T23] usb 1-1: SerialNumber: syz
[ 1196.383061][   T23] usb 1-1: config 0 descriptor??
[ 1196.419547][T11843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1196.430990][   T23] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1196.449421][   T23] hub: probe of 1-1:0.0 failed with error -5
[ 1196.484179][   T23] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17
[ 1196.765408][   T23] usb 1-1: USB disconnect, device number 22
[ 1196.771429][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1200.002331][   T29] INFO: task udevd:9679 blocked for more than 147 seconds.
[ 1200.009689][   T29]       Not tainted syzkaller #0
[ 1200.014922][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1200.583130][   T29] task:udevd           state:D stack:24104 pid:9679  ppid:5141   flags:0x00004006
[ 1200.787923][   T29] Call Trace:
[ 1200.809846][   T29]  <TASK>
[ 1200.824463][   T29]  __schedule+0x15ae/0x4660
[ 1200.868345][   T29]  ? asan.module_dtor+0x20/0x20
[ 1200.936357][   T29]  ? mark_lock+0x94/0x320
[ 1200.979027][   T29]  ? __lock_acquire+0x7d80/0x7d80
[ 1201.019200][   T29]  ? lock_chain_count+0x20/0x20
[ 1201.050162][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1201.078384][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1201.107272][   T29]  schedule+0xbd/0x170
[ 1201.119101][   T29]  io_schedule+0x80/0xd0
[ 1201.141760][   T29]  folio_wait_bit_common+0x881/0xfa0
[ 1201.172177][   T29]  ? folio_wait_bit+0x30/0x30
[ 1201.184376][   T29]  ? _compound_head+0x120/0x120
[ 1201.290476][   T29]  ? filemap_add_folio+0x190/0x3d0
[ 1201.309251][   T29]  ? __filemap_get_folio+0x71e/0xbe0
[ 1201.326491][   T29]  do_read_cache_folio+0x1c0/0x7f0
[ 1201.337641][   T29]  ? blkdev_writepage+0x30/0x30
[ 1201.365935][   T29]  read_part_sector+0xd2/0x350
[ 1201.381633][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[ 1201.397243][   T29]  ? put_partition+0x360/0x360
[ 1201.412535][   T29]  bdev_disk_changed+0x755/0x1450
[ 1201.420886][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 1201.436169][   T29]  ? nbd_dead_link_work+0x340/0x340
[ 1201.450144][   T29]  blkdev_get_whole+0x30d/0x390
[ 1201.471168][   T29]  blkdev_get_by_dev+0x3a9/0x610
[ 1201.485786][   T29]  blkdev_open+0x14e/0x360
[ 1201.499102][   T29]  do_dentry_open+0x880/0x14b0
[ 1201.508947][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 1201.523296][   T29]  path_openat+0x284f/0x3270
[ 1201.534357][   T29]  ? do_sys_openat2+0xda/0x1d0
[ 1201.543342][   T29]  ? __x64_sys_openat+0x139/0x160
[ 1201.557717][   T29]  ? verify_lock_unused+0x140/0x140
[ 1201.628731][   T29]  ? do_filp_open+0x430/0x430
[ 1201.699998][   T29]  do_filp_open+0x1f2/0x430
[ 1201.848828][   T29]  ? vfs_tmpfile+0x620/0x620
[ 1201.871190][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 1201.888514][   T29]  ? alloc_fd+0x590/0x640
[ 1201.935882][   T29]  do_sys_openat2+0x134/0x1d0
[ 1202.009310][   T29]  ? do_sys_open+0xe0/0xe0
[ 1202.035197][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1202.049464][   T29]  ? lock_chain_count+0x20/0x20
[ 1202.056545][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1202.064696][   T29]  __x64_sys_openat+0x139/0x160
[ 1202.088255][   T29]  do_syscall_64+0x55/0xb0
[ 1202.133380][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1204.282253][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1204.300211][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1204.309683][   T29] RIP: 0033:0x7fe1b48a7407
[ 1204.318769][   T29] RSP: 002b:00007ffcdd90feb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1204.332137][   T29] RAX: ffffffffffffffda RBX: 00007fe1b4ff9880 RCX: 00007fe1b48a7407
[ 1204.340231][   T29] RDX: 00000000000a0800 RSI: 00005585cca16030 RDI: ffffffffffffff9c
[ 1204.348332][   T29] RBP: 00005585cca08910 R08: 0000000000000000 R09: 0000000000000000
[ 1204.360941][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005585cca1d830
[ 1204.412721][   T29] R13: 00005585cca20410 R14: 0000000000000000 R15: 00005585cca1d830
[ 1204.424247][   T29]  </TASK>
[ 1204.429845][   T29] 
[ 1204.429845][   T29] Showing all locks held in the system:
[ 1204.439836][   T29] 1 lock held by khungtaskd/29:
[ 1204.446147][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1204.564731][   T29] 2 locks held by getty/5535:
[ 1204.581294][   T29]  #0: ffff8880315da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1204.599985][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 1204.621308][   T29] 2 locks held by kworker/u4:24/9543:
[ 1204.632970][   T29]  #0: ffff888141277538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1204.644623][   T29]  #1: ffffc90003667d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 1204.657336][   T29] 1 lock held by udevd/9679:
[ 1204.662165][   T29]  #0: ffff888021cb34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[ 1204.678478][   T29] 2 locks held by syz-executor/10283:
[ 1204.684074][   T29] 1 lock held by syz.4.1680/11797:
[ 1204.691015][   T29] 
[ 1204.695692][   T29] =============================================
[ 1204.695692][   T29] 
[ 1204.706635][   T29] NMI backtrace for cpu 1
[ 1204.711031][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1204.718286][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1204.728385][   T29] Call Trace:
[ 1204.731682][   T29]  <TASK>
[ 1204.734642][   T29]  dump_stack_lvl+0x18c/0x250
[ 1204.739372][   T29]  ? __wake_up_klogd+0xd9/0x100
[ 1204.744281][   T29]  ? show_regs_print_info+0x20/0x20
[ 1204.749540][   T29]  ? load_image+0x420/0x420
[ 1204.754067][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1204.759050][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1204.765227][   T29]  ? load_image+0x420/0x420
[ 1204.769744][   T29]  ? wq_watchdog_touch+0xef/0x170
[ 1204.774794][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1204.780941][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1204.786976][   T29]  watchdog+0xf59/0xfa0
[ 1204.791180][   T29]  ? watchdog+0x1e1/0xfa0
[ 1204.795531][   T29]  kthread+0x2fa/0x390
[ 1204.799615][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1204.804673][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1204.809293][   T29]  ret_from_fork+0x48/0x80
[ 1204.813729][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1204.818341][   T29]  ret_from_fork_asm+0x11/0x20
[ 1204.823136][   T29]  </TASK>
[ 1204.827614][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1204.833379][    C0] NMI backtrace for cpu 0
[ 1204.833391][    C0] CPU: 0 PID: 10283 Comm: syz-executor Not tainted syzkaller #0
[ 1204.833408][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1204.833418][    C0] RIP: 0010:release_pages+0x462/0x2300
[ 1204.833445][    C0] Code: 4c 89 f7 be 08 00 00 00 e8 0b c4 24 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 08 80 3c 01 00 74 08 4c 89 f7 e8 2e c2 24 00 <49> 8b 1e 48 89 de 48 83 e6 20 31 ff e8 8d 48 cc ff 48 83 e3 20 0f
[ 1204.833461][    C0] RSP: 0018:ffffc9000b8877e0 EFLAGS: 00000046
[ 1204.833475][    C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffd40003a4170
[ 1204.833488][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001d20b80
[ 1204.833499][    C0] RBP: ffffc9000b8878e8 R08: ffffea0001d20b87 R09: 1ffffd40003a4170
[ 1204.833511][    C0] R10: dffffc0000000000 R11: fffff940003a4171 R12: 0000000000000028
[ 1204.833523][    C0] R13: ffff888077f5a000 R14: ffffea0001d20b80 R15: 0000000000000001
[ 1204.833535][    C0] FS:  000055557c12b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1204.833549][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1204.833568][    C0] CR2: 00007fc74c9ef2f8 CR3: 000000005cc9d000 CR4: 00000000003506f0
[ 1204.833583][    C0] Call Trace:
[ 1204.833589][    C0]  <TASK>
[ 1204.833600][    C0]  ? lru_cache_disable+0x30/0x30
[ 1204.833620][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1204.833648][    C0]  __folio_batch_release+0x71/0xe0
[ 1204.833668][    C0]  shmem_undo_range+0x5ff/0x1a80
[ 1204.833689][    C0]  ? verify_lock_unused+0x140/0x140
[ 1204.833713][    C0]  ? shmem_truncate_range+0xa0/0xa0
[ 1204.833745][    C0]  ? inode_wait_for_writeback+0x1e3/0x230
[ 1204.833771][    C0]  ? __lock_acquire+0x7d80/0x7d80
[ 1204.833789][    C0]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1204.833815][    C0]  shmem_evict_inode+0x285/0xa70
[ 1204.833840][    C0]  ? inode_wait_for_writeback+0x1e3/0x230
[ 1204.833863][    C0]  ? shmem_free_in_core_inode+0xb0/0xb0
[ 1204.833909][    C0]  ? sb_clear_inode_writeback+0x330/0x330
[ 1204.833932][    C0]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1204.833955][    C0]  ? bit_waitqueue+0x30/0x30
[ 1204.833976][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1204.833999][    C0]  ? shmem_free_in_core_inode+0xb0/0xb0
[ 1204.834020][    C0]  evict+0x4b7/0x8a0
[ 1204.834040][    C0]  ? __lock_acquire+0x7d80/0x7d80
[ 1204.834061][    C0]  ? proc_nr_inodes+0x230/0x230
[ 1204.834083][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1204.834107][    C0]  ? _raw_spin_unlock+0x28/0x40
[ 1204.834127][    C0]  do_unlinkat+0x38c/0x590
[ 1204.834149][    C0]  ? fsnotify_link_count+0xf0/0xf0
[ 1204.834170][    C0]  ? getname_flags+0x20a/0x500
[ 1204.834198][    C0]  __x64_sys_unlink+0x49/0x50
[ 1204.834215][    C0]  do_syscall_64+0x55/0xb0
[ 1204.834235][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1204.834255][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1204.834276][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1204.834295][    C0] RIP: 0033:0x7f34d239d247
[ 1204.834308][    C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1204.834322][    C0] RSP: 002b:00007fff176b5468 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[ 1204.834339][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34d239d247
[ 1204.834350][    C0] RDX: 00007fff176b5490 RSI: 00007fff176b5520 RDI: 00007fff176b5520
[ 1204.834362][    C0] RBP: 00007fff176b5520 R08: 00007fff176b6520 R09: 00000000ffffffff
[ 1204.834374][    C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff176b65b0
[ 1204.834384][    C0] R13: 00007f34d2434474 R14: 0000000000125fc1 R15: 00007fff176b65f0
[ 1204.834404][    C0]  </TASK>
[ 1205.213086][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1205.220013][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1205.227263][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1205.237422][   T29] Call Trace:
[ 1205.240735][   T29]  <TASK>
[ 1205.243694][   T29]  dump_stack_lvl+0x18c/0x250
[ 1205.248423][   T29]  ? show_regs_print_info+0x20/0x20
[ 1205.253668][   T29]  ? load_image+0x420/0x420
[ 1205.258200][   T29]  panic+0x2ca/0x720
[ 1205.262167][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1205.266713][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1205.272322][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[ 1205.277750][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1205.283969][   T29]  watchdog+0xf98/0xfa0
[ 1205.288187][   T29]  ? watchdog+0x1e1/0xfa0
[ 1205.292581][   T29]  kthread+0x2fa/0x390
[ 1205.296691][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1205.301775][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1205.306409][   T29]  ret_from_fork+0x48/0x80
[ 1205.310939][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1205.315576][   T29]  ret_from_fork_asm+0x11/0x20
[ 1205.320399][   T29]  </TASK>
[ 1205.323615][   T29] Kernel Offset: disabled
[ 1205.327997][   T29] Rebooting in 86400 seconds..