last executing test programs:

11.927804614s ago: executing program 0 (id=404):
syz_mount_image$f2fs(&(0x7f0000000880), &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000005f40)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x80000, 0x1)
open_by_handle_at(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x80)
syz_mount_image$vfat(&(0x7f0000006740), &(0x7f0000005f80)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f00000067c0))

8.890762374s ago: executing program 1 (id=414):
socket$inet_smc(0x2b, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe)
mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0)
write$eventfd(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @private2, 0x9}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xc, 0xe}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x3000c81c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000600)={0x24ed, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6})
r10 = dup(r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

8.73299336s ago: executing program 0 (id=415):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000c00)={[0xff, 0x48, 0xc0000, 0x6, 0x4, 0x1, 0x2, 0x6, 0x3, 0xffffffff, 0x7fffffff, 0x0, 0xdf1, 0x4814ded8, 0x6, 0x7, 0x101, 0x5, 0x10000, 0x48000000, 0x3e2, 0x5, 0x5, 0x5, 0x7a, 0x2, 0x0, 0x401, 0x2, 0x2279, 0x2, 0x100, 0x2, 0x2, 0x7, 0xfffffff9, 0x4, 0x7, 0x7ff, 0x9, 0xfff, 0x8, 0x200, 0x3ff, 0x8d8d, 0x400, 0x4, 0x39f, 0x81, 0x4, 0x9b3, 0x5, 0x5, 0x6, 0xffff1a7f, 0xbc, 0x7ff, 0x9, 0x2, 0xfffffffb, 0x3, 0x190d, 0xfffffffa, 0xa8c5, 0x80, 0x80000000, 0xffffff01, 0x7, 0x4, 0xa, 0xe, 0x480, 0x6, 0x9, 0x4, 0x9, 0x3, 0x7, 0xef, 0x7fff, 0x9, 0x0, 0x400, 0x5, 0x9, 0x9, 0x7ff, 0x65, 0x2, 0xfffffffe, 0x4, 0x1, 0xfffffff7, 0x74e, 0x1, 0x80000000, 0x2, 0x3, 0x1, 0x6, 0x7, 0x9, 0x2, 0x9, 0x1, 0x7f, 0x1000, 0x5, 0x5, 0x7, 0x5, 0xfffffffa, 0x1, 0x2, 0x1000, 0x8, 0x2, 0x4, 0xf, 0x37, 0x2, 0x2, 0x4ae15beb, 0x80, 0x1, 0x3, 0x29, 0x6, 0x18, 0x2, 0xb97a, 0xffaa, 0x200, 0x105b, 0x5, 0x24000000, 0x0, 0xe56, 0x1, 0x1, 0x1, 0xb1, 0xff, 0x0, 0x3, 0x9, 0x1, 0x2, 0xfffff51e, 0x3, 0x5, 0x9, 0x3, 0x4, 0x8, 0xffff, 0xb, 0x93, 0x8, 0xa59b, 0x2, 0x8, 0x9, 0x2, 0x5, 0x4, 0x2, 0x0, 0x8, 0xaf9e, 0x10000, 0x3, 0x3, 0x300000, 0x3, 0x637, 0x4, 0x0, 0x3, 0x7, 0xb8b, 0x8b04, 0x3, 0x4, 0x0, 0x68a, 0x80000000, 0x4a7, 0xec6, 0x149, 0x4, 0xa, 0x2, 0x44, 0x4, 0xe, 0x80, 0x9c9, 0x0, 0xfffffffe, 0x0, 0xa, 0x80000001, 0xa, 0x2a94893f, 0x5e, 0xf, 0x0, 0x74, 0x3, 0x6, 0x7, 0x8000, 0x6, 0x4, 0xfffffffe, 0x7fff, 0xffff4ea7, 0xee, 0x0, 0x400, 0x0, 0x10000, 0x0, 0x81, 0x255cdff, 0x7ff4, 0x5, 0x8, 0x1d51, 0x23, 0x1, 0x3, 0x0, 0x8, 0x2, 0x1, 0xfd, 0x3, 0x2, 0x7, 0x0, 0x7fffffff, 0x5, 0x8, 0x7ff, 0x7, 0x8000, 0x5, 0x7, 0x7, 0xfffffff7, 0xe00000, 0x19d7, 0x5, 0x8, 0x401, 0x3, 0xffffff49, 0xd, 0x8, 0x2, 0x9, 0x6, 0x8, 0xf, 0x8001, 0x7, 0x9, 0x8, 0x8000, 0x3, 0x7fffffff, 0x3, 0x81, 0x4, 0xfff, 0x4, 0x8, 0x7, 0x3, 0x80000001, 0x8, 0x1, 0x10001, 0x4, 0x7f, 0x8a56, 0x800, 0x83, 0x10001, 0x999d, 0xd25f, 0x9, 0x3, 0x7, 0x9, 0x6, 0xff, 0xa, 0x6, 0xee0c, 0x6b8f, 0x5, 0x59, 0x2, 0x5, 0x5, 0xf, 0x7ff, 0x3, 0x0, 0x6, 0x0, 0xfffffc00, 0x6, 0x7, 0x400, 0x81, 0x465, 0x1, 0x6, 0x80, 0x5, 0x60, 0x8000, 0x81, 0x740e, 0x2, 0x2, 0x73, 0x9, 0x80, 0x6, 0x2, 0x40, 0xfffffff0, 0x8001, 0xd1, 0x8de9, 0x2, 0x5, 0x1, 0x100, 0x5, 0x0, 0xd, 0xf, 0x6, 0x5, 0x101, 0x0, 0x2, 0x2, 0x0, 0x8, 0x1, 0xfffffff4, 0x0, 0x3dea, 0x8, 0x400, 0x3f, 0x715, 0x7fd, 0x4, 0xec, 0xd, 0x3ff, 0x1, 0xf, 0xfffffff7, 0x3c, 0x3, 0x401, 0xad12, 0xc, 0xd8, 0xffffffff, 0x2d, 0x6, 0x4, 0x68a, 0x2, 0x100, 0x9, 0x2a61, 0x7, 0x1, 0x3ff000, 0x400, 0x1, 0x2, 0x400, 0x1fc0, 0x5, 0x6, 0xb, 0x7, 0x3, 0x6a4c, 0xe, 0x86, 0x7, 0x53f7e108, 0xfffffffc, 0x4, 0x0, 0x3, 0x7ff, 0x2, 0x5, 0x2, 0x5, 0xffffffff, 0x0, 0x5, 0x4, 0x1, 0x9, 0x5, 0x0, 0x2, 0xf, 0x1, 0x7fff, 0x9, 0x3900, 0x200, 0xebf, 0x5, 0x7, 0x4, 0x0, 0x4, 0x5, 0x2, 0xf8d, 0x9, 0x2, 0x9, 0x2, 0x6, 0x0, 0x1, 0x9, 0x7, 0x5, 0x8001, 0x8, 0x6, 0x5, 0x1, 0x0, 0x394, 0x78b5, 0x100, 0xde, 0x2, 0x3ff, 0x59b3, 0x9, 0xffffffff, 0x3, 0xd9, 0x1, 0x8000000, 0x98, 0x7, 0x8, 0xffffff84, 0x401, 0x8, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0x9e67, 0x6, 0x9, 0x800, 0x0, 0xa, 0x6, 0x6, 0x1, 0x529, 0x3, 0x8a000000, 0x7, 0xd, 0x1, 0xe, 0x7fff, 0x7, 0x0, 0xfff, 0xfff, 0xffff4b15, 0x9, 0x5, 0x0, 0xfffff7ff, 0x2, 0x8, 0x0, 0x41, 0xfffffff8, 0x4, 0x2, 0x800, 0xffffff0d, 0x3, 0x4, 0x10001, 0x5, 0x6, 0xffffffff, 0x6, 0xfffffff7, 0x1, 0x3ff, 0xff, 0x9, 0x2, 0x3, 0x4, 0xf, 0x9, 0x6, 0x0, 0x7, 0x27a, 0xc, 0x7, 0x0, 0x9, 0x3, 0x1, 0x8, 0xffffff81, 0x0, 0x8, 0x3, 0x6, 0x790d, 0x0, 0x400, 0xc2, 0x1, 0x4, 0x4, 0x10001, 0x1, 0x1000, 0x10001, 0xffff0000, 0xa5, 0x5, 0x8, 0x2, 0x80, 0x9, 0x7, 0x72, 0x8, 0x745cf293, 0x6c78, 0x6, 0x5, 0x80000001, 0xc, 0x4, 0x101, 0x2, 0x7, 0x2, 0xffffffff, 0x1, 0x100, 0x0, 0x8, 0x5, 0x8, 0x401, 0x3c3, 0x8001, 0xc, 0x2, 0x9, 0x8, 0x1000, 0xd, 0x8, 0xe, 0xffffffff, 0x0, 0x4, 0x1000, 0x5, 0xfffffff8, 0x7ff, 0xfffff754, 0xa620, 0x101, 0x3, 0xfffffffb, 0x3, 0x749, 0xd, 0x4, 0x0, 0x4, 0x6, 0x7ef751c4, 0x1, 0x101, 0xce9b, 0x0, 0x4, 0x3, 0x45, 0x14, 0xfffffffc, 0x0, 0x78, 0xffffffff, 0x2, 0x4, 0x2, 0x80000001, 0x1e, 0x6, 0x4, 0x6, 0x4, 0x7, 0xbed8, 0x7, 0x9, 0xa, 0x4, 0x9, 0x3, 0x8, 0x92, 0xfffffffa, 0x3, 0x917b, 0x7ff, 0x6, 0x8, 0x0, 0x4, 0x5, 0x40, 0x5, 0x4, 0xa, 0x1, 0x1, 0x1000, 0x7f, 0x7, 0x6, 0x7, 0x3f, 0xe44c, 0x2, 0x1, 0x81, 0xfffffadb, 0xe, 0x1000, 0x8, 0x6, 0x0, 0x9, 0x7fff, 0x3, 0x7, 0x8, 0x4, 0x1, 0x2, 0x5, 0x0, 0x5, 0x5, 0xc, 0x2217, 0x7, 0x1, 0x10, 0x9, 0x6, 0x1, 0xf1, 0x10000, 0x5, 0xffff, 0x5, 0x0, 0x0, 0x7fffffff, 0xa, 0x0, 0x4063, 0x9, 0x1, 0x2, 0x0, 0x0, 0x5, 0xf, 0x101, 0x6, 0x7b, 0xe, 0x8, 0xeac, 0x6, 0x200, 0x9f, 0x3ff, 0x9, 0x6, 0x2, 0x3, 0x1, 0x200, 0x9, 0x852, 0x0, 0x1, 0x0, 0x100, 0x0, 0xfffffff0, 0x3, 0x800, 0x1, 0x0, 0x401, 0x1ff, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x1, 0x5, 0x5, 0x5, 0xffff, 0x2, 0x6, 0xffffff00, 0x5, 0x1, 0x5, 0x0, 0x1, 0x7, 0x7, 0x7, 0x1, 0x100, 0x1, 0x7, 0x2, 0x8, 0x254978be, 0x1000, 0x3, 0x3, 0x1000, 0x4, 0x3, 0x101, 0x7ff, 0x1, 0x0, 0x9, 0x0, 0x80000000, 0x10, 0x8, 0xca4d, 0x9, 0x7, 0x8001, 0xd27, 0x7, 0xc, 0x5, 0x1, 0x7, 0x7025deb4, 0xbf7, 0xa, 0x2ca, 0x4, 0x8001, 0x5, 0x3, 0x0, 0x7c1, 0x2, 0x1, 0x9, 0x252, 0x9e, 0x2, 0x401, 0x5, 0x10001, 0xa, 0x2, 0x10009, 0x9, 0x86, 0xb7fa0dca, 0xfffffff9, 0x40, 0x800, 0x3, 0x1, 0x2, 0x9, 0x1ff, 0x6, 0xd, 0x1, 0x1, 0x8, 0x91e8, 0x0, 0x2, 0x3bd3, 0xb, 0x101, 0x8, 0x6, 0x9, 0xff, 0xcd1, 0x10, 0x400, 0x800, 0x6, 0x4, 0x5, 0x3, 0xfff, 0x2, 0x400, 0xfffffffd, 0x8, 0x2, 0x3, 0x9, 0x5, 0xd17, 0x9af, 0xffff, 0x7, 0x8000, 0xffffffff, 0x3, 0x1, 0x4, 0xe, 0x8f5b, 0x7, 0x5, 0x7f, 0x10001, 0x7ac2, 0xffffffff, 0x9, 0x401, 0x6ae51f7, 0x6, 0x3, 0x7, 0x8, 0x8, 0x8, 0x4, 0x9, 0x4, 0x6, 0xe, 0x1000000, 0x1, 0x6, 0x8, 0x6f9, 0x4, 0x67e1, 0x9f7, 0xa206, 0xa, 0x400, 0x4de75aa, 0x7, 0x6, 0xd, 0x7, 0x2, 0x2a4, 0x2c76b8f, 0x3, 0x1, 0x4f8d8151, 0x1, 0xf, 0x3, 0x401, 0x8, 0xa282, 0x2, 0xf8, 0x8d1a, 0x100, 0x6, 0x7, 0x3, 0xec1, 0x4, 0x101, 0x2, 0xffff, 0xfffffff4, 0x8, 0x4c, 0x100, 0x9, 0x3, 0xcb, 0xd, 0xa, 0x8888, 0x101, 0x52a, 0x9, 0x6, 0x3, 0xd, 0xffff0001, 0x7c7, 0x0, 0x3, 0x9, 0x1, 0x7, 0x5, 0x6, 0x9, 0x3, 0x5, 0x7f, 0x9, 0x9d1, 0x3, 0x4, 0x0, 0x1, 0xdb, 0x8, 0x6, 0x6, 0x2, 0xffff, 0x9, 0x3, 0x2, 0xa54d, 0x7b57, 0x6, 0x0, 0x0, 0x7, 0x6, 0x3ff, 0xa12, 0x6, 0x4, 0x5, 0x1, 0x5, 0x7fffffff, 0x7f, 0x3, 0x80000000, 0x5, 0xffffffc0, 0x8, 0x1, 0x1, 0x2, 0x0, 0x607dea20, 0x3, 0x9, 0x1, 0x0, 0xfffffffd, 0x5, 0x0, 0x80, 0x1, 0x7, 0x5, 0x2, 0x1, 0xa69, 0x5, 0x10000, 0xfd, 0xc6f4]})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x40000, 0x0, 0x0, 'queue0\x00', 0xffffffff})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

7.646255601s ago: executing program 0 (id=417):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f00000054c0)={&(0x7f0000005500)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000005540)=[{&(0x7f0000007a40)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000007a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
recvmmsg(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10102, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000007b00))

7.543074471s ago: executing program 0 (id=418):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001100)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f000001a100)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, 0x0, 0xe07e872420dfefca)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$get_persistent(0x16, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f000001a2c0)=r4, 0x12)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f000001a300)='bridge0\x00', 0x10)

5.857031353s ago: executing program 0 (id=420):
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)={[{@gid}, {@fmask={'fmask', 0x3d, 0x8001}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@namecase}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x1}}, {@utf8}, {}]}, 0x1, 0x1533, &(0x7f00000001c0)="$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")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40), 0x10000, &(0x7f0000002d80)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)

5.695812869s ago: executing program 1 (id=421):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001100)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f000001a100)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, 0x0, 0xe07e872420dfefca)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$get_persistent(0x16, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f000001a2c0)=r4, 0x12)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f000001a300)='bridge0\x00', 0x10)

3.962922316s ago: executing program 1 (id=423):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/ip_vs\x00')
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000080)={0x0, 0x20000400, 0x100, 0x80002, 0x225}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000240)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)

3.772184485s ago: executing program 2 (id=425):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r1, 0x0, 0x0)

3.666584596s ago: executing program 3 (id=426):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_mount_image$exfat(&(0x7f0000000480), &(0x7f00000004c0)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xfd, 0x1501, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file2\x00', 0x145042, 0x194)
write$binfmt_format(r0, &(0x7f0000001c00)='1\x00', 0x2400)

3.555493907s ago: executing program 2 (id=427):
r0 = fsopen(&(0x7f0000000bc0)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='A\x00', 0x1ff)

3.370330677s ago: executing program 2 (id=428):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001100)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f000001a100)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, 0x0, 0xe07e872420dfefca)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$get_persistent(0x16, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f000001a2c0)=r4, 0x12)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f000001a300)='bridge0\x00', 0x10)

3.343344979s ago: executing program 3 (id=429):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x1, 0x561, &(0x7f0000000a00)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1.635047553s ago: executing program 2 (id=430):
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r0 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

1.115448226s ago: executing program 0 (id=431):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f0f09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x6}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x10, 0x4, "5fe387ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.005419097s ago: executing program 1 (id=432):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x200000004000002, &(0x7f0000000600)={<r1=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0xce24, 0x8, @mcast2, 0x405}, {0xa, 0x4e23, 0xff, @mcast2, 0x2000200}, r1, 0x9}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000740)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4621, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0)

893.377309ms ago: executing program 1 (id=433):
r0 = syz_io_uring_setup(0x41c, &(0x7f0000000000)={0x0, 0x2af2, 0x800, 0x1, 0x139}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000180), 0x8)

763.555642ms ago: executing program 3 (id=434):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x1)

609.347258ms ago: executing program 3 (id=435):
setresgid(0xee00, 0x0, 0xee00)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="5ebd98d13dff6bef0f0096ce067953fbc3d8258d9cdf31b783566f484e1022ea948041d8a08f4832d16c86111814b6bc69cb82b44be5cd9158167840afc90c60fa9a1373efd470d9dba934c98683fb0dad08fbaf6d41c900b909b9840a9d6f6595fa629e436ffab309e206e506"], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setresuid(0xee00, 0xee00, 0x0)
utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x0)

258.838403ms ago: executing program 1 (id=436):
socket$inet_smc(0x2b, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$eventfd(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @private2, 0x9}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xc, 0xe}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x3000c81c)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000600)={0x24ed, 0x9, {}, {0xffffffffffffffff}, 0x6, 0x6})
r10 = dup(r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

175.417782ms ago: executing program 3 (id=437):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x100, 0x70fd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x11, 0xffff}, {0x9, 0x8}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24049014}, 0x4000050)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

175.276182ms ago: executing program 2 (id=438):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

13.459319ms ago: executing program 3 (id=439):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000680)='./file0\x00', 0x804818, &(0x7f00000006c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYBLOB, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x1, 0x574, &(0x7f0000000980)="$eJzs3V9v094ZwPHHpR1RJnXTmBCqChzKJhWpBCeBoIgrzzlJDYkd2Q5qr1BFU1SRwkSZtPYGesM2abuYtDfALvcipr0htJfQn3zs9G/+AC1tf9X3E5VzYp/4PE4sP5w2PhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCWW7PtoiVNz+8sqeHcWhi09p9mrz62QO4dKkb0K2IlP5LLyY100Y3f7q++nvwzJ7Pps1nJJUVOtn95/ddPrk1O9F8/IuBv8u/v3NLm1vbrlV6v++60ArmAbl4dvq6hfS8KvJbT0MqLAlWtVOwHi/VI1b2mjpajWLeUG2onDkI1795TxWq1rHRhOej4jZrT1P2Fj++XbLuinhba2gmjwH/wtBC5i16z6fkN0yZZnbR5nByIz7xYxdppKbW23uuWx+1A0qj4NY1K4xqV7FKpWCyVipVH1UePbXvy2AL7CDnW4vQOWvw8neLZGziZiSz/S1M88aUjS6IGPlypSSiBtIasz/Tz/+8f6JH9Hsz//Sx/Y3/1jJj8fyt9dmtY/h8Sy9k9NmVLtuW1rEhPetKVd+ce0dk+GqLFF08iCcSTljhmicqWKKlKRSpiywtZlPpU8iHWxZOmaIlkWSKJRZsjypVQtDgSSyChKJkXV+6JkqJUpSplUaKlIMsSSEd8aUhNHLOVNVk373tZlDUsxr1GxaG7ke8fd10pifrnv2TwkUX+x8md5ukbOJHdfv4HAAAAAACXlmV++z5lfm6a53Wvqe3zDgsAAAAAAJwi85f/2aQw3866KRbjfwAAAAAALhvLXGNniUhebqe1NbHM5VL8EgAAAAAAgEvC/P3/VlKYOVBui7U3XQrjfwAAAAAALom/jp1jP2pftf77fwnDKWunvfQ7a8PMzetsXElfd+XoFuP6jDWdbcQUlbSYnHT1rJVLG+1NgvklK9bGxWHtB+DsBfDxWwK4Nil/lztpmzurabmarflV2ku+7jV1wQ2aT4riONMTsV6K//Rm/c9idv9vfmvaysl6r1t4+ba3amLZSbays5FNoHhsHsURsbw38y2Yay4G7vGUuRAj6zdvydp6r2u3l65mW3Y2JtLKxOEeP0yP6POTzKWt5rIZb/P9NWmfuaTPYmHY3mdRFE+455/kbtrm7vzdtBgQRWlcFKWDUQx+L04eRXlcFOUTRgEA52VtTBay5Fje/Y6z3JHsnpz2viK7yzdm908yn7aZnzEn1smZAWd0e9wZ3T5hdvvPsXsgDcuxSb//OJJVPycv+Dy036hZspK38Mr7jT/K9c2t7fvrGyuvuq+6b0qlcsV+aNuPSjJldiMryD0AgAEO3mPHOpD//7ebskbehWd3N8ndD7NR9c7RUXWW8X6z95WCgryUt9KTVVkwVxuYbxwM/H9H/sDXEBbGjFrzJk2md3hZGDGq+4W5yqG/3dLItodjKJ/FRwEAwJmZG5OHR+f/dOy+MGbcfTiXjx4d5w/crQ0AAPwYOvxi5eO/WGHotV8Uq9WiEy9qFQbuMxV6tYZWnh/r0F10/IZW7TCIAzdoJpXnXk1HKuq020EYq3oQqnYQeUtm+kCV3fo90i3Hjz03aje1E2nlBn7suLGqeZGr2p0/NL1oUYfmxVFbu17dc53YC3wVBZ3Q1QWlIq0PNPRq2o+9updUfdUOvZYT5tTzoNlpaVXTkRt67ThIN9jvy/PrQdgymy2c95sNAMAFsbm1/Xql1+u++4GVgR3nznxXAQBAZkyWBgAAAAAAAAAAAAAAAAAAAAAAF8BZXP9HZa8yeTHCOOVKfyroixIPlVOopB+p9XHoqePD2ZyhAPwoPwUAAP//r55ZHg==")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000f40)=[{{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x20000040)
mknodat(0xffffffffffffff9c, &(0x7f000000a680)='./file0\x00', 0x2, 0x4)

0s ago: executing program 2 (id=440):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='0', 0x1)
write(r0, &(0x7f0000000500)='1', 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   79.452399][ T5773] cgroup: Unknown subsys name 'net'
[   79.592637][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.281602][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.768343][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.785101][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.804604][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.823494][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.831099][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.837997][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.839098][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.852937][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.861626][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.865171][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.882235][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.884829][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.897477][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   83.904477][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.907790][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.914606][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.920352][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.934077][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.934388][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.948693][   T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   83.963247][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.970805][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.979426][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.989927][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.055451][ T5786] (null): rxe_set_mtu: Set mtu to 1024
[   84.062486][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   84.080809][ T5785] (null): rxe_set_mtu: Set mtu to 1024
[   84.108139][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   84.117184][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.126040][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   84.137229][ T5787] (null): rxe_set_mtu: Set mtu to 1024
[   84.143112][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.151944][ T5784] (null): rxe_set_mtu: Set mtu to 1024
[   84.164390][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.488497][ T5786] infiniband rxe0: set active
[   84.493870][ T5786] infiniband rxe0: added rxe_eth0
[   84.511538][   T27] rxe_eth0 speed is unknown, defaulting to 1000
[   84.652616][ T5786] RDS/IB: rxe0: added
[   84.660170][ T5786] smc: adding ib device rxe0 with port count 1
[   84.666636][ T5786] smc:    ib device rxe0 port 1 has pnetid 
[   84.698831][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   84.724215][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   84.790513][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   84.886489][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   84.963498][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   85.147797][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   85.254066][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.261302][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.286094][ T5785] bridge_slave_0: entered allmulticast mode
[   85.314027][ T5785] bridge_slave_0: entered promiscuous mode
[   85.325311][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.332573][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.347494][ T5785] bridge_slave_1: entered allmulticast mode
[   85.355582][ T5785] bridge_slave_1: entered promiscuous mode
[   85.441622][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   85.482868][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.490238][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.497871][ T5787] bridge_slave_0: entered allmulticast mode
[   85.505477][ T5787] bridge_slave_0: entered promiscuous mode
[   85.538952][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.552751][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.569279][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.580789][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.588421][ T5787] bridge_slave_1: entered allmulticast mode
[   85.596234][ T5787] bridge_slave_1: entered promiscuous mode
[   85.605534][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.612778][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.633898][ T5784] bridge_slave_0: entered allmulticast mode
[   85.640970][ T5784] bridge_slave_0: entered promiscuous mode
[   85.650099][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.657424][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.664912][ T5784] bridge_slave_1: entered allmulticast mode
[   85.672074][ T5784] bridge_slave_1: entered promiscuous mode
[   85.767630][ T5785] team0: Port device team_slave_0 added
[   85.786646][ T5785] team0: Port device team_slave_1 added
[   85.883275][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.896971][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.916511][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.928035][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.935614][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.963001][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.974991][ T5797] Bluetooth: hci3: command tx timeout
[   85.980712][ T5797] Bluetooth: hci0: command tx timeout
[   86.002783][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   86.012914][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.041415][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.054277][ T5791] Bluetooth: hci1: command tx timeout
[   86.059993][ T5797] Bluetooth: hci2: command tx timeout
[   86.064466][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.115175][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.188320][ T5784] team0: Port device team_slave_0 added
[   86.272675][ T5787] team0: Port device team_slave_0 added
[   86.286092][ T5784] team0: Port device team_slave_1 added
[   86.343336][ T5785] hsr_slave_0: entered promiscuous mode
[   86.351178][ T5785] hsr_slave_1: entered promiscuous mode
[   86.366455][ T5787] team0: Port device team_slave_1 added
[   86.389171][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.397705][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.424176][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.489460][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.498813][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.526374][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.596751][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.604736][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.631019][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.688425][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.696530][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.722828][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.763791][ T5784] hsr_slave_0: entered promiscuous mode
[   86.770614][ T5784] hsr_slave_1: entered promiscuous mode
[   86.777218][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.785202][ T5784] Cannot create hsr debugfs directory
[   86.791006][  T788] rxe_eth0 speed is unknown, defaulting to 1000
[   86.867359][ T5787] hsr_slave_0: entered promiscuous mode
[   86.878122][ T5787] hsr_slave_1: entered promiscuous mode
[   86.884888][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.892512][ T5787] Cannot create hsr debugfs directory
[   87.397614][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   87.647061][ T5447] infiniband rxe0: set active
[   87.652223][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   87.772818][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.802277][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.837106][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.851429][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.860434][ T5786] bridge_slave_0: entered allmulticast mode
[   87.872509][ T5786] bridge_slave_0: entered promiscuous mode
[   87.881450][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.889513][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.897481][ T5786] bridge_slave_1: entered allmulticast mode
[   87.905156][ T5786] bridge_slave_1: entered promiscuous mode
[   87.911973][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.952043][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.988750][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.013324][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.035617][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.052916][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.062893][ T5797] Bluetooth: hci0: command tx timeout
[   88.068695][ T5797] Bluetooth: hci3: command tx timeout
[   88.097352][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.133099][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.139981][ T5797] Bluetooth: hci2: command tx timeout
[   88.145429][ T5791] Bluetooth: hci1: command tx timeout
[   88.210105][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.222914][ T5786] team0: Port device team_slave_0 added
[   88.235500][ T5786] team0: Port device team_slave_1 added
[   88.269248][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.276536][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.302740][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.317652][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.328807][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.341316][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.350398][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.378677][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.407867][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.490478][ T5786] hsr_slave_0: entered promiscuous mode
[   88.497756][ T5786] hsr_slave_1: entered promiscuous mode
[   88.504241][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.511829][ T5786] Cannot create hsr debugfs directory
[   88.717932][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.757907][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.802389][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   88.837693][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   88.852272][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.859694][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.897544][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.910490][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.917702][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.938507][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.952656][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.974887][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.982066][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.995797][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.057648][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.064919][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.088387][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.199858][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   89.249681][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.256926][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.333449][  T988] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.340689][  T988] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.479595][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.577731][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.635029][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   89.690151][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.697419][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.711713][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.718930][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.782825][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.857673][ T5785] veth0_vlan: entered promiscuous mode
[   89.939702][ T5785] veth1_vlan: entered promiscuous mode
[   89.963247][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.007475][ T5784] veth0_vlan: entered promiscuous mode
[   90.060816][ T5784] veth1_vlan: entered promiscuous mode
[   90.136398][ T5797] Bluetooth: hci3: command tx timeout
[   90.136408][ T5791] Bluetooth: hci0: command tx timeout
[   90.158202][ T5787] veth0_vlan: entered promiscuous mode
[   90.178037][ T5785] veth0_macvtap: entered promiscuous mode
[   90.202278][ T5787] veth1_vlan: entered promiscuous mode
[   90.214088][ T5791] Bluetooth: hci2: command tx timeout
[   90.215903][ T5797] Bluetooth: hci1: command tx timeout
[   90.261827][ T5785] veth1_macvtap: entered promiscuous mode
[   90.284792][ T5784] veth0_macvtap: entered promiscuous mode
[   90.307757][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.329729][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.348667][ T5784] veth1_macvtap: entered promiscuous mode
[   90.371203][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.381179][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.390313][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.400606][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.437283][ T5787] veth0_macvtap: entered promiscuous mode
[   90.449766][ T5787] veth1_macvtap: entered promiscuous mode
[   90.472577][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.482120][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.493407][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.505817][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.547722][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.558441][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.577440][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.611203][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.622716][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.634661][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.649383][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.660911][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.674267][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.683057][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.691948][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.704192][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.741961][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.753404][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.766712][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.777700][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.790149][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.842814][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.853889][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.863054][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.873646][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.888845][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.907179][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.979502][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.987636][ T5786] veth0_vlan: entered promiscuous mode
[   90.993992][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.037093][ T5786] veth1_vlan: entered promiscuous mode
[   91.117480][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.127606][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.172325][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.227214][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.246659][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.262261][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.280798][ T5786] veth0_macvtap: entered promiscuous mode
[   91.290823][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.334864][ T5786] veth1_macvtap: entered promiscuous mode
[   91.420497][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.443399][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.455231][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.469127][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.481729][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.492502][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.505771][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.521538][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.532599][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.540008][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.586412][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.612462][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.627301][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.644673][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.655269][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.666242][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.700496][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.745717][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.771517][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.780843][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.797883][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.848020][ T5911] syz.0.5[5911]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   92.064642][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.072547][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.084773][  T789] cfg80211: failed to load regulatory.db
[   92.213942][ T5797] Bluetooth: hci0: command tx timeout
[   92.215431][ T5791] Bluetooth: hci3: command tx timeout
[   92.232777][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.265792][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.295333][ T5791] Bluetooth: hci1: command tx timeout
[   92.300946][ T5791] Bluetooth: hci2: command tx timeout
[   92.579963][ T5919] netlink: 'syz.1.2': attribute type 8 has an invalid length.
[   92.773168][ T5913] loop3: detected capacity change from 0 to 40427
[   92.824419][ T5913] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   92.832439][ T5913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   92.873992][ T5911] loop0: detected capacity change from 0 to 32768
[   92.886429][ T5913] F2FS-fs (loop3): invalid crc_offset: 33558524
[   92.922019][ T5913] F2FS-fs (loop3): Found nat_bits in checkpoint
[   92.957968][ T5911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.5 (5911)
[   93.048147][ T5916] loop2: detected capacity change from 0 to 32768
[   93.075789][ T5911] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.095865][ T5916] =======================================================
[   93.095865][ T5916] WARNING: The mand mount option has been deprecated and
[   93.095865][ T5916]          and is ignored by this kernel. Remove the mand
[   93.095865][ T5916]          option from the mount to silence this warning.
[   93.095865][ T5916] =======================================================
[   93.130779][ T5911] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   93.131183][ T5911] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   93.230333][ T5913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   93.235115][ T5911] BTRFS info (device loop0): use lzo compression, level 0
[   93.265261][ T5913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   93.274137][ T5911] BTRFS info (device loop0): force clearing of disk cache
[   93.281320][ T5911] BTRFS info (device loop0): turning on sync discard
[   93.301521][ T5911] BTRFS warning (device loop0): excessive commit interval 43283
[   93.311806][ T5911] BTRFS info (device loop0): enabling ssd optimizations
[   93.325341][ T5911] BTRFS info (device loop0): using spread ssd allocation scheme
[   93.333185][ T5911] BTRFS info (device loop0): not using ssd optimizations
[   93.386917][ T5916] JBD2: Ignoring recovery information on journal
[   93.444229][ T5911] BTRFS info (device loop0): not using spread ssd allocation scheme
[   93.448129][ T5916] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[   93.452391][ T5911] BTRFS info (device loop0): using free space tree
[   93.546843][ T5934] loop1: detected capacity change from 0 to 4096
[   93.569783][ T5934] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   93.584698][ T5916] JBD2: bad block at offset 32
[   93.642087][ T5916] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   93.753189][ T5911] BTRFS info (device loop0): rebuilding free space tree
[   93.960469][ T5916] (syz.2.6,5916,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0
[   94.158470][ T5785] ocfs2: Unmounting device (7,2) on (node local)
[   94.668059][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.743051][ T1064] device offline error, dev sda, sector 721414 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.754356][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90176)
[   94.766692][ T1064] Buffer I/O error on device sda1, logical block 90138
[   94.774260][ T1064] device offline error, dev sda, sector 721558 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.785428][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90194)
[   94.797500][ T1064] Buffer I/O error on device sda1, logical block 90156
[   94.805754][ T1064] Buffer I/O error on device sda1, logical block 90157
[   94.812790][ T1064] device offline error, dev sda, sector 721822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.823777][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90227)
[   94.835802][ T1064] Buffer I/O error on device sda1, logical block 90189
[   94.842758][ T1064] device offline error, dev sda, sector 722022 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.853741][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90252)
[   94.865635][ T1064] Buffer I/O error on device sda1, logical block 90214
[   94.872850][ T1064] device offline error, dev sda, sector 722094 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.883440][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90261)
[   94.895225][ T1064] Buffer I/O error on device sda1, logical block 90223
[   94.902496][ T1064] device offline error, dev sda, sector 722158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.914162][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90269)
[   94.925943][ T1064] Buffer I/O error on device sda1, logical block 90231
[   94.932951][ T1064] device offline error, dev sda, sector 722254 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.945291][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90281)
[   94.957098][ T1064] Buffer I/O error on device sda1, logical block 90243
[   94.964125][ T1064] device offline error, dev sda, sector 722622 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   94.974647][ T1064] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90327)
[   94.986385][ T1064] Buffer I/O error on device sda1, logical block 90289
[   94.998023][   T50] device offline error, dev sda, sector 722742 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   95.032707][   T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90342)
[   95.046882][   T50] Buffer I/O error on device sda1, logical block 90304
[   95.057324][   T50] device offline error, dev sda, sector 723638 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[   95.069358][   T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90454)
[   95.083787][ T1099] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2027, error -5)
[   95.122162][ T1099] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2034, error -5)
[   95.151522][ T1099] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[   95.164847][ T1099] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[   95.193691][ T2906] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2028, error -5)
[   95.229831][ T2906] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2028, error -5)
[   95.249706][ T2906] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2029, error -5)
[   95.303487][ T2945] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[   95.346515][ T5962] loop3: detected capacity change from 0 to 64
[   95.355129][ T2945] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2035, error -5)
[   95.383995][ T2945] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2031, error -5)
[   95.420439][ T5115] Aborting journal on device sda1-8.
[   95.431129][ T5962] hfs: unable to locate alternate MDB
[   95.443394][ T5956] Buffer I/O error on dev sda1, logical block 130, lost async page write
[   95.443768][ T5962] hfs: continuing without an alternate MDB
[   95.463868][   T24] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[   95.465349][ T5956] Buffer I/O error on dev sda1, logical block 224, lost async page write
[   95.481242][ T5115] JBD2: I/O error when updating journal superblock for sda1-8.
[   95.506062][ T5773] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal
[   95.542453][ T1064] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   95.631719][ T5956] Buffer I/O error on dev sda1, logical block 226, lost async page write
[   95.659163][ T5956] Buffer I/O error on dev sda1, logical block 4260, lost async page write
[   95.672697][ T5956] Buffer I/O error on dev sda1, logical block 5754, lost async page write
[   95.681692][ T5956] Buffer I/O error on dev sda1, logical block 5756, lost async page write
[   95.696465][ T5956] Buffer I/O error on dev sda1, logical block 23725, lost async page write
[   95.707790][ T5956] Buffer I/O error on dev sda1, logical block 64971, lost async page write
[   96.026277][ T5973] loop0: detected capacity change from 0 to 1024
[   96.067970][ T5956] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   96.464071][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.663720][ T5872] usb 4-1: Using ep0 maxpacket: 8
[   96.683225][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.703829][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   96.740013][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   96.753763][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.775246][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   96.784727][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.003824][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.027813][ T5872] usb 4-1: GET_CAPABILITIES returned 0
[   97.037126][ T5872] usbtmc 4-1:16.0: can't read capabilities
[   97.214093][    T8] usb 3-1: Using ep0 maxpacket: 8
[   97.236816][    T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   97.255952][    T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   97.280733][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   97.301929][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.321390][ T5872] usb 4-1: USB disconnect, device number 2
[   97.326019][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.372067][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   97.396817][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.664119][    T8] usb 3-1: GET_CAPABILITIES returned 0
[   97.680906][    T8] usbtmc 3-1:16.0: can't read capabilities
[   97.734058][ T5797] Bluetooth: hci3: command tx timeout
[   97.876194][ T6001] loop0: detected capacity change from 0 to 32768
[   97.906887][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   97.920695][ T6001] JBD2: Ignoring recovery information on journal
[   97.943623][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   97.952801][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   97.962117][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   97.995070][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.005245][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.014404][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.023553][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.041539][ T6001] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   98.044648][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.065994][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.075146][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.084250][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.093336][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.111418][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.120608][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.129746][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   98.156360][ T5872] usb 3-1: USB disconnect, device number 2
[   98.278646][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[   98.629336][ T6015] loop0: detected capacity change from 0 to 1024
[   98.660582][ T6015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[   98.689839][ T6015] System zones: 0-1, 3-12
[   99.924013][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.333609][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  100.390074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  100.651831][ T5791] Bluetooth: hci3: command tx timeout
[  100.727621][ T5879] rxe_eth0 speed is unknown, defaulting to 1000
[  100.737180][ T6015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.895020][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.042975][ T6029] loop2: detected capacity change from 0 to 4096
[  102.484087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.909565][ T5525] EXT4-fs warning: 17 callbacks suppressed
[  102.909584][ T5525] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block
[  102.946432][ T6029] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  102.977032][ T6029] ntfs3: loop2: Failed to load $Extend (-22).
[  102.983191][ T6029] ntfs3: loop2: Failed to initialize $Extend.
[  103.238951][ T1099] ntfs3: loop2: ino=9, ntfs3_write_inode failed, -22.
[  103.265278][ T5785] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22.
[  105.043993][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.349330][   T28] audit: type=1807 audit(1794299583.886:2): UNKNOWN=me res=0
[  105.358571][ T6048] ima: policy update failed
[  105.383683][   T28] audit: type=1802 audit(1794299583.896:3): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.35" res=0 errno=0
[  105.404837][   T28] audit: type=1802 audit(1794299583.896:4): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.35" res=0 errno=0
[  105.807150][ T5791] block nbd0: Receive control failed (result -32)
[  105.816739][ T5797] block nbd0: Receive control failed (result -32)
[  106.010666][ T6043] loop2: detected capacity change from 0 to 32768
[  106.052069][ T6043] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  106.083045][ T6043] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  106.215881][ T6043] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  106.235032][    T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  106.242117][    T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  106.400079][    T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 157ms
[  106.420849][    T8] gfs2: fsid=syz:syz.0: jid=0: Done
[  106.435740][ T6043] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  106.470360][ T6043] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  107.272315][ T6089] loop2: detected capacity change from 0 to 256
[  107.313928][ T6089] exfat: Deprecated parameter 'utf8'
[  107.388118][ T6089] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  107.485902][ T6091] loop3: detected capacity change from 0 to 1024
[  108.033728][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.206265][ T6118] loop0: detected capacity change from 0 to 1024
[  108.224294][ T6118] hfsplus: unable to parse mount options
[  108.236497][ T5872] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  108.246695][ T5872] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  108.257398][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  108.267042][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  108.278568][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  108.303065][ T5872] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  108.346078][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  108.368543][ T5872] usb 3-1: Product: syz
[  108.372777][ T5872] usb 3-1: Manufacturer: syz
[  108.424719][ T5872] cdc_wdm 3-1:1.0: skipping garbage
[  108.437403][ T5872] cdc_wdm 3-1:1.0: skipping garbage
[  108.454833][ T5872] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  108.473160][ T5872] cdc_wdm 3-1:1.0: Unknown control protocol
[  108.896207][ T6128] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL)
[  109.233567][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.163952][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  110.173574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  110.403579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  110.573652][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  111.160091][ T5788] usb 3-1: USB disconnect, device number 3
[  111.170124][ T6128] device-mapper: ioctl: error adding target to table
[  112.092195][ T6156] kvm: user requested TSC rate below hardware speed
[  112.249480][ T6162] hub 1-0:1.0: USB hub found
[  112.254925][ T6162] hub 1-0:1.0: 1 port detected
[  112.573909][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  112.690079][   T27] kernel write not supported for file /ppp (pid: 27 comm: kworker/1:1)
[  112.799020][ T5788] usb 1-1: Using ep0 maxpacket: 8
[  112.807624][ T5788] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7
[  112.830590][ T5788] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  112.843420][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.854622][ T5788] usb 1-1: Product: syz
[  112.858860][ T5788] usb 1-1: Manufacturer: syz
[  112.864772][ T5788] usb 1-1: SerialNumber: syz
[  113.033692][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.093229][ T5788] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  113.102951][ T5788] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  113.173177][ T5788] usb 1-1: USB disconnect, device number 2
[  113.241490][   T27] usb 2-1: Using ep0 maxpacket: 8
[  113.264678][   T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  113.283245][   T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.294025][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  113.308138][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  113.318645][   T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.341971][   T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  113.353133][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.635161][   T27] usb 2-1: GET_CAPABILITIES returned 0
[  113.659531][   T27] usbtmc 2-1:16.0: can't read capabilities
[  113.843263][ T5788] usb 2-1: USB disconnect, device number 2
[  113.895033][ T6212] loop0: detected capacity change from 0 to 16
[  113.898674][ T6211] jffs2: notice: (6211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  113.944908][ T6212] erofs: (device loop0): mounted with root inode @ nid 36.
[  113.976486][   T28] audit: type=1800 audit(1794299592.516:5): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file1" dev="loop0" ino=86 res=0 errno=0
[  114.908721][ T6250] loop3: detected capacity change from 0 to 1024
[  114.938604][ T6250] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  114.989350][ T6250] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  115.014785][ T6250] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.121: couldn't read orphan inode 11 (err -117)
[  115.055458][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.091094][ T6250] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.121: lblock 2 mapped to illegal pblock 2 (length 1)
[  115.107698][ T6250] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  115.116130][ T6250] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.121: lblock 0 mapped to illegal pblock 48 (length 1)
[  115.134742][ T6250] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  115.176037][ T6250] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.121: Failed to acquire dquot type 0
[  115.370388][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.394447][ T5784] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  115.424045][ T6264] loop1: detected capacity change from 0 to 512
[  115.461457][ T5784] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  115.511133][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.526389][ T5784] EXT4-fs error (device loop3): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error
[  115.542493][ T6264] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.792525][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.903907][ T2945] Bluetooth: hci4: Frame reassembly failed (-84)
[  115.915700][ T2945] Bluetooth: hci4: Frame reassembly failed (-84)
[  115.928986][ T6274] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  117.978221][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  120.404202][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  120.563796][ T6308] loop0: detected capacity change from 0 to 32768
[  120.786220][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.798525][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.812657][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.826829][   T23] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  120.837884][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.872898][   T23] usb 2-1: Product: syz
[  120.877718][   T23] usb 2-1: Manufacturer: syz
[  120.882898][   T23] usb 2-1: SerialNumber: syz
[  120.910516][   T23] usb 2-1: selecting invalid altsetting 1
[  120.924732][   T23] usb 2-1: unit 6 not found!
[  120.935899][ T6308] JBD2: Ignoring recovery information on journal
[  121.451673][ T6308] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  121.773782][   T23] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  121.854212][   T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  121.875635][   T23] usb 2-1: USB disconnect, device number 3
[  121.942486][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.029113][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  122.068640][ T6323] zero sized request
[  126.118661][ T6369] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[  126.143923][ T6369] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[  126.172401][ T6369] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[  126.194309][ T6369] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[  126.224468][ T6369] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[  126.392239][ T6351] loop3: detected capacity change from 0 to 32768
[  126.420648][ T6351] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  126.432268][ T6351] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  126.605284][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'.
[  128.487401][ T6351] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  128.607359][ T5872] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  128.627857][ T5872] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  128.896844][ T5872] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 268ms
[  128.920326][ T5872] gfs2: fsid=syz:syz.0: jid=0: Done
[  128.932451][ T6351] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  129.001887][ T6351] gfs2: fsid=syz:syz.0: can't create quotad thread: -4
[  129.177993][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[  129.229422][ T6394] netlink: 'syz.1.164': attribute type 12 has an invalid length.
[  129.702281][ T6399] loop1: detected capacity change from 0 to 1024
[  129.739103][ T6399] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.831007][ T6401] Zero length message leads to an empty skb
[  129.852940][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.101486][   T28] audit: type=1804 audit(1794299608.636:6): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.167" name="/newroot/48/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  130.170884][   T28] audit: type=1804 audit(1794299608.666:7): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.167" name="/newroot/48/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  130.209740][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.013048][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  134.022081][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  134.251197][ T6426] loop3: detected capacity change from 0 to 1024
[  134.665305][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  134.698065][ T6433] gadgetfs: bound to dummy_udc driver
[  134.857654][ T5872] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  134.876838][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.896722][ T6440] loop2: detected capacity change from 0 to 8
[  134.907166][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  134.920880][ T6440] Dev loop2: unable to read RDB block 8
[  134.926689][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.930107][ T5872] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  134.963563][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  134.964333][ T6440]  loop2: unable to read partition table
[  134.983178][ T5872] usb 1-1: Product: syz
[  134.991007][ T5872] usb 1-1: Manufacturer: syz
[  134.995516][ T6440] loop2: partition table beyond EOD, truncated
[  135.007237][ T6440] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  135.020611][ T5872] cdc_wdm 1-1:1.0: skipping garbage
[  135.035888][ T5872] cdc_wdm 1-1:1.0: skipping garbage
[  135.052556][ T5872] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  135.066180][ T5152] Dev loop2: unable to read RDB block 8
[  135.071960][ T5152]  loop2: unable to read partition table
[  135.079470][ T5152] loop2: partition table beyond EOD, truncated
[  135.080974][ T5872] cdc_wdm 1-1:1.0: Unknown control protocol
[  135.235174][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.242069][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.248423][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.255074][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.261794][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.268452][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.274997][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.281647][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.287977][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.294624][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.303655][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.310326][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.317004][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.323655][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.330078][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.336754][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.343132][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.349786][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  135.357487][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  135.364146][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  137.889695][    T8] usb 1-1: USB disconnect, device number 3
[  137.889992][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  137.926764][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  140.330963][ T6463] FAULT_INJECTION: forcing a failure.
[  140.330963][ T6463] name fail_futex, interval 1, probability 0, space 0, times 1
[  140.363665][ T6463] CPU: 1 PID: 6463 Comm: syz.1.188 Not tainted syzkaller #0
[  140.371031][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  140.381151][ T6463] Call Trace:
[  140.384474][ T6463]  <TASK>
[  140.387492][ T6463]  dump_stack_lvl+0x18c/0x250
[  140.392343][ T6463]  ? show_regs_print_info+0x20/0x20
[  140.397601][ T6463]  ? load_image+0x420/0x420
[  140.402265][ T6463]  should_fail_ex+0x394/0x4c0
[  140.407008][ T6463]  get_futex_key+0x134/0xf40
[  140.411688][ T6463]  ? futex_setup_timer+0xc0/0xc0
[  140.416670][ T6463]  ? perf_event_namespaces+0x196/0x9e0
[  140.422181][ T6463]  ? perf_event_fork+0x1c0/0x1c0
[  140.427203][ T6463]  futex_wake+0x127/0x4f0
[  140.431585][ T6463]  ? futex_wake_mark+0x150/0x150
[  140.436577][ T6463]  ? __lock_acquire+0x7eb0/0x7eb0
[  140.441666][ T6463]  do_futex+0x35d/0x3e0
[  140.445888][ T6463]  ? __ia32_sys_get_robust_list+0x110/0x110
[  140.451857][ T6463]  ? fput+0x154/0x1a0
[  140.455895][ T6463]  __se_sys_futex+0x3a9/0x440
[  140.460633][ T6463]  ? __x64_sys_futex+0xf0/0xf0
[  140.465453][ T6463]  ? __x64_sys_futex+0x21/0xf0
[  140.470267][ T6463]  do_syscall_64+0x55/0xb0
[  140.474733][ T6463]  ? clear_bhb_loop+0x40/0x90
[  140.479465][ T6463]  ? clear_bhb_loop+0x40/0x90
[  140.484204][ T6463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.490179][ T6463] RIP: 0033:0x7f39baba8f19
[  140.494645][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.514326][ T6463] RSP: 002b:00007f39b8df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.522807][ T6463] RAX: ffffffffffffffda RBX: 00007f39bae25fa8 RCX: 00007f39baba8f19
[  140.530838][ T6463] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39bae25fac
[  140.538867][ T6463] RBP: 00007f39bae25fa0 R08: 0000000000745d1e R09: 0000000000000000
[  140.546884][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.554900][ T6463] R13: 00007f39bae26038 R14: 00007fffe3495b40 R15: 00007fffe3495c28
[  140.562936][ T6463]  </TASK>
[  140.818252][ T6469] loop3: detected capacity change from 0 to 1024
[  140.839572][ T6469] EXT4-fs: Ignoring removed nomblk_io_submit option
[  140.879096][ T6469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.982304][ T6469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.021816][ T6469] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.080571][ T6478] syz.1.193 uses obsolete (PF_INET,SOCK_PACKET)
[  141.106597][ T6482] loop2: detected capacity change from 0 to 512
[  141.124889][ T6482] EXT4-fs (loop2): bad s_want_extra_isize: 1568
[  141.211159][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  141.358541][ T6484] loop0: detected capacity change from 0 to 1024
[  141.447515][ T5791] Bluetooth: hci0: Invalid handle: 0x3800 > 0x0eff
[  141.923487][ T6512] loop3: detected capacity change from 0 to 1024
[  141.935313][ T6512] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.986901][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.013736][ T5879] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  142.162834][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.195312][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  142.213877][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  142.246329][ T5879] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  142.273662][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.536256][ T6524] loop2: detected capacity change from 0 to 2048
[  142.577586][ T6524]  loop2: p1 < > p4
[  142.577586][ T6524]  p4: <netbsd: >
[  142.590677][ T6516] loop1: detected capacity change from 0 to 32768
[  142.606198][ T6524] loop2: p4 size 722688 extends beyond EOD, truncated
[  142.640191][ T6516] 
[  142.640191][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.640191][ T6516] 
[  142.751753][ T6516] ERROR: (device loop1): diWrite: ixpxd invalid
[  142.751753][ T6516] 
[  142.775494][ T6516] ERROR: (device loop1): txCommit: 
[  142.775494][ T6516] 
[  142.863203][ T6516] 
[  142.863203][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.863203][ T6516] 
[  142.887113][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.213'.
[  142.904787][ T1207] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  142.920929][ T6516] 
[  142.920929][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.920929][ T6516] 
[  142.986154][ T6516] ERROR: (device loop1): diWrite: ixpxd invalid
[  142.986154][ T6516] 
[  143.009500][ T6516] ERROR: (device loop1): txCommit: 
[  143.009500][ T6516] 
[  143.032913][ T6516] ERROR: (device loop1): diFree: wmap shows inode already free
[  143.032913][ T6516] 
[  143.064808][ T6516] 
[  143.064808][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.064808][ T6516] 
[  143.080009][ T6516] 
[  143.080009][ T6516]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.080009][ T6516] 
[  143.103894][ T1207] usb 4-1: Using ep0 maxpacket: 8
[  143.123263][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.143705][ T5786] 
[  143.143705][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.143705][ T5786] 
[  143.149289][ T1207] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.164697][ T5786] 
[  143.164697][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.164697][ T5786] 
[  143.180451][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.193358][ T1207] usb 4-1: config 0 descriptor??
[  143.321035][ T5879] pegasus: probe of 1-1:1.0 failed with error -71
[  143.345249][ T5791] Bluetooth: hci3: Invalid handle: 0x3800 > 0x0eff
[  143.362622][ T5879] usb 1-1: USB disconnect, device number 4
[  143.416457][ T1207] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  143.494244][ T5791] Bluetooth: hci0: command tx timeout
[  143.620641][ T6541] input: syz0 as /devices/virtual/input/input5
[  143.827155][ T5879] usb 4-1: USB disconnect, device number 3
[  143.941269][ T6547] syz_tun: entered allmulticast mode
[  143.957619][ T6547] pim6reg: entered allmulticast mode
[  144.003677][  T789] IPVS: starting estimator thread 0...
[  144.011243][ T6550] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  144.018854][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  144.109681][ T6551] IPVS: using max 18 ests per chain, 43200 per kthread
[  145.759853][ T5791] Bluetooth: hci3: command tx timeout
[  146.141642][ T6563] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  146.766361][ T6580] Write-error on swap-device (8:0:282382)
[  146.819452][ T6581] loop2: detected capacity change from 0 to 4096
Nov 10 08:33:45 syzkaller kern.alert kernel: [  146.766361][ T6580] Write-error on swap-device (8:0:282382)
[  146.851104][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.890073][ T6580] Write-error on swap-device (8:0:282390)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  146.890073][ T6580] Write-error on swap-device (8:0:282390)
[  146.962989][ T6580] Write-error on swap-device (8:0:282398)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  146.962989][ T6580] Write-error on swap-device (8:0:282398)
[  147.024123][ T6580] Write-error on swap-device (8:0:282406)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.024123][ T6580] Write-error on swap-device (8:0:282406)
[  147.072017][ T6580] Write-error on swap-device (8:0:282414)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.072017][ T6580] Write-error on swap-device (8:0:282414)
[  147.102955][ T6580] Write-error on swap-device (8:0:277294)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.102955][ T6580] Write-error on swap-device (8:0:277294)
[  147.145318][ T6580] Write-error on swap-device (8:0:270086)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.145318][ T6580] Write-error on swap-device (8:0:270086)
[  147.198101][ T6580] Write-error on swap-device (8:0:270094)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.198101][ T6580] Write-error on swap-device (8:0:270094)
[  147.215026][ T6580] Write-error on swap-device (8:0:282422)
[  147.221016][ T6580] Write-error on swap-device (8:0:282430)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.215026][ T6580] Write-error on swap-device (8:0:282422)
Nov 10 08:33:45 syzkaller kern.alert kernel: [  147.221016][ T6580] Write-error on swap-device (8:0:282430)
[  147.272080][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.763899][ T6601] process 'syz.0.238' launched './file2' with NULL argv: empty string added
[  151.425251][ T6634] FAULT_INJECTION: forcing a failure.
[  151.425251][ T6634] name fail_futex, interval 1, probability 0, space 0, times 0
[  151.459069][ T6634] CPU: 1 PID: 6634 Comm: syz.1.249 Not tainted syzkaller #0
[  151.466464][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  151.476550][ T6634] Call Trace:
[  151.479852][ T6634]  <TASK>
[  151.482796][ T6634]  dump_stack_lvl+0x18c/0x250
[  151.487505][ T6634]  ? verify_lock_unused+0x140/0x140
[  151.492728][ T6634]  ? show_regs_print_info+0x20/0x20
[  151.497948][ T6634]  ? load_image+0x420/0x420
[  151.502493][ T6634]  should_fail_ex+0x394/0x4c0
[  151.507188][ T6634]  get_futex_key+0x134/0xf40
[  151.511795][ T6634]  ? futex_setup_timer+0xc0/0xc0
[  151.516920][ T6634]  ? __lock_acquire+0x7eb0/0x7eb0
[  151.521958][ T6634]  futex_wake+0x127/0x4f0
[  151.526304][ T6634]  ? futex_wake_mark+0x150/0x150
[  151.531269][ T6634]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  151.537266][ T6634]  ? __lock_acquire+0x7eb0/0x7eb0
[  151.542308][ T6634]  ? lock_chain_count+0x20/0x20
[  151.547170][ T6634]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  151.553080][ T6634]  do_futex+0x35d/0x3e0
[  151.557253][ T6634]  ? __ia32_sys_get_robust_list+0x110/0x110
[  151.563164][ T6634]  __se_sys_futex+0x3a9/0x440
[  151.568033][ T6634]  ? __x64_sys_futex+0xf0/0xf0
[  151.572838][ T6634]  ? __x64_sys_futex+0x21/0xf0
[  151.577716][ T6634]  do_syscall_64+0x55/0xb0
[  151.582178][ T6634]  ? clear_bhb_loop+0x40/0x90
[  151.586874][ T6634]  ? clear_bhb_loop+0x40/0x90
[  151.591572][ T6634]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  151.597743][ T6634] RIP: 0033:0x7f39baba8f19
[  151.602257][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.621887][ T6634] RSP: 002b:00007f39b8df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  151.630311][ T6634] RAX: ffffffffffffffda RBX: 00007f39bae25fa8 RCX: 00007f39baba8f19
[  151.638340][ T6634] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39bae25fac
[  151.646345][ T6634] RBP: 00007f39bae25fa0 R08: 0000000000745d1e R09: 0000000000000000
[  151.654432][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.662426][ T6634] R13: 00007f39bae26038 R14: 00007fffe3495b40 R15: 00007fffe3495c28
[  151.670429][ T6634]  </TASK>
[  152.036110][ T6639] FAULT_INJECTION: forcing a failure.
[  152.036110][ T6639] name failslab, interval 1, probability 0, space 0, times 1
[  152.064057][ T6639] CPU: 1 PID: 6639 Comm: syz.1.251 Not tainted syzkaller #0
[  152.071433][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  152.081548][ T6639] Call Trace:
[  152.084896][ T6639]  <TASK>
[  152.087870][ T6639]  dump_stack_lvl+0x18c/0x250
[  152.092691][ T6639]  ? show_regs_print_info+0x20/0x20
[  152.097948][ T6639]  ? load_image+0x420/0x420
[  152.102513][ T6639]  ? __might_sleep+0xe0/0xe0
[  152.107154][ T6639]  ? __lock_acquire+0x7eb0/0x7eb0
[  152.112324][ T6639]  should_fail_ex+0x394/0x4c0
[  152.117058][ T6639]  should_failslab+0x9/0x20
[  152.121604][ T6639]  slab_pre_alloc_hook+0x59/0x300
[  152.126685][ T6639]  kmem_cache_alloc+0x5a/0x2d0
[  152.131493][ T6639]  ? getname_flags+0xbb/0x500
[  152.136234][ T6639]  getname_flags+0xbb/0x500
[  152.140792][ T6639]  do_mq_open+0x1a2/0x760
[  152.145625][ T6639]  ? mq_clear_sbinfo+0x90/0x90
[  152.150547][ T6639]  __x64_sys_mq_open+0x186/0x1e0
[  152.155579][ T6639]  ? proc_ipc_sem_dointvec+0x180/0x180
[  152.161186][ T6639]  ? lockdep_hardirqs_on+0x98/0x150
[  152.166417][ T6639]  do_syscall_64+0x55/0xb0
[  152.170874][ T6639]  ? clear_bhb_loop+0x40/0x90
[  152.175588][ T6639]  ? clear_bhb_loop+0x40/0x90
[  152.180317][ T6639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.186373][ T6639] RIP: 0033:0x7f39baba8f19
[  152.190822][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.210456][ T6639] RSP: 002b:00007f39b8df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  152.218909][ T6639] RAX: ffffffffffffffda RBX: 00007f39bae25fa0 RCX: 00007f39baba8f19
[  152.226919][ T6639] RDX: 0000000000000120 RSI: 0000000000000042 RDI: 0000000000000000
[  152.234918][ T6639] RBP: 00007f39bac37f6d R08: 0000000000000000 R09: 0000000000000000
[  152.242918][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.250922][ T6639] R13: 00007f39bae26038 R14: 00007f39bae25fa0 R15: 00007fffe3495c28
[  152.258949][ T6639]  </TASK>
[  152.317864][ T6641] loop2: detected capacity change from 0 to 64
[  152.328079][ T6641] hfs: unable to locate alternate MDB
[  152.334040][ T6641] hfs: continuing without an alternate MDB
[  152.586224][ T6645] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  154.746932][ T6660] loop1: detected capacity change from 0 to 2048
[  154.805546][ T6660]  loop1: p1 < > p4
[  154.805546][ T6660]  p4: <netbsd: >
[  154.822632][ T6660] loop1: p4 size 722688 extends beyond EOD, truncated
[  155.038496][ T5879] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  155.233793][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  155.242500][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  155.263896][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  155.286876][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.309431][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.358876][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  156.992338][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.269094][ T6681] loop3: detected capacity change from 0 to 1024
[  157.276513][ T6681] hfsplus: unable to parse mount options
[  157.580498][ T5879] usb 3-1: GET_CAPABILITIES returned 0
[  157.587200][ T5879] usbtmc 3-1:16.0: can't read capabilities
[  157.619084][ T5805] blk_print_req_error: 28 callbacks suppressed
[  157.619100][ T5805] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  157.807707][   T23] usb 3-1: USB disconnect, device number 5
[  160.666483][ T6713] syzkaller1: entered promiscuous mode
[  160.672157][ T6713] syzkaller1: entered allmulticast mode
[  162.860087][ T6732] loop2: detected capacity change from 0 to 1024
[  162.867249][ T6732] hfsplus: unable to parse mount options
[  162.949008][ T5805] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  163.633123][ T6750] syzkaller1: entered promiscuous mode
[  163.638929][ T6750] syzkaller1: entered allmulticast mode
[  163.853669][ T1207] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  163.890540][ T6758] input: syz1 as /devices/virtual/input/input7
[  164.056733][ T1207] usb 4-1: unable to get BOS descriptor or descriptor too short
[  164.065170][ T1207] usb 4-1: not running at top speed; connect to a high speed hub
[  164.084372][ T1207] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  164.115380][ T1207] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  164.143759][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.152964][ T1207] usb 4-1: Product: syz
[  164.161201][ T1207] usb 4-1: Manufacturer: syz
[  164.168146][ T1207] usb 4-1: SerialNumber: syz
[  164.223322][ T6766] loop1: detected capacity change from 0 to 2048
[  164.297278][ T6767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.381479][ T6766] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  164.396034][ T6766] Remounting filesystem read-only
[  164.407750][ T6766] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  164.420104][ T1207] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  164.620474][ T1207] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  164.622866][ T6772] loop1: detected capacity change from 0 to 1024
[  164.636633][ T6772] hfsplus: unable to parse mount options
[  164.677587][ T1207] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  164.687158][ T5796] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  166.694157][ T1207] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  166.806253][ T1207] usb 4-1: USB disconnect, device number 4
[  166.872184][ T6783] input: syz1 as /devices/virtual/input/input8
[  166.884487][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.154022][ T6790] __end_swap_bio_write: 591 callbacks suppressed
[  167.154044][ T6790] Write-error on swap-device (8:0:272830)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.154044][ T6790] Write-error on swap-device (8:0:272830)
[  167.208335][ T6790] Write-error on swap-device (8:0:272838)
[  167.236392][ T6790] Write-error on swap-device (8:0:272846)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.208335][ T6790] Write-error [  167.251511][ T6790] Write-error on swap-device (8:0:272854)
on swap-device (8:0:272838)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.236392][ T6790] Write-error on swap-device (8:0[  167.268463][ T6790] Write-error on swap-device (8:0:272862)
:272846)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.251511][ T6790] Write-error on swap-device (8:0:272854)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.268463][ T6790] Write-error on swap-device (8:0:272862)
[  167.306289][ T6790] Write-error on swap-device (8:0:278278)
[  167.312272][ T6790] Write-error on swap-device (8:0:278286)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.306289][ T6790] Write-error on swap-device (8:0:278278)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.312272][ T6790] Write-error on swap-device (8:0:278286)
[  167.372276][ T6790] Write-error on swap-device (8:0:278294)
Nov 10 08:34:05 syzkaller kern.alert kernel: [  167.372276][ T6790] Write-error on swap-device (8:0:278294)
[  169.064345][ T6790] Write-error on swap-device (8:0:278302)
[  169.070339][ T6790] Write-error on swap-device (8:0:278310)
Nov 10 08:34:07 syzkaller kern.alert kernel: [  169.064345][ T6790] Write-error on swap-device (8:0:278302)
Nov 10 08:34:07 syzkaller kern.alert kernel: [  169.070339][ T6790] Write-error on swap-device (8:0:278310)
[  169.386216][ T6802] loop1: detected capacity change from 0 to 1024
[  169.393287][ T6802] hfsplus: unable to parse mount options
[  169.451300][ T5805] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.568191][ T6805] loop0: detected capacity change from 0 to 512
[  169.656066][ T6805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  169.670641][ T6805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.712713][ T6805] EXT4-fs (loop0): 1 truncate cleaned up
[  169.745522][ T6805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.889421][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.183199][ T6816] loop0: detected capacity change from 0 to 1024
[  170.190398][ T6812] loop3: detected capacity change from 0 to 4096
[  170.196417][ T6816] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.224022][ T6816] EXT4-fs: inline encryption not supported
[  170.238432][ T6816] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.272957][ T6816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.341185][ T6816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.382410][ T6812] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  170.401230][ T6812] ntfs3: loop3: Failed to load $Extend (-22).
[  170.414627][ T6812] ntfs3: loop3: Failed to initialize $Extend.
[  170.428503][ T6816] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.533652][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  170.546086][ T6816] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.316: bg 0: block 112: padding at end of block bitmap is not set
[  170.566645][ T6816] EXT4-fs (loop0): Remounting filesystem read-only
[  170.611463][ T6814] loop2: detected capacity change from 0 to 32768
[  170.667005][ T2906] ntfs3: loop3: ino=9, ntfs3_write_inode failed, -22.
[  170.671201][ T6814] JBD2: Ignoring recovery information on journal
[  170.698827][ T5784] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22.
[  170.712525][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.734935][ T6814] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  170.741402][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.803659][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024
[  170.876397][ T5879] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00
[  170.906128][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.936642][ T5879] usb 2-1: Product: syz
[  170.940877][ T5879] usb 2-1: Manufacturer: syz
[  170.966524][ T5879] usb 2-1: SerialNumber: syz
[  170.993040][ T6818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.011934][ T5879] symbolserial 2-1:1.0: symbol converter detected
[  171.060151][ T5879] usb 2-1: symbol converter now attached to ttyUSB0
[  171.190347][ T5785] ocfs2: Unmounting device (7,2) on (node local)
[  171.252694][    C0] symbol ttyUSB0: symbol_int_callback - failed resubmitting read urb, error -1
[  171.267548][ T1207] usb 2-1: USB disconnect, device number 4
[  171.309519][ T1207] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  171.331172][ T1207] symbolserial 2-1:1.0: device disconnected
[  171.486856][ T6839] loop2: detected capacity change from 0 to 512
[  171.513408][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.532498][ T6839] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  171.725268][ T6845] loop3: detected capacity change from 0 to 1024
[  171.732615][ T6845] hfsplus: unable to parse mount options
[  171.747643][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.776842][ T5805] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  171.969719][ T6850] loop0: detected capacity change from 0 to 2048
[  171.998855][ T5879] kernel write not supported for file /uinput (pid: 5879 comm: kworker/0:6)
[  172.437652][ T6858] loop1: detected capacity change from 0 to 32768
[  172.483736][ T6858] JBD2: Ignoring recovery information on journal
[  172.628393][ T6858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  172.677920][ T6868] loop0: detected capacity change from 0 to 1024
[  172.686180][ T6868] hfsplus: unable to parse mount options
[  173.014648][ T5786] ocfs2: Unmounting device (7,1) on (node local)
[  173.319011][ T6880] exfat: Deprecated parameter 'utf8'
[  173.362452][ T6880] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  173.759115][ T6874] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  173.865874][ T6901] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  174.043120][ T6874] XFS (loop3): Ending clean mount
[  174.117582][ T6874] XFS (loop3): Quotacheck needed: Please wait.
[  174.229560][ T6874] XFS (loop3): Quotacheck: Done.
[  176.195975][ T5784] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  176.486801][ T6917] set_capacity_and_notify: 3 callbacks suppressed
[  176.486820][ T6917] loop0: detected capacity change from 0 to 1024
[  176.500804][ T6917] hfsplus: unable to parse mount options
[  176.559766][ T5805] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  176.944096][ T6315] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  177.126673][ T6933] syzkaller1: entered promiscuous mode
[  177.132356][ T6933] syzkaller1: entered allmulticast mode
[  177.146520][ T6315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  177.158026][ T6315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64
[  177.169522][ T6315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  177.200306][ T6315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.218245][ T6315] usb 2-1: config 0 descriptor??
[  177.223843][ T6921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  179.616628][ T6315] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  179.750472][ T6943] loop3: detected capacity change from 0 to 512
[  179.765396][ T6943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  179.791260][ T6943] EXT4-fs (loop3): 1 truncate cleaned up
[  179.862152][ T5879] usb 2-1: USB disconnect, device number 5
[  179.877666][ T6943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.032468][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.483750][ T6315] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  180.498859][ T6963] FAULT_INJECTION: forcing a failure.
[  180.498859][ T6963] name failslab, interval 1, probability 0, space 0, times 0
[  180.515760][ T6963] CPU: 0 PID: 6963 Comm: syz.0.356 Not tainted syzkaller #0
[  180.523151][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  180.533261][ T6963] Call Trace:
[  180.536566][ T6963]  <TASK>
[  180.539530][ T6963]  dump_stack_lvl+0x18c/0x250
[  180.544278][ T6963]  ? show_regs_print_info+0x20/0x20
[  180.549537][ T6963]  ? load_image+0x420/0x420
[  180.554092][ T6963]  ? __might_sleep+0xe0/0xe0
[  180.558730][ T6963]  ? __lock_acquire+0x7eb0/0x7eb0
[  180.563788][ T6963]  should_fail_ex+0x394/0x4c0
[  180.568557][ T6963]  should_failslab+0x9/0x20
[  180.573094][ T6963]  slab_pre_alloc_hook+0x59/0x300
[  180.578153][ T6963]  kmem_cache_alloc+0x5a/0x2d0
[  180.582969][ T6963]  ? getname_flags+0xbb/0x500
[  180.587703][ T6963]  getname_flags+0xbb/0x500
[  180.592244][ T6963]  __x64_sys_mkdirat+0x7c/0xa0
[  180.597037][ T6963]  do_syscall_64+0x55/0xb0
[  180.601517][ T6963]  ? clear_bhb_loop+0x40/0x90
[  180.606267][ T6963]  ? clear_bhb_loop+0x40/0x90
[  180.610999][ T6963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.616934][ T6963] RIP: 0033:0x7f81669a8f19
[  180.621396][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.641124][ T6963] RSP: 002b:00007f81678a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  180.649573][ T6963] RAX: ffffffffffffffda RBX: 00007f8166c25fa0 RCX: 00007f81669a8f19
[  180.657581][ T6963] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  180.665577][ T6963] RBP: 00007f8166a37f6d R08: 0000000000000000 R09: 0000000000000000
[  180.673581][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.681583][ T6963] R13: 00007f8166c26038 R14: 00007f8166c25fa0 R15: 00007ffc1b0b18b8
[  180.689680][ T6963]  </TASK>
[  180.739465][ T6315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  180.804686][ T6315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  180.894846][ T6315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  181.013044][ T6965] loop3: detected capacity change from 0 to 1024
[  181.020839][ T6965] hfsplus: unable to parse mount options
[  181.040216][ T6315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  181.125647][ T6315] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  181.486778][ T6315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.542559][ T6951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  181.575514][ T6951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  181.753676][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  181.974021][ T5879] usb 2-1: Using ep0 maxpacket: 32
[  181.981014][ T5879] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  181.989289][ T5879] usb 2-1: config 0 has no interface number 0
[  182.004476][ T5879] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  182.013863][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.021915][ T5879] usb 2-1: Product: syz
[  182.028802][ T5879] usb 2-1: Manufacturer: syz
[  182.033693][ T5879] usb 2-1: SerialNumber: syz
[  182.041213][ T5879] usb 2-1: config 0 descriptor??
[  182.054596][ T5879] smsc95xx v2.0.0
[  182.244149][ T1207] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  182.275397][ T6977] loop0: detected capacity change from 0 to 256
[  182.297199][ T6977] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  182.322279][   T28] audit: type=1800 audit(1794299660.856:8): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.362" name="file2" dev="loop0" ino=1048622 res=0 errno=0
[  182.465071][ T1207] usb 4-1: Using ep0 maxpacket: 8
[  182.473432][ T1207] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  182.486209][ T1207] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.496345][ T1207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.506673][ T1207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.516935][ T1207] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.530386][ T1207] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  182.539878][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.639781][ T6315] pegasus: probe of 3-1:1.0 failed with error -71
[  182.655954][ T6315] usb 3-1: USB disconnect, device number 6
[  182.762230][ T1207] usb 4-1: usb_control_msg returned -32
[  182.768977][ T1207] usbtmc 4-1:16.0: can't read capabilities
[  183.077504][ T5879] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  183.088391][ T5879] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  183.099185][ T5879] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  183.111057][ T5879] smsc95xx: probe of 2-1:0.67 failed with error -71
[  183.123830][ T5879] usb 2-1: USB disconnect, device number 6
[  183.135634][ T6978] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  183.246926][ T5797] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  183.258252][ T5797] CPU: 1 PID: 5797 Comm: kworker/u5:5 Not tainted syzkaller #0
[  183.265890][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  183.276002][ T5797] Workqueue: hci1 hci_rx_work
[  183.280754][ T5797] Call Trace:
[  183.284080][ T5797]  <TASK>
[  183.287058][ T5797]  dump_stack_lvl+0x18c/0x250
[  183.291802][ T5797]  ? show_regs_print_info+0x20/0x20
[  183.297073][ T5797]  ? load_image+0x420/0x420
[  183.301655][ T5797]  sysfs_create_dir_ns+0x26e/0x2a0
[  183.306844][ T5797]  ? __lock_acquire+0x7eb0/0x7eb0
[  183.311937][ T5797]  ? sysfs_warn_dup+0xa0/0xa0
[  183.316714][ T5797]  ? do_raw_spin_unlock+0x121/0x230
[  183.321983][ T5797]  kobject_add_internal+0x617/0xc90
[  183.327245][ T5797]  kobject_add+0x164/0x240
[  183.331723][ T5797]  ? kobject_init+0x1d0/0x1d0
[  183.336469][ T5797]  ? get_device_parent+0x366/0x390
[  183.339116][ T1207] usb 4-1: USB disconnect, device number 5
[  183.341632][ T5797]  device_add+0x3fa/0xc40
[  183.351857][ T5797]  hci_conn_add_sysfs+0xd5/0x1e0
[  183.356882][ T5797]  le_conn_complete_evt+0xfe7/0x1690
[  183.362253][ T5797]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  183.368567][ T5797]  ? __copy_skb_header+0xa3/0x4a0
[  183.373652][ T5797]  ? __asan_memcpy+0x40/0x70
[  183.378309][ T5797]  ? __skb_clone+0x5c/0x6c0
[  183.382873][ T5797]  ? skb_pull_data+0xf0/0x1f0
[  183.387617][ T5797]  hci_le_conn_complete_evt+0x187/0x440
[  183.393237][ T5797]  hci_event_packet+0x623/0xe60
[  183.398162][ T5797]  ? hci_remote_host_features_evt+0x150/0x150
[  183.404294][ T5797]  ? bis_list+0x290/0x290
[  183.408690][ T5797]  ? kcov_remote_start+0x513/0x810
[  183.413872][ T5797]  ? lockdep_hardirqs_on+0x98/0x150
[  183.419152][ T5797]  ? hci_send_to_monitor+0xd7/0x4f0
[  183.424501][ T5797]  hci_rx_work+0x43a/0xd60
[  183.428995][ T5797]  ? process_scheduled_works+0x975/0x1600
[  183.434775][ T5797]  process_scheduled_works+0xa60/0x1600
[  183.440427][ T5797]  ? worker_attach_to_pool+0x370/0x370
[  183.445967][ T5797]  ? assign_work+0x3cc/0x5d0
[  183.450627][ T5797]  worker_thread+0xa5e/0xfe0
[  183.455309][ T5797]  kthread+0x2fa/0x390
[  183.459429][ T5797]  ? pr_cont_work+0x550/0x550
[  183.464167][ T5797]  ? kthread_blkcg+0xd0/0xd0
[  183.468810][ T5797]  ret_from_fork+0x48/0x80
[  183.473291][ T5797]  ? kthread_blkcg+0xd0/0xd0
[  183.477959][ T5797]  ret_from_fork_asm+0x11/0x20
[  183.482796][ T5797]  </TASK>
[  183.488958][ T5797] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  183.503321][ T5797] Bluetooth: hci1: failed to register connection device
[  183.632274][ T5879] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  183.643414][ T5879] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  183.840324][   T28] audit: type=1807 audit(1794299662.376:9): UNKNOWN=ap res=0
[  183.848713][ T6992] ima: policy update failed
[  183.864904][   T28] audit: type=1802 audit(1794299662.386:10): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.366" res=0 errno=0
[  183.890131][   T28] audit: type=1802 audit(1794299662.386:11): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.366" res=0 errno=0
[  183.916126][ T5879] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  184.200401][ T7001] loop3: detected capacity change from 0 to 1024
[  184.207936][ T7001] hfsplus: unable to parse mount options
[  184.658215][ T6986] ceph: No mds server is up or the cluster is laggy
[  184.967869][ T1207] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  185.121569][ T7008] loop3: detected capacity change from 0 to 256
[  185.152033][ T7008] exfat: Deprecated parameter 'utf8'
[  185.164177][ T7008] exfat: Deprecated parameter 'namecase'
[  185.201003][ T7008] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  185.312856][ T7013] loop2: detected capacity change from 0 to 2048
[  185.354928][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.368387][ T7015] synth uevent: /bus/acpi: unknown uevent action string
[  185.406807][   T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.425445][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.600352][   T23] usb 2-1: Using ep0 maxpacket: 32
[  185.613958][ T5797] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  185.625011][ T5797] CPU: 1 PID: 5797 Comm: kworker/u5:5 Not tainted syzkaller #0
[  185.632617][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  185.642736][ T5797] Workqueue: hci2 hci_rx_work
[  185.647494][ T5797] Call Trace:
[  185.650820][ T5797]  <TASK>
[  185.653801][ T5797]  dump_stack_lvl+0x18c/0x250
[  185.658557][ T5797]  ? show_regs_print_info+0x20/0x20
[  185.663826][ T5797]  ? load_image+0x420/0x420
[  185.668408][ T5797]  sysfs_create_dir_ns+0x26e/0x2a0
[  185.673590][ T5797]  ? __lock_acquire+0x7eb0/0x7eb0
[  185.678770][ T5797]  ? sysfs_warn_dup+0xa0/0xa0
[  185.683511][ T5797]  ? do_raw_spin_unlock+0x121/0x230
[  185.688819][ T5797]  kobject_add_internal+0x617/0xc90
[  185.694085][ T5797]  kobject_add+0x164/0x240
[  185.699249][ T5797]  ? kobject_init+0x1d0/0x1d0
[  185.703969][ T5797]  ? get_device_parent+0x366/0x390
[  185.709134][ T5797]  device_add+0x3fa/0xc40
[  185.713517][ T5797]  hci_conn_add_sysfs+0xd5/0x1e0
[  185.718508][ T5797]  le_conn_complete_evt+0xfe7/0x1690
[  185.723840][ T5797]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  185.730119][ T5797]  ? __copy_skb_header+0xa3/0x4a0
[  185.735180][ T5797]  ? __asan_memcpy+0x40/0x70
[  185.739812][ T5797]  ? __skb_clone+0x5c/0x6c0
[  185.744360][ T5797]  ? skb_pull_data+0xf0/0x1f0
[  185.749087][ T5797]  hci_le_conn_complete_evt+0x187/0x440
[  185.754682][ T5797]  hci_event_packet+0x623/0xe60
[  185.759600][ T5797]  ? hci_remote_host_features_evt+0x150/0x150
[  185.765713][ T5797]  ? bis_list+0x290/0x290
[  185.770094][ T5797]  ? kcov_remote_start+0x513/0x810
[  185.775240][ T5797]  ? lockdep_hardirqs_on+0x98/0x150
[  185.780472][ T5797]  ? hci_send_to_monitor+0xd7/0x4f0
[  185.785711][ T5797]  hci_rx_work+0x43a/0xd60
[  185.790169][ T5797]  ? process_scheduled_works+0x975/0x1600
[  185.795924][ T5797]  process_scheduled_works+0xa60/0x1600
[  185.801531][ T5797]  ? worker_attach_to_pool+0x370/0x370
[  185.807051][ T5797]  ? assign_work+0x3cc/0x5d0
[  185.811681][ T5797]  worker_thread+0xa5e/0xfe0
[  185.816329][ T5797]  kthread+0x2fa/0x390
[  185.820429][ T5797]  ? pr_cont_work+0x550/0x550
[  185.825143][ T5797]  ? kthread_blkcg+0xd0/0xd0
[  185.829758][ T5797]  ret_from_fork+0x48/0x80
[  185.834212][ T5797]  ? kthread_blkcg+0xd0/0xd0
[  185.838870][ T5797]  ret_from_fork_asm+0x11/0x20
[  185.843692][ T5797]  </TASK>
[  185.849576][ T5797] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  185.873585][ T5797] Bluetooth: hci2: failed to register connection device
[  185.898142][   T23] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  185.908922][   T23] usb 2-1: config 0 has no interface number 0
[  185.915253][   T23] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  185.937126][   T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  185.948498][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.957170][   T23] usb 2-1: Product: syz
[  185.961485][   T23] usb 2-1: Manufacturer: syz
[  185.967577][   T23] usb 2-1: SerialNumber: syz
[  185.983659][   T23] usb 2-1: config 0 descriptor??
[  185.989425][ T7010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  186.107788][ T7032] input: syz1 as /devices/virtual/input/input10
[  186.230716][ T7010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  187.041294][   T23] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  187.057986][ T7061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  187.071865][   T23] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  187.082978][   T23] asix: probe of 2-1:0.188 failed with error -71
[  187.106173][   T23] usb 2-1: USB disconnect, device number 7
[  187.206529][ T7063] FAULT_INJECTION: forcing a failure.
[  187.206529][ T7063] name failslab, interval 1, probability 0, space 0, times 0
[  187.220242][ T7063] CPU: 1 PID: 7063 Comm: syz.3.394 Not tainted syzkaller #0
[  187.227590][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  187.237681][ T7063] Call Trace:
[  187.240970][ T7063]  <TASK>
[  187.243910][ T7063]  dump_stack_lvl+0x18c/0x250
[  187.248609][ T7063]  ? show_regs_print_info+0x20/0x20
[  187.253830][ T7063]  ? load_image+0x420/0x420
[  187.258354][ T7063]  ? __lock_acquire+0x7eb0/0x7eb0
[  187.263394][ T7063]  ? __se_sys_ioctl+0xfd/0x170
[  187.268176][ T7063]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.274287][ T7063]  should_fail_ex+0x394/0x4c0
[  187.279029][ T7063]  should_failslab+0x9/0x20
[  187.283571][ T7063]  slab_pre_alloc_hook+0x59/0x300
[  187.288676][ T7063]  ? kobject_get_path+0xc3/0x2c0
[  187.293664][ T7063]  ? kobject_get_path+0xc3/0x2c0
[  187.298646][ T7063]  __kmem_cache_alloc_node+0x53/0x260
[  187.304070][ T7063]  ? kobject_get_path+0xc3/0x2c0
[  187.309038][ T7063]  __kmalloc+0xa7/0x240
[  187.313220][ T7063]  kobject_get_path+0xc3/0x2c0
[  187.318008][ T7063]  kobject_uevent_env+0x291/0x890
[  187.323050][ T7063]  ? dummy_pullup+0x120/0x120
[  187.327742][ T7063]  ? dummy_udc_set_speed+0xe0/0xe0
[  187.332888][ T7063]  gadget_bind_driver+0x5d3/0x770
[  187.337935][ T7063]  ? gadget_match_driver+0x130/0x130
[  187.343228][ T7063]  really_probe+0x24a/0xae0
[  187.347770][ T7063]  ? pm_runtime_barrier+0x14b/0x1c0
[  187.353019][ T7063]  __driver_probe_device+0x1f5/0x390
[  187.358348][ T7063]  driver_probe_device+0x4f/0x420
[  187.363398][ T7063]  __driver_attach+0x444/0x6d0
[  187.368181][ T7063]  bus_for_each_dev+0x235/0x2b0
[  187.373056][ T7063]  ? driver_attach+0x50/0x50
[  187.377688][ T7063]  ? bus_remove_file+0x140/0x140
[  187.382649][ T7063]  ? do_raw_spin_unlock+0x121/0x230
[  187.387881][ T7063]  bus_add_driver+0x340/0x630
[  187.392601][ T7063]  driver_register+0x23a/0x310
[  187.397400][ T7063]  usb_gadget_register_driver_owner+0xf9/0x270
[  187.403616][ T7063]  raw_ioctl+0x1613/0x3d80
[  187.408065][ T7063]  ? tomoyo_domain+0xd6/0x120
[  187.412763][ T7063]  ? tomoyo_init_request_info+0x1dd/0x330
[  187.418503][ T7063]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  187.424153][ T7063]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  187.429627][ T7063]  ? make_qualifier+0x260/0x260
[  187.434481][ T7063]  ? handle_mm_fault+0x29c3/0x4a40
[  187.439659][ T7063]  ? __fget_files+0x28/0x460
[  187.444307][ T7063]  ? bpf_lsm_file_ioctl+0x9/0x10
[  187.449286][ T7063]  ? security_file_ioctl+0x80/0xa0
[  187.454448][ T7063]  ? make_qualifier+0x260/0x260
[  187.459339][ T7063]  __se_sys_ioctl+0xfd/0x170
[  187.463956][ T7063]  do_syscall_64+0x55/0xb0
[  187.468396][ T7063]  ? clear_bhb_loop+0x40/0x90
[  187.473088][ T7063]  ? clear_bhb_loop+0x40/0x90
[  187.477796][ T7063]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.483730][ T7063] RIP: 0033:0x7fa086ba8bab
[  187.488153][ T7063] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  187.507806][ T7063] RSP: 002b:00007fa084df3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  187.516275][ T7063] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa086ba8bab
[  187.524284][ T7063] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  187.532284][ T7063] RBP: 00007fa084df4fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  187.540269][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.548254][ T7063] R13: 0000200000000300 R14: 0000000000000000 R15: 0000000000000000
[  187.556259][ T7063]  </TASK>
[  187.703644][ T6315] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  187.874356][ T7075] loop0: detected capacity change from 0 to 512
[  187.904186][ T6315] usb 4-1: Using ep0 maxpacket: 32
[  187.928144][ T7075] EXT4-fs (loop0): 1 truncate cleaned up
[  187.941930][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.967507][ T6315] usb 4-1: unable to get BOS descriptor or descriptor too short
[  188.008225][   T28] audit: type=1800 audit(1794299666.546:12): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.398" name="file1" dev="loop0" ino=13 res=0 errno=0
[  188.037893][ T6315] usb 4-1: unable to read config index 0 descriptor/start: -71
[  188.048179][ T7075] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.398: bg 0: block 465: padding at end of block bitmap is not set
[  188.074393][ T6315] usb 4-1: can't read configurations, error -71
[  188.101892][ T7075] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28
[  188.133600][ T7075] EXT4-fs (loop0): This should not happen!! Data will be lost
[  188.133600][ T7075] 
[  188.162616][ T7075] EXT4-fs (loop0): Total free blocks count 0
[  188.174941][ T7075] EXT4-fs (loop0): Free/Dirty block details
[  188.181125][ T7075] EXT4-fs (loop0): free_blocks=0
[  188.191209][ T7075] EXT4-fs (loop0): dirty_blocks=4
[  188.204067][ T7075] EXT4-fs (loop0): Block reservation details
[  188.222039][ T7075] EXT4-fs (loop0): i_reserved_data_blocks=4
[  188.298788][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.460991][ T7087] loop1: detected capacity change from 0 to 8192
[  188.559434][ T7087] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  188.679489][ T7095] input: syz0 as /devices/virtual/input/input11
[  188.713282][ T7095] input: failed to attach handler leds to device input11, error: -6
[  188.993474][ T7104] loop3: detected capacity change from 0 to 512
[  189.039620][ T7104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  189.072706][ T7104] EXT4-fs (loop3): 1 truncate cleaned up
[  189.125607][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.279128][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.302381][ T7107] loop1: detected capacity change from 0 to 128
[  189.338984][ T7092] loop0: detected capacity change from 0 to 40427
[  189.356718][ T7107] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  189.369851][ T7092] F2FS-fs (loop0): invalid crc value
[  189.426451][ T7092] F2FS-fs (loop0): Found nat_bits in checkpoint
[  189.452207][ T7107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.467319][ T7107] ext2 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.193632][ T7092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  191.239510][ T7107] EXT4-fs error (device loop1): make_indexed_dir:2335: inode #2: block 63: comm syz.1.410: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=0, rec_len=5, size=1000 fake=1
[  191.360611][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  191.404211][ T7092] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  191.500609][ T5787] syz-executor: attempt to access beyond end of device
[  191.500609][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  191.527215][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  191.535567][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  192.289056][ T7114] loop3: detected capacity change from 0 to 32768
[  192.386118][ T7114] JBD2: Ignoring recovery information on journal
[  192.461628][ T7114] JBD2: journal reset failed
[  192.466759][ T7114] (syz.3.411,7114,0):ocfs2_journal_load:1168 ERROR: Failed to load journal!
[  192.482320][ T7114] (syz.3.411,7114,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4
[  194.459587][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.467939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.557339][ T7141] block device autoloading is deprecated and will be removed.
[  196.522439][ T7152] ip_tables: iptables: counters copy to user failed while replacing table
[  196.692416][ T7154] loop3: detected capacity change from 0 to 256
[  196.729250][ T7154] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  196.789120][   T28] audit: type=1800 audit(1794299675.326:13): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.426" name="file2" dev="loop3" ino=1048625 res=0 errno=0
[  198.667410][ T7162] loop3: detected capacity change from 0 to 512
[  198.734376][ T7162] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.785309][ T7162] EXT4-fs warning (device loop3): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  198.807731][ T7165] loop0: detected capacity change from 0 to 256
[  198.818148][ T7165] exfat: Deprecated parameter 'utf8'
[  198.824925][ T7165] exfat: Deprecated parameter 'namecase'
[  198.833109][ T7165] exfat: Deprecated parameter 'namecase'
[  198.840035][ T7165] exfat: Deprecated parameter 'utf8'
[  198.906869][ T7165] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  198.925452][ T7162] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  198.958926][ T7162] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #13: comm syz.3.429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  198.982527][ T7165] fuse: Bad value for 'fd'
[  198.994203][ T7162] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.429: couldn't read orphan inode 13 (err -117)
[  199.045139][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.124014][ T7162] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  199.188710][ T7162] EXT4-fs warning (device loop3): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  199.270137][ T7169] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  199.311409][ T7169] EXT4-fs warning (device loop3): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  199.416541][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.493915][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  199.693867][ T5879] usb 1-1: Using ep0 maxpacket: 32
[  199.696964][ T7180] loop3: detected capacity change from 0 to 256
[  199.703133][ T5879] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  199.723556][ T5879] usb 1-1: config 0 has no interface number 0
[  199.738086][ T7180] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  199.746485][ T5879] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  199.775301][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.783356][ T5879] usb 1-1: Product: syz
[  199.796980][ T7180] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  199.814055][ T5879] usb 1-1: Manufacturer: syz
[  199.818734][ T5879] usb 1-1: SerialNumber: syz
[  199.831855][ T5879] usb 1-1: config 0 descriptor??
[  199.845832][ T5879] smsc95xx v2.0.0
[  200.369167][    T8] smpboot: CPU 1 is now offline
[  200.405725][ T7198] loop3: detected capacity change from 0 to 164
[  200.575126][ T7196] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  200.624542][ T7184] ------------[ cut here ]------------
[  200.625615][ T7184] 
[  200.625620][ T7184] ======================================================
[  200.625626][ T7184] WARNING: possible circular locking dependency detected
[  200.625638][ T7184] syzkaller #0 Not tainted
[  200.625647][ T7184] ------------------------------------------------------
[  200.625652][ T7184] syz.1.436/7184 is trying to acquire lock:
[  200.625661][ T7184] ffffffff8e126640 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0
[  200.625713][ T7184] 
[  200.625713][ T7184] but task is already holding lock:
[  200.625718][ T7184] ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130
[  200.625766][ T7184] 
[  200.625766][ T7184] which lock already depends on the new lock.
[  200.625766][ T7184] 
[  200.625771][ T7184] 
[  200.625771][ T7184] the existing dependency chain (in reverse order) is:
[  200.625775][ T7184] 
[  200.625775][ T7184] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  200.625797][ T7184]        _raw_spin_lock_nested+0x32/0x50
[  200.625818][ T7184]        raw_spin_rq_lock_nested+0x29/0x130
[  200.625844][ T7184]        task_fork_fair+0x62/0x1f0
[  200.625862][ T7184]        sched_cgroup_fork+0x352/0x3e0
[  200.625879][ T7184]        copy_process+0x21fd/0x3da0
[  200.625897][ T7184]        kernel_clone+0x24b/0x8a0
[  200.625916][ T7184]        user_mode_thread+0x111/0x180
[  200.625943][ T7184]        rest_init+0x27/0x300
[  200.625960][ T7184]        arch_call_rest_init+0xe/0x10
[  200.625987][ T7184]        start_kernel+0x461/0x4e0
[  200.626012][ T7184]        x86_64_start_reservations+0x2a/0x30
[  200.626036][ T7184]        copy_bootdata+0x0/0xd0
[  200.626059][ T7184]        secondary_startup_64_no_verify+0x179/0x17b
[  200.626082][ T7184] 
[  200.626082][ T7184] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  200.626104][ T7184]        _raw_spin_lock_irqsave+0xb4/0x100
[  200.626123][ T7184]        try_to_wake_up+0x5b/0x10e0
[  200.626139][ T7184]        __wake_up_common+0x28e/0x4d0
[  200.626159][ T7184]        __wake_up+0x125/0x1a0
[  200.626177][ T7184]        tty_port_default_wakeup+0xa2/0xf0
[  200.626203][ T7184]        serial8250_tx_chars+0x6a2/0x8b0
[  200.626222][ T7184]        serial8250_handle_irq+0x6c3/0x8c0
[  200.626241][ T7184]        serial8250_default_handle_irq+0xb8/0x1a0
[  200.626263][ T7184]        serial8250_interrupt+0x9f/0x1c0
[  200.626280][ T7184]        __handle_irq_event_percpu+0x271/0x940
[  200.626307][ T7184]        handle_irq_event+0x8b/0x1e0
[  200.626332][ T7184]        handle_edge_irq+0x246/0xb20
[  200.626351][ T7184]        __common_interrupt+0x13b/0x230
[  200.626372][ T7184]        common_interrupt+0xb4/0xd0
[  200.626397][ T7184]        asm_common_interrupt+0x26/0x40
[  200.626421][ T7184]        refill_stock+0x299/0x450
[  200.626443][ T7184]        try_charge_memcg+0x127c/0x17c0
[  200.626466][ T7184]        __memcg_kmem_charge_page+0x224/0x380
[  200.626486][ T7184]        __alloc_pages+0x222/0x460
[  200.626502][ T7184]        pte_alloc_one+0x84/0x540
[  200.626523][ T7184]        __pte_alloc+0x22/0x2a0
[  200.626537][ T7184]        copy_page_range+0x2dca/0x3700
[  200.626552][ T7184]        copy_mm+0x1751/0x1e30
[  200.626570][ T7184]        copy_process+0x16c9/0x3da0
[  200.626588][ T7184]        kernel_clone+0x24b/0x8a0
[  200.626606][ T7184]        __x64_sys_clone+0x1b7/0x230
[  200.626626][ T7184]        do_syscall_64+0x55/0xb0
[  200.626647][ T7184]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.626671][ T7184] 
[  200.626671][ T7184] -> #2 (&tty->write_wait){-.-.}-{2:2}:
[  200.626693][ T7184]        _raw_spin_lock_irqsave+0xb4/0x100
[  200.626712][ T7184]        __wake_up+0x10b/0x1a0
[  200.626730][ T7184]        tty_port_default_wakeup+0xa2/0xf0
[  200.626756][ T7184]        serial8250_tx_chars+0x6a2/0x8b0
[  200.626775][ T7184]        serial8250_handle_irq+0x6c3/0x8c0
[  200.626794][ T7184]        serial8250_default_handle_irq+0xb8/0x1a0
[  200.626816][ T7184]        serial8250_interrupt+0x9f/0x1c0
[  200.626833][ T7184]        __handle_irq_event_percpu+0x271/0x940
[  200.626860][ T7184]        handle_irq_event+0x8b/0x1e0
[  200.626885][ T7184]        handle_edge_irq+0x246/0xb20
[  200.626904][ T7184]        __common_interrupt+0x13b/0x230
[  200.626931][ T7184]        common_interrupt+0xb4/0xd0
[  200.626954][ T7184]        asm_common_interrupt+0x26/0x40
[  200.626977][ T7184]        _raw_spin_unlock_irqrestore+0xc0/0x120
[  200.626997][ T7184]        uart_write+0x45b/0x5d0
[  200.627020][ T7184]        n_tty_write+0xd36/0x1240
[  200.627041][ T7184]        file_tty_write+0x529/0x9b0
[  200.627058][ T7184]        vfs_write+0x474/0x9a0
[  200.627082][ T7184]        ksys_write+0x151/0x260
[  200.627107][ T7184]        do_syscall_64+0x55/0xb0
[  200.627128][ T7184]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.627152][ T7184] 
[  200.627152][ T7184] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  200.627173][ T7184]        _raw_spin_lock_irqsave+0xb4/0x100
[  200.627192][ T7184]        serial8250_console_write+0x181/0x18b0
[  200.627213][ T7184]        console_flush_all+0x6ad/0xcf0
[  200.627234][ T7184]        console_unlock+0xad/0x350
[  200.627255][ T7184]        vprintk_emit+0x497/0x610
[  200.627275][ T7184]        _printk+0xde/0x130
[  200.627292][ T7184]        register_console+0xb96/0xf00
[  200.627314][ T7184]        univ8250_console_init+0x45/0x50
[  200.627339][ T7184]        console_init+0x17b/0x5d0
[  200.627353][ T7184]        start_kernel+0x2c8/0x4e0
[  200.627378][ T7184]        x86_64_start_reservations+0x2a/0x30
[  200.627402][ T7184]        copy_bootdata+0x0/0xd0
[  200.627424][ T7184]        secondary_startup_64_no_verify+0x179/0x17b
[  200.627447][ T7184] 
[  200.627447][ T7184] -> #0 (console_owner){..-.}-{0:0}:
[  200.627469][ T7184]        __lock_acquire+0x3a07/0x7eb0
[  200.627489][ T7184]        lock_acquire+0x19e/0x420
[  200.627507][ T7184]        console_flush_all+0x676/0xcf0
[  200.627529][ T7184]        console_unlock+0xad/0x350
[  200.627550][ T7184]        vprintk_emit+0x497/0x610
[  200.627570][ T7184]        _printk+0xde/0x130
[  200.627586][ T7184]        report_bug+0x34e/0x4f0
[  200.627609][ T7184]        handle_bug+0xcf/0x120
[  200.627631][ T7184]        exc_invalid_op+0x1a/0x50
[  200.627653][ T7184]        asm_exc_invalid_op+0x1a/0x20
[  200.627675][ T7184]        update_rq_clock+0x32e/0x4b0
[  200.627700][ T7184]        __schedule+0x2cb2/0x4720
[  200.627724][ T7184]        schedule+0xbd/0x170
[  200.627748][ T7184]        do_nanosleep+0x193/0x5d0
[  200.627765][ T7184]        hrtimer_nanosleep+0x175/0x370
[  200.627784][ T7184]        __se_sys_clock_nanosleep+0x30f/0x3a0
[  200.627802][ T7184]        do_syscall_64+0x55/0xb0
[  200.627823][ T7184]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.627846][ T7184] 
[  200.627846][ T7184] other info that might help us debug this:
[  200.627846][ T7184] 
[  200.627851][ T7184] Chain exists of:
[  200.627851][ T7184]   console_owner --> &p->pi_lock --> &rq->__lock
[  200.627851][ T7184] 
[  200.627875][ T7184]  Possible unsafe locking scenario:
[  200.627875][ T7184] 
[  200.627879][ T7184]        CPU0                    CPU1
[  200.627883][ T7184]        ----                    ----
[  200.627887][ T7184]   lock(&rq->__lock);
[  200.627897][ T7184]                                lock(&p->pi_lock);
[  200.627907][ T7184]                                lock(&rq->__lock);
[  200.627918][ T7184]   lock(console_owner);
[  200.627932][ T7184] 
[  200.627932][ T7184]  *** DEADLOCK ***
[  200.627932][ T7184] 
[  200.627936][ T7184] 3 locks held by syz.1.436/7184:
[  200.627945][ T7184]  #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130
[  200.627995][ T7184]  #1: ffffffff8e126720 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130
[  200.628037][ T7184]  #2: ffffffff8e00df30 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0
[  200.628083][ T7184] 
[  200.628083][ T7184] stack backtrace:
[  200.628088][ T7184] CPU: 0 PID: 7184 Comm: syz.1.436 Not tainted syzkaller #0
[  200.628105][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  200.628114][ T7184] Call Trace:
[  200.628121][ T7184]  <TASK>
[  200.628127][ T7184]  dump_stack_lvl+0x18c/0x250
[  200.628152][ T7184]  ? load_image+0x420/0x420
[  200.628171][ T7184]  ? show_regs_print_info+0x20/0x20
[  200.628200][ T7184]  ? print_circular_bug+0x12b/0x1a0
[  200.628226][ T7184]  check_noncircular+0x2fc/0x400
[  200.628253][ T7184]  ? print_deadlock_bug+0x5d0/0x5d0
[  200.628275][ T7184]  ? lockdep_lock+0xf5/0x230
[  200.628303][ T7184]  __lock_acquire+0x3a07/0x7eb0
[  200.628340][ T7184]  ? verify_lock_unused+0x140/0x140
[  200.628375][ T7184]  lock_acquire+0x19e/0x420
[  200.628396][ T7184]  ? console_flush_all+0x10b/0xcf0
[  200.628424][ T7184]  ? __lock_acquire+0x7eb0/0x7eb0
[  200.628445][ T7184]  ? do_raw_spin_lock+0x11f/0x2b0
[  200.628470][ T7184]  ? read_lock_is_recursive+0x20/0x20
[  200.628492][ T7184]  ? __rwlock_init+0x150/0x150
[  200.628518][ T7184]  ? do_raw_spin_unlock+0x121/0x230
[  200.628545][ T7184]  console_flush_all+0x676/0xcf0
[  200.628568][ T7184]  ? console_flush_all+0x10b/0xcf0
[  200.628594][ T7184]  ? console_flush_all+0x10b/0xcf0
[  200.628622][ T7184]  ? is_console_locked+0x20/0x20
[  200.628647][ T7184]  ? debug_objects_fill_pool+0x8b/0x790
[  200.628672][ T7184]  console_unlock+0xad/0x350
[  200.628696][ T7184]  ? other_cpu_in_panic+0xf0/0xf0
[  200.628719][ T7184]  ? __lock_acquire+0x1431/0x7eb0
[  200.628746][ T7184]  vprintk_emit+0x497/0x610
[  200.628770][ T7184]  ? printk_sprint+0x460/0x460
[  200.628794][ T7184]  ? verify_lock_unused+0x140/0x140
[  200.628822][ T7184]  _printk+0xde/0x130
[  200.628843][ T7184]  ? load_image+0x420/0x420
[  200.628865][ T7184]  ? find_bug+0xa5/0x3a0
[  200.628888][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  200.628917][ T7184]  report_bug+0x34e/0x4f0
[  200.628947][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  200.628975][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  200.629002][ T7184]  ? update_rq_clock+0x330/0x4b0
[  200.629028][ T7184]  handle_bug+0xcf/0x120
[  200.629053][ T7184]  exc_invalid_op+0x1a/0x50
[  200.629078][ T7184]  asm_exc_invalid_op+0x1a/0x20
[  200.629102][ T7184] RIP: 0010:update_rq_clock+0x32e/0x4b0
[  200.629130][ T7184] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 a0 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  200.629145][ T7184] RSP: 0018:ffffc9000379f9e0 EFLAGS: 00010046
[  200.629159][ T7184] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 57a25a50a73e6100
[  200.629172][ T7184] RDX: 0000000000000003 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c5260
[  200.629184][ T7184] RBP: ffffc9000379fc30 R08: ffff888031a48027 R09: 0000000000000001
[  200.629196][ T7184] R10: ffff888031a48018 R11: ffffed1006349005 R12: ffffffff8ccbca38
[  200.629209][ T7184] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240
[  200.629233][ T7184]  __schedule+0x2cb2/0x4720
[  200.629259][ T7184]  ? do_raw_spin_unlock+0x121/0x230
[  200.629297][ T7184]  ? asan.module_dtor+0x20/0x20
[  200.629324][ T7184]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  200.629349][ T7184]  ? _raw_spin_unlock+0x40/0x40
[  200.629369][ T7184]  ? __lock_acquire+0x7eb0/0x7eb0
[  200.629393][ T7184]  schedule+0xbd/0x170
[  200.629419][ T7184]  do_nanosleep+0x193/0x5d0
[  200.629439][ T7184]  ? do_nanosleep+0x7e/0x5d0
[  200.629459][ T7184]  ? usleep_range_state+0x1b0/0x1b0
[  200.629479][ T7184]  ? __asan_memset+0x22/0x40
[  200.629506][ T7184]  ? __hrtimer_init+0x189/0x270
[  200.629528][ T7184]  hrtimer_nanosleep+0x175/0x370
[  200.629549][ T7184]  ? __might_fault+0xc6/0x120
[  200.629569][ T7184]  ? nanosleep_copyout+0x120/0x120
[  200.629591][ T7184]  ? __remove_hrtimer+0x470/0x470
[  200.629614][ T7184]  ? timespec64_add_safe+0x1f0/0x1f0
[  200.629646][ T7184]  __se_sys_clock_nanosleep+0x30f/0x3a0
[  200.629668][ T7184]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[  200.629689][ T7184]  ? lockdep_hardirqs_on+0x98/0x150
[  200.629709][ T7184]  do_syscall_64+0x55/0xb0
[  200.629731][ T7184]  ? clear_bhb_loop+0x40/0x90
[  200.629757][ T7184]  ? clear_bhb_loop+0x40/0x90
[  200.629784][ T7184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  200.629809][ T7184] RIP: 0033:0x7f39bab6974e
[  200.629823][ T7184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  200.629837][ T7184] RSP: 002b:00007fffe3495d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  200.629854][ T7184] RAX: ffffffffffffffda RBX: 000055555bcf4500 RCX: 00007f39bab6974e
[  200.629867][ T7184] RDX: 00007fffe3495d60 RSI: 0000000000000000 RDI: 0000000000000000
[  200.629878][ T7184] RBP: 00007f39bae27da0 R08: 0000000000000000 R09: 0000000000000000
[  200.629889][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003105f
[  200.629899][ T7184] R13: 00007f39bae2609c R14: 0000000000030dc6 R15: 00007f39bae26090
[  200.629920][ T7184]  </TASK>
[  201.838994][ T7184] WARNING: CPU: 0 PID: 7184 at kernel/sched/sched.h:1371 update_rq_clock+0x32e/0x4b0
[  201.848507][ T7184] Modules linked in:
[  201.852428][ T7184] CPU: 0 PID: 7184 Comm: syz.1.436 Not tainted syzkaller #0
[  201.859737][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  201.869822][ T7184] RIP: 0010:update_rq_clock+0x32e/0x4b0
[  201.875403][ T7184] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 a0 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  201.895038][ T7184] RSP: 0018:ffffc9000379f9e0 EFLAGS: 00010046
[  201.901133][ T7184] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 57a25a50a73e6100
[  201.909145][ T7184] RDX: 0000000000000003 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c5260
[  201.917144][ T7184] RBP: ffffc9000379fc30 R08: ffff888031a48027 R09: 0000000000000001
[  201.925140][ T7184] R10: ffff888031a48018 R11: ffffed1006349005 R12: ffffffff8ccbca38
[  201.933141][ T7184] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240
[  201.941150][ T7184] FS:  000055555bcf4500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  201.950114][ T7184] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.957515][ T7184] CR2: 00007fec8a60b000 CR3: 000000001db9f000 CR4: 00000000003506f0
[  201.965519][ T7184] Call Trace:
[  201.968914][ T7184]  <TASK>
[  201.971900][ T7184]  __schedule+0x2cb2/0x4720
[  201.976451][ T7184]  ? do_raw_spin_unlock+0x121/0x230
[  201.981721][ T7184]  ? asan.module_dtor+0x20/0x20
[  201.986636][ T7184]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  201.992577][ T7184]  ? _raw_spin_unlock+0x40/0x40
[  201.997467][ T7184]  ? __lock_acquire+0x7eb0/0x7eb0
[  202.002540][ T7184]  schedule+0xbd/0x170
[  202.006673][ T7184]  do_nanosleep+0x193/0x5d0
[  202.011211][ T7184]  ? do_nanosleep+0x7e/0x5d0
[  202.015845][ T7184]  ? usleep_range_state+0x1b0/0x1b0
[  202.021072][ T7184]  ? __asan_memset+0x22/0x40
[  202.025711][ T7184]  ? __hrtimer_init+0x189/0x270
[  202.030597][ T7184]  hrtimer_nanosleep+0x175/0x370
[  202.035575][ T7184]  ? __might_fault+0xc6/0x120
[  202.040285][ T7184]  ? nanosleep_copyout+0x120/0x120
[  202.045430][ T7184]  ? __remove_hrtimer+0x470/0x470
[  202.050497][ T7184]  ? timespec64_add_safe+0x1f0/0x1f0
[  202.055822][ T7184]  __se_sys_clock_nanosleep+0x30f/0x3a0
[  202.061396][ T7184]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[  202.067059][ T7184]  ? lockdep_hardirqs_on+0x98/0x150
[  202.072288][ T7184]  do_syscall_64+0x55/0xb0
[  202.076735][ T7184]  ? clear_bhb_loop+0x40/0x90
[  202.081449][ T7184]  ? clear_bhb_loop+0x40/0x90
[  202.086162][ T7184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.092085][ T7184] RIP: 0033:0x7f39bab6974e
[  202.096529][ T7184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  202.116257][ T7184] RSP: 002b:00007fffe3495d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  202.124697][ T7184] RAX: ffffffffffffffda RBX: 000055555bcf4500 RCX: 00007f39bab6974e
[  202.132698][ T7184] RDX: 00007fffe3495d60 RSI: 0000000000000000 RDI: 0000000000000000
[  202.140782][ T7184] RBP: 00007f39bae27da0 R08: 0000000000000000 R09: 0000000000000000
[  202.148780][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003105f
[  202.156798][ T7184] R13: 00007f39bae2609c R14: 0000000000030dc6 R15: 00007f39bae26090
[  202.164808][ T7184]  </TASK>
[  202.167859][ T7184] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  202.175154][ T7184] CPU: 0 PID: 7184 Comm: syz.1.436 Not tainted syzkaller #0
[  202.182486][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  202.192562][ T7184] Call Trace:
[  202.195865][ T7184]  <TASK>
[  202.198818][ T7184]  dump_stack_lvl+0x18c/0x250
[  202.203549][ T7184]  ? show_regs_print_info+0x20/0x20
[  202.208785][ T7184]  ? load_image+0x420/0x420
[  202.213342][ T7184]  panic+0x2ca/0x720
[  202.217290][ T7184]  ? bpf_jit_dump+0xd0/0xd0
[  202.221853][ T7184]  __warn+0x2e0/0x470
[  202.225887][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  202.230874][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  202.235855][ T7184]  report_bug+0x2be/0x4f0
[  202.240234][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  202.245220][ T7184]  ? update_rq_clock+0x32e/0x4b0
[  202.250198][ T7184]  ? update_rq_clock+0x330/0x4b0
[  202.255175][ T7184]  handle_bug+0xcf/0x120
[  202.259461][ T7184]  exc_invalid_op+0x1a/0x50
[  202.264011][ T7184]  asm_exc_invalid_op+0x1a/0x20
[  202.268905][ T7184] RIP: 0010:update_rq_clock+0x32e/0x4b0
[  202.274492][ T7184] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 a0 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  202.294149][ T7184] RSP: 0018:ffffc9000379f9e0 EFLAGS: 00010046
[  202.300258][ T7184] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 57a25a50a73e6100
[  202.308278][ T7184] RDX: 0000000000000003 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c5260
[  202.316282][ T7184] RBP: ffffc9000379fc30 R08: ffff888031a48027 R09: 0000000000000001
[  202.324279][ T7184] R10: ffff888031a48018 R11: ffffed1006349005 R12: ffffffff8ccbca38
[  202.332276][ T7184] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240
[  202.340305][ T7184]  __schedule+0x2cb2/0x4720
[  202.344851][ T7184]  ? do_raw_spin_unlock+0x121/0x230
[  202.350108][ T7184]  ? asan.module_dtor+0x20/0x20
[  202.355001][ T7184]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  202.360936][ T7184]  ? _raw_spin_unlock+0x40/0x40
[  202.365837][ T7184]  ? __lock_acquire+0x7eb0/0x7eb0
[  202.370895][ T7184]  schedule+0xbd/0x170
[  202.375001][ T7184]  do_nanosleep+0x193/0x5d0
[  202.379536][ T7184]  ? do_nanosleep+0x7e/0x5d0
[  202.384328][ T7184]  ? usleep_range_state+0x1b0/0x1b0
[  202.389641][ T7184]  ? __asan_memset+0x22/0x40
[  202.394267][ T7184]  ? __hrtimer_init+0x189/0x270
[  202.399150][ T7184]  hrtimer_nanosleep+0x175/0x370
[  202.404141][ T7184]  ? __might_fault+0xc6/0x120
[  202.408853][ T7184]  ? nanosleep_copyout+0x120/0x120
[  202.414012][ T7184]  ? __remove_hrtimer+0x470/0x470
[  202.419068][ T7184]  ? timespec64_add_safe+0x1f0/0x1f0
[  202.424405][ T7184]  __se_sys_clock_nanosleep+0x30f/0x3a0
[  202.429979][ T7184]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[  202.435643][ T7184]  ? lockdep_hardirqs_on+0x98/0x150
[  202.440871][ T7184]  do_syscall_64+0x55/0xb0
[  202.445326][ T7184]  ? clear_bhb_loop+0x40/0x90
[  202.450041][ T7184]  ? clear_bhb_loop+0x40/0x90
[  202.454757][ T7184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.460691][ T7184] RIP: 0033:0x7f39bab6974e
[  202.465137][ T7184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  202.484770][ T7184] RSP: 002b:00007fffe3495d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  202.493222][ T7184] RAX: ffffffffffffffda RBX: 000055555bcf4500 RCX: 00007f39bab6974e
[  202.501228][ T7184] RDX: 00007fffe3495d60 RSI: 0000000000000000 RDI: 0000000000000000
[  202.509224][ T7184] RBP: 00007f39bae27da0 R08: 0000000000000000 R09: 0000000000000000
[  202.517224][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003105f
[  202.525222][ T7184] R13: 00007f39bae2609c R14: 0000000000030dc6 R15: 00007f39bae26090
[  202.533229][ T7184]  </TASK>
[  202.536803][ T7184] Kernel Offset: disabled
[  202.541158][ T7184] Rebooting in 86400 seconds..