last executing test programs:

19.389804827s ago: executing program 0 (id=432):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0xfdfdffff, 0x8a, 0x4, 0x40000000, 0x8c, "00080000000000000000000cadf100004000"})

19.387886627s ago: executing program 0 (id=433):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)={0x40, 0xa, 0x2e, "c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94e294b4b18ff7b023cc83b30b268c3b5f50b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0xb45d, 0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x2400404e)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

17.895941835s ago: executing program 0 (id=442):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x11, 0x1, 0xfffffffa, 0x871e, 0x6, 0x8, 0x9, 0x4, 0xffffff1b, 0x1, 0x4, 0x8, 0x4, 0xfffffff9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x7, 0x2, 0x9, 0xc}})

17.895716069s ago: executing program 0 (id=443):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x12)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r1, 0x0, 0x8e14, 0x8ffff)

17.700177821s ago: executing program 0 (id=444):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @short={0x2, 0x0, 0xfffe}}, 0x14)

15.991135144s ago: executing program 0 (id=462):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x20000810)

15.972566858s ago: executing program 32 (id=462):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x20000810)

3.099159947s ago: executing program 3 (id=581):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
close(0x3)
close(0x4)

2.914839366s ago: executing program 3 (id=582):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}}, 0x0)

2.791084057s ago: executing program 3 (id=583):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x4070bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#'], 0x48)

2.730251838s ago: executing program 3 (id=584):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nouid32}, {@quota}]}, 0x7, 0x613, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, &(0x7f0000001f40)=ANY=[])

2.210032455s ago: executing program 3 (id=585):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

1.880062786s ago: executing program 1 (id=589):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x101, 0x1, r0, 0x0)
readv(r0, 0x0, 0x0)

1.879790962s ago: executing program 1 (id=590):
landlock_create_ruleset(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800002, &(0x7f0000000040)=ANY=[], 0x1, 0x1067a, &(0x7f0000012740)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)

1.350344134s ago: executing program 1 (id=591):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/icmp6\x00')
pread64(r2, &(0x7f0000000140)=""/184, 0xb8, 0xd)

1.061104053s ago: executing program 2 (id=595):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x1000, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000007c0)={0x0, {{0xa, 0x101, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xaf, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x4}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x1ff, @mcast2}}, {{0xa, 0x0, 0x81, @local, 0x100000}}}, 0x108)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f0000001bc0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/200, 0xc8}], 0x2, 0x5, 0x0)

971.281369ms ago: executing program 2 (id=596):
syz_emit_ethernet(0xda, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @broadcast, @private=0xa010102, @loopback, @loopback, @local]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0xb, "02a20848fd7406e8ed"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}]}}, "d850da37284d1872"}}}}}, 0x0)

915.789066ms ago: executing program 2 (id=597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

915.618071ms ago: executing program 2 (id=598):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x128, r1, 0x1, 0x70bd2a, 0x25cfdbfc, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0xfffffffffffffec3, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x128}, 0x1, 0x1000000, 0x0, 0x24044000}, 0x24040840)

915.382551ms ago: executing program 1 (id=599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0)

831.452864ms ago: executing program 2 (id=600):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="a40000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e300000000000070001280080001007369740064000280080003000000000006000f000300000008000c00ed0e000008000100", @ANYRES32, @ANYBLOB="14000b0020010000000000000000000000000002060008002900000008000200"], 0xa4}}, 0x0)

831.261465ms ago: executing program 1 (id=601):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810003, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

770.545364ms ago: executing program 1 (id=602):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])

769.366851ms ago: executing program 2 (id=603):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=604):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

kernel console output (not intermixed with test programs):

 1, size = 127995904 bytes
[   44.810054][ T5521] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.113243][ T4985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   49.116318][ T4985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   49.119112][ T4985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   49.121911][ T4985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   49.124712][ T4985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   49.130715][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   49.135655][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   49.138276][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   49.143116][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   49.147098][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   49.169834][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   49.173033][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   49.175794][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   49.179143][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   49.182202][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   49.736497][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.740010][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.743082][ T5595] bridge_slave_0: entered allmulticast mode
[   49.747175][ T5595] bridge_slave_0: entered promiscuous mode
[   49.781311][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.784253][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.787430][ T5595] bridge_slave_1: entered allmulticast mode
[   49.791095][ T5595] bridge_slave_1: entered promiscuous mode
[   49.837187][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.844211][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.908501][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.910775][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.912969][ T5599] bridge_slave_0: entered allmulticast mode
[   49.915577][ T5599] bridge_slave_0: entered promiscuous mode
[   49.919469][ T5595] team0: Port device team_slave_0 added
[   49.921254][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.923950][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.926503][ T5604] bridge_slave_0: entered allmulticast mode
[   49.929178][ T5604] bridge_slave_0: entered promiscuous mode
[   49.932371][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.934778][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.937214][ T5604] bridge_slave_1: entered allmulticast mode
[   49.939818][ T5604] bridge_slave_1: entered promiscuous mode
[   49.948877][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.951272][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.953751][ T5599] bridge_slave_1: entered allmulticast mode
[   49.957057][ T5599] bridge_slave_1: entered promiscuous mode
[   49.961142][ T5595] team0: Port device team_slave_1 added
[   49.991825][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.004653][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.006872][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.014384][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.019453][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.024644][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.028264][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.030313][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.038036][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.052940][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.075556][ T5599] team0: Port device team_slave_0 added
[   50.090315][ T5604] team0: Port device team_slave_0 added
[   50.093790][ T5599] team0: Port device team_slave_1 added
[   50.098840][ T5595] hsr_slave_0: entered promiscuous mode
[   50.101534][ T5595] hsr_slave_1: entered promiscuous mode
[   50.106540][ T5604] team0: Port device team_slave_1 added
[   50.137924][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.140251][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.148196][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.152120][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.154264][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.162149][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.166358][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.168648][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.176464][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.183975][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.186375][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.194645][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.265716][ T5599] hsr_slave_0: entered promiscuous mode
[   50.268991][ T5599] hsr_slave_1: entered promiscuous mode
[   50.271658][ T5599] debugfs: 'hsr0' already exists in 'hsr'
[   50.273861][ T5599] Cannot create hsr debugfs directory
[   50.304661][ T5604] hsr_slave_0: entered promiscuous mode
[   50.307760][ T5604] hsr_slave_1: entered promiscuous mode
[   50.310560][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   50.312810][ T5604] Cannot create hsr debugfs directory
[   50.555520][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.564924][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.594663][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.600515][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.610695][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.618447][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.622590][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.628488][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.680539][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.688906][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.691573][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.696054][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.704927][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.709834][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.719700][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.723868][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.780875][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.785458][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   50.790316][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.795876][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   50.798762][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.803394][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   50.811679][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.815456][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   50.879252][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.906213][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   50.915026][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.919947][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.923158][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.939301][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.941698][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.949768][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.961741][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   50.981436][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.984220][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.002352][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.005302][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.021235][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[   51.041050][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.043449][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.064578][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.067595][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.206388][   T54] Bluetooth: hci2: command tx timeout
[   51.206436][ T4985] Bluetooth: hci1: command tx timeout
[   51.217171][ T4985] Bluetooth: hci0: command tx timeout
[   51.337457][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.359493][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.379151][ T5595] veth0_vlan: entered promiscuous mode
[   51.393187][ T5595] veth1_vlan: entered promiscuous mode
[   51.412065][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.416900][ T5604] veth0_vlan: entered promiscuous mode
[   51.428146][ T5604] veth1_vlan: entered promiscuous mode
[   51.438208][ T5595] veth0_macvtap: entered promiscuous mode
[   51.450546][ T5595] veth1_macvtap: entered promiscuous mode
[   51.462822][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.477318][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.484180][ T5599] veth0_vlan: entered promiscuous mode
[   51.491276][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.494867][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.502626][ T5604] veth0_macvtap: entered promiscuous mode
[   51.508163][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.519527][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.523793][ T5604] veth1_macvtap: entered promiscuous mode
[   51.533206][ T5599] veth1_vlan: entered promiscuous mode
[   51.550475][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.562212][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.574335][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.579111][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.589596][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.593156][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.608719][ T5599] veth0_macvtap: entered promiscuous mode
[   51.614433][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.619497][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.635497][ T5599] veth1_macvtap: entered promiscuous mode
[   51.664725][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.671128][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.680117][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.695991][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.697911][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.704943][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.714222][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.720474][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.738757][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.743927][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.752514][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.756141][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.763628][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.869652][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.877363][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.911059][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.917812][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.126914][ T5705] IPVS: starting estimator thread 0...
[   52.227171][ T5720] IPVS: using max 83 ests per chain, 199200 per kthread
[   52.292500][ T5730] jffs2: notice: (5730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   52.397822][ T5737] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   52.401524][ T5737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'.
[   52.411997][ T5737] dummy0: entered promiscuous mode
[   52.414287][ T5737] bridge0: port 3(dummy0) entered blocking state
[   52.421094][ T5737] bridge0: port 3(dummy0) entered disabled state
[   52.424687][ T5737] dummy0: entered allmulticast mode
[   52.436657][ T5737] bridge0: port 3(dummy0) entered blocking state
[   52.439224][ T5737] bridge0: port 3(dummy0) entered forwarding state
[   52.452114][ T5737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'.
[   52.617936][ T5748] loop1: detected capacity change from 0 to 4096
[   52.630669][ T5748] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   52.663425][ T5748] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   52.665495][ T5706] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   52.821061][ T5706] usb 3-1: Using ep0 maxpacket: 16
[   52.827600][ T5706] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[   52.832723][ T5706] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   52.836012][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.838697][ T5706] usb 3-1: Product: syz
[   52.840013][ T5706] usb 3-1: Manufacturer: syz
[   52.841545][ T5706] usb 3-1: SerialNumber: syz
[   52.845967][ T5706] usb 3-1: config 0 descriptor??
[   52.854199][ T5706] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   52.862203][ T5706] usb 3-1: Detected FT232R
[   53.041796][ T5752] loop1: detected capacity change from 0 to 40427
[   53.056696][ T5752] F2FS-fs (loop1): build fault injection rate: 174
[   53.067750][ T5706] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   53.069319][ T5752] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   53.087189][ T5752] F2FS-fs (loop1): invalid crc value
[   53.152314][ T5752] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   53.160835][ T5752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   53.286844][ T4985] Bluetooth: hci0: command tx timeout
[   53.287018][   T54] Bluetooth: hci1: command tx timeout
[   53.295343][   T54] Bluetooth: hci2: command tx timeout
[   53.308166][ T5706] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   53.320643][ T5773] loop0: detected capacity change from 0 to 1024
[   53.340271][ T5773] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   53.377759][ T5773] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   53.382058][ T5773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.458228][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.487488][ T5678] usb 3-1: USB disconnect, device number 2
[   53.546294][ T5678] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   53.559568][ T5678] ftdi_sio 3-1:0.0: device disconnected
[   53.576279][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   53.825414][ T5040] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   53.985329][ T5040] usb 1-1: Using ep0 maxpacket: 16
[   53.990368][ T5040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.994487][ T5040] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   54.000415][ T5040] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   54.004158][ T5040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.007594][ T5040] usb 1-1: Product: syz
[   54.009326][ T5040] usb 1-1: Manufacturer: syz
[   54.011197][ T5040] usb 1-1: SerialNumber: syz
[   54.045497][ T5040] usb 1-1: 0:2 : does not exist
[   54.136520][ T5791] FAULT_INJECTION: forcing a failure.
[   54.136520][ T5791] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   54.140721][ T5791] CPU: 0 UID: 0 PID: 5791 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) 
[   54.140733][ T5791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   54.140739][ T5791] Call Trace:
[   54.140742][ T5791]  <TASK>
[   54.140746][ T5791]  dump_stack_lvl+0xe8/0x150
[   54.140761][ T5791]  should_fail_ex+0x40c/0x560
[   54.140776][ T5791]  _copy_from_user+0x2d/0xb0
[   54.140787][ T5791]  ___sys_sendmsg+0x1c6/0x360
[   54.140801][ T5791]  ? __pfx____sys_sendmsg+0x10/0x10
[   54.140811][ T5791]  ? __lock_acquire+0x683/0x2cf0
[   54.140838][ T5791]  __sys_sendmmsg+0x273/0x4d0
[   54.140850][ T5791]  ? __pfx___sys_sendmmsg+0x10/0x10
[   54.140860][ T5791]  ? do_futex+0x3e7/0x4e0
[   54.140875][ T5791]  ? __sys_connect+0x3ae/0x460
[   54.140890][ T5791]  ? rcu_is_watching+0x15/0xb0
[   54.140904][ T5791]  __x64_sys_sendmmsg+0xa0/0xc0
[   54.140913][ T5791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.140921][ T5791]  do_syscall_64+0x174/0x580
[   54.140929][ T5791]  ? trace_irq_disable+0x3b/0x140
[   54.140940][ T5791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.140948][ T5791] RIP: 0033:0x7fdf9359e159
[   54.140955][ T5791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.140961][ T5791] RSP: 002b:00007fdf917f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   54.140970][ T5791] RAX: ffffffffffffffda RBX: 00007fdf93825fa0 RCX: 00007fdf9359e159
[   54.140975][ T5791] RDX: 0000000000000300 RSI: 0000200000002f40 RDI: 0000000000000004
[   54.140979][ T5791] RBP: 00007fdf9363506b R08: 0000000000000000 R09: 0000000000000000
[   54.140984][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.140988][ T5791] R13: 00007fdf93826038 R14: 00007fdf93825fa0 R15: 00007fffe81e73f8
[   54.140998][ T5791]  </TASK>
[   54.244191][ T5040] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   54.296827][ T5040] usb 1-1: USB disconnect, device number 2
[   54.324215][ T5796] loop2: detected capacity change from 0 to 512
[   54.352312][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   54.373623][ T5796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.380104][ T5796] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.422348][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.470685][ T5803] =======================================================
[   54.470685][ T5803] WARNING: The mand mount option has been deprecated and
[   54.470685][ T5803]          and is ignored by this kernel. Remove the mand
[   54.470685][ T5803]          option from the mount to silence this warning.
[   54.470685][ T5803] =======================================================
[   54.540590][ T5808] Zero length message leads to an empty skb
[   54.774458][ T5824] loop2: detected capacity change from 0 to 8
[   54.804368][ T5824] SQUASHFS error: lzo decompression failed, data probably corrupt
[   54.810688][ T5824] SQUASHFS error: Failed to read block 0x91: -5
[   54.816763][ T5824] SQUASHFS error: Unable to read metadata cache entry [8f]
[   54.819746][ T5824] SQUASHFS error: Unable to read inode 0x11f
[   54.860500][ T5828] loop1: detected capacity change from 0 to 256
[   54.867606][ T5828] exfat: Deprecated parameter 'namecase'
[   54.876301][ T5828] exfat: Deprecated parameter 'namecase'
[   54.886481][ T5828] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   54.927109][ T5831] warning: `syz.2.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.000901][ T5837] capability: warning: `syz.1.56' uses deprecated v2 capabilities in a way that may be insecure
[   55.249953][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   55.368033][   T54] Bluetooth: hci0: command tx timeout
[   55.376051][   T54] Bluetooth: hci2: command tx timeout
[   55.376465][ T4985] Bluetooth: hci1: command tx timeout
[   55.432742][ T5865] loop1: detected capacity change from 0 to 256
[   55.448039][ T5865] exFAT-fs (loop1): bogus sectors bits per cluster : 46
[   55.455057][ T5865] exFAT-fs (loop1): failed to read boot sector
[   55.463742][ T5865] exFAT-fs (loop1): failed to recognize exfat type
[   55.520274][ T5868] IPVS: ip_vs_edit_dest(): server weight less than zero
[   55.738670][ T5884] loop1: detected capacity change from 0 to 128
[   55.833690][ T5890] FAULT_INJECTION: forcing a failure.
[   55.833690][ T5890] name failslab, interval 1, probability 0, space 0, times 1
[   55.841242][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) 
[   55.841254][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   55.841259][ T5890] Call Trace:
[   55.841263][ T5890]  <TASK>
[   55.841266][ T5890]  dump_stack_lvl+0xe8/0x150
[   55.841281][ T5890]  should_fail_ex+0x40c/0x560
[   55.841296][ T5890]  should_failslab+0xa8/0x100
[   55.841307][ T5890]  __kmalloc_node_track_caller_noprof+0x100/0x730
[   55.841318][ T5890]  ? alloc_vfsmnt+0xe6/0x410
[   55.841325][ T5890]  ? alloc_vfsmnt+0xe6/0x410
[   55.841335][ T5890]  kstrdup+0x42/0x100
[   55.841345][ T5890]  alloc_vfsmnt+0xe6/0x410
[   55.841353][ T5890]  clone_mnt+0x4b/0x9b0
[   55.841361][ T5890]  copy_tree+0x3d8/0x940
[   55.841397][ T5890]  copy_mnt_ns+0x3de/0xcc0
[   55.841409][ T5890]  ? rcu_is_watching+0x15/0xb0
[   55.841421][ T5890]  ? __pfx_copy_mnt_ns+0x10/0x10
[   55.841430][ T5890]  ? kmem_cache_alloc_noprof+0x308/0x5f0
[   55.841439][ T5890]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[   55.841446][ T5890]  ? create_new_namespaces+0x33/0x6b0
[   55.841458][ T5890]  create_new_namespaces+0xcf/0x6b0
[   55.841466][ T5890]  ? bpf_lsm_capable+0x9/0x20
[   55.841476][ T5890]  ? security_capable+0x7e/0x2c0
[   55.841488][ T5890]  unshare_nsproxy_namespaces+0x149/0x190
[   55.841497][ T5890]  ksys_unshare+0x57d/0xa00
[   55.841509][ T5890]  ? __pfx_ksys_unshare+0x10/0x10
[   55.841518][ T5890]  ? __pfx_ksys_write+0x10/0x10
[   55.841531][ T5890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.841539][ T5890]  __x64_sys_unshare+0x38/0x50
[   55.841547][ T5890]  do_syscall_64+0x174/0x580
[   55.841556][ T5890]  ? trace_irq_disable+0x3b/0x140
[   55.841568][ T5890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.841578][ T5890] RIP: 0033:0x7f177859e159
[   55.841589][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.841597][ T5890] RSP: 002b:00007f17794c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   55.841611][ T5890] RAX: ffffffffffffffda RBX: 00007f1778825fa0 RCX: 00007f177859e159
[   55.841626][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[   55.841634][ T5890] RBP: 00007f177863506b R08: 0000000000000000 R09: 0000000000000000
[   55.841640][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.841645][ T5890] R13: 00007f1778826038 R14: 00007f1778825fa0 R15: 00007fffff1d1b08
[   55.841656][ T5890]  </TASK>
[   55.848018][ T5893] netlink: 'syz.2.80': attribute type 4 has an invalid length.
[   55.973262][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   55.976214][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   57.455535][   T54] Bluetooth: hci0: command tx timeout
[   57.458624][ T4985] Bluetooth: hci2: command tx timeout
[   57.748945][ T5951] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0)
[   57.753200][ T5951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.847234][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   57.970725][ T5959] gadgetfs: bound to dummy_udc driver
[   57.998661][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.010150][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.020404][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   58.028481][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.043219][    T9] usb 1-1: config 0 descriptor??
[   58.175745][ T5955] loop2: detected capacity change from 0 to 40427
[   58.181255][ T5955] F2FS-fs: heap/no_heap options were deprecated
[   58.185327][ T5955] F2FS-fs (loop2): build fault injection rate: 19
[   58.187426][ T5955] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   58.190799][ T5955] F2FS-fs (loop2): invalid crc value
[   58.209934][ T5955] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[   58.274621][ T5955] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[   58.283490][ T5955] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   58.284050][ T5963] loop1: detected capacity change from 0 to 32768
[   58.291465][ T5955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   58.297825][ T5963] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.110 (5963)
[   58.322290][ T5955] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[   58.330811][ T5955] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[   58.333719][ T5963] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   58.337898][ T5955] syz.2.107: attempt to access beyond end of device
[   58.337898][ T5955] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   58.350424][ T5963] BTRFS info (device loop1): using sha256 checksum algorithm
[   58.376061][ T5599] syz-executor: attempt to access beyond end of device
[   58.376061][ T5599] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   58.394039][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   58.394058][ T5599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.394065][ T5599] Call Trace:
[   58.394071][ T5599]  <TASK>
[   58.394076][ T5599]  dump_stack_lvl+0xe8/0x150
[   58.394098][ T5599]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   58.394121][ T5599]  f2fs_write_end_io+0x124b/0x1710
[   58.394168][ T5599]  __submit_merged_bio+0x258/0x6a0
[   58.394182][ T5599]  ? rcu_is_watching+0x15/0xb0
[   58.394209][ T5599]  __submit_merged_write_cond+0x3c9/0x4e0
[   58.394234][ T5599]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   58.394268][ T5599]  f2fs_write_data_pages+0x2a27/0x36f0
[   58.394280][ T5599]  ? is_bpf_text_address+0x26/0x2b0
[   58.394318][ T5599]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   58.394385][ T5599]  ? is_bpf_text_address+0x292/0x2b0
[   58.394402][ T5599]  ? is_bpf_text_address+0x26/0x2b0
[   58.394416][ T5599]  ? __pfx_hlock_conflict+0x10/0x10
[   58.394432][ T5599]  ? __bfs+0x153/0x290
[   58.394445][ T5599]  ? __pfx_hlock_conflict+0x10/0x10
[   58.394473][ T5599]  ? lockdep_unlock+0x5d/0xd0
[   58.394486][ T5599]  ? __lock_acquire+0x13e8/0x2cf0
[   58.394519][ T5599]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   58.394533][ T5599]  do_writepages+0x338/0x560
[   58.394558][ T5599]  ? do_raw_spin_unlock+0x4d/0x210
[   58.394574][ T5599]  filemap_fdatawrite+0x1e9/0x2f0
[   58.394593][ T5599]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   58.394636][ T5599]  ? do_raw_spin_unlock+0x4d/0x210
[   58.394653][ T5599]  f2fs_sync_dirty_inodes+0x30e/0x830
[   58.394677][ T5599]  f2fs_write_checkpoint+0xa3d/0x2710
[   58.394691][ T5599]  ? __lock_acquire+0x683/0x2cf0
[   58.394725][ T5599]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   58.394774][ T5599]  kill_f2fs_super+0x2f6/0x700
[   58.394794][ T5599]  ? __pfx_kill_f2fs_super+0x10/0x10
[   58.394816][ T5599]  ? call_rcu+0x64b/0x8b0
[   58.394834][ T5599]  ? lockdep_hardirqs_on+0x7a/0x110
[   58.394858][ T5599]  deactivate_locked_super+0xbc/0x130
[   58.394877][ T5599]  cleanup_mnt+0x3d3/0x460
[   58.394898][ T5599]  task_work_run+0x1d9/0x270
[   58.394917][ T5599]  ? __pfx_task_work_run+0x10/0x10
[   58.394941][ T5599]  exit_to_user_mode_loop+0x1fa/0x730
[   58.394956][ T5599]  ? rcu_is_watching+0x15/0xb0
[   58.394973][ T5599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.394986][ T5599]  do_syscall_64+0x353/0x580
[   58.395000][ T5599]  ? trace_irq_disable+0x3b/0x140
[   58.395018][ T5599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.395030][ T5599] RIP: 0033:0x7fdf9359f397
[   58.395043][ T5599] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   58.395053][ T5599] RSP: 002b:00007fffe81e6668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   58.395067][ T5599] RAX: 0000000000000000 RBX: 00007fdf936344bb RCX: 00007fdf9359f397
[   58.395075][ T5599] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe81e6720
[   58.395082][ T5599] RBP: 00007fffe81e6720 R08: 00007fffe81e7720 R09: 00000000ffffffff
[   58.395089][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe81e77b0
[   58.395097][ T5599] R13: 00007fdf936344bb R14: 000000000000e382 R15: 00007fffe81e77f0
[   58.395116][ T5599]  </TASK>
[   58.537816][ T5599] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   58.592039][ T5963] BTRFS info (device loop1): turning off barriers
[   58.597649][ T5963] BTRFS info (device loop1): enabling free space tree
[   58.654095][ T5604] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   58.782834][ T5984] netlink: 'syz.2.111': attribute type 25 has an invalid length.
[   58.855442][ T5992] loop2: detected capacity change from 0 to 128
[   58.871043][ T5992] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.875893][ T5992] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.922512][ T5599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.992472][ T6002] loop1: detected capacity change from 0 to 2048
[   59.014875][ T6002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   59.138048][    T9] uclogic 0003:256C:006D.0001: interface is invalid, ignoring
[   59.168107][ T6001] loop2: detected capacity change from 0 to 32768
[   59.178116][ T6001] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.118 (6001)
[   59.200954][ T6001] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.209611][ T6001] BTRFS info (device loop2): using sha256 checksum algorithm
[   59.246953][ T6001] BTRFS info (device loop2): enabling ssd optimizations
[   59.249589][ T6001] BTRFS info (device loop2): turning on async discard
[   59.251952][ T6001] BTRFS info (device loop2): enabling free space tree
[   59.267668][ T6001] BTRFS warning (device loop2): can't clear the free_space_tree,compat_ro:1 feature bits while mounted
[   59.287574][ T5599] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.364865][    T9] usb 1-1: USB disconnect, device number 3
[   59.474426][ T6006] loop1: detected capacity change from 0 to 32768
[   59.909437][ T6044] netlink: 'syz.0.132': attribute type 21 has an invalid length.
[   59.912276][ T6044] netlink: 128 bytes leftover after parsing attributes in process `syz.0.132'.
[   59.919498][ T6044] netlink: 'syz.0.132': attribute type 4 has an invalid length.
[   59.921929][ T6044] netlink: 'syz.0.132': attribute type 5 has an invalid length.
[   59.924554][ T6044] netlink: 3 bytes leftover after parsing attributes in process `syz.0.132'.
[   60.023267][ T6050] loop0: detected capacity change from 0 to 512
[   60.045243][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.053584][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.057715][ T6050] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.097597][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.182610][ T6056] loop0: detected capacity change from 0 to 512
[   60.198009][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.201067][ T6056] EXT4-fs (loop0): 1 truncate cleaned up
[   60.201444][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   60.206217][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.208970][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[   60.223637][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.228382][ T6056] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1
[   60.271738][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.419169][ T6063] ip6gretap1: entered allmulticast mode
[   60.445781][    T9] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -2
[   60.565267][ T5706] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   60.602174][ T6075] netlink: 'syz.2.146': attribute type 4 has an invalid length.
[   60.667146][    T9] usb 2-1: USB disconnect, device number 2
[   60.710641][   T34] audit: type=1326 audit(1789989437.877:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.2.149" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf9359e159 code=0x0
[   60.727029][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   60.731670][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   60.738932][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   60.742824][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64
[   60.749752][ T5706] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   60.753519][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.756817][ T5706] usb 1-1: Product: syz
[   60.758421][ T5706] usb 1-1: Manufacturer: syz
[   60.760197][ T5706] usb 1-1: SerialNumber: syz
[   60.769338][ T5706] usb 1-1: config 0 descriptor??
[   60.979835][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.983443][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.986139][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.988423][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.990699][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.992806][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.995180][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.997483][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   60.999921][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.002333][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.004452][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.007382][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.009728][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.011900][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.014406][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.016639][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.018743][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.020834][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.022932][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.025002][ T5706] iforce 1-1:0.0: usb_submit_urb failed: -71
[   61.027435][ T5706] input input4: Timeout waiting for response from device.
[   61.033063][ T5706] usb 1-1: USB disconnect, device number 4
[   61.217654][ T6084] loop1: detected capacity change from 0 to 16
[   61.224892][ T6084] erofs (device loop1): DAX unsupported by block device. Turning off DAX.
[   61.229652][ T6084] erofs (device loop1): mounted with root inode @ nid 36.
[   61.244856][   T55] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[   61.254707][ T6084] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[   61.259992][ T6084] erofs (device loop1): read error -117 @ 2 of nid 89
[   61.264575][   T34] audit: type=1800 audit(1789989438.427:3): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.150" name="file2" dev="loop1" ino=89 res=0 errno=0
[   61.266229][ T6084] syz.1.150 (6084) used greatest stack depth: 20808 bytes left
[   61.404122][ T6091] loop1: detected capacity change from 0 to 512
[   61.413703][ T6091] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   61.423196][ T6091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   61.431785][ T6091] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.153: Invalid block bitmap block 0 in block_group 0
[   61.436060][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.437552][ T6091] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   61.442947][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.444630][ T6091] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.153: attempt to clear invalid blocks 983261 len 1
[   61.447250][    C1] EXT4-fs (loop1): error count since last fsck: 2
[   61.447275][    C1] EXT4-fs (loop1): initial error at time 1789989438: ext4_read_block_bitmap_nowait:483
[   61.447285][    C1] EXT4-fs (loop1): last error at time 1789989438: ext4_mb_clear_bb:6679
[   61.462543][ T6091] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   61.462787][ T6091] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.153: Invalid inode table block 0 in block_group 0
[   61.470234][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.472020][ T6091] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   61.477671][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.477855][ T6091] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   61.482674][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.483529][ T6091] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.153: Invalid inode table block 0 in block_group 0
[   61.491956][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.492147][ T6091] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   61.497431][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.497614][ T6091] EXT4-fs error (device loop1): ext4_truncate:4691: inode #11: comm syz.1.153: mark_inode_dirty error
[   61.503812][ T6091] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   61.503993][ T6091] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   61.510176][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.510502][ T6091] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.153: Invalid inode table block 0 in block_group 0
[   61.518275][ T6091] loop1: lost filesystem error report for type 5 error -117
[   61.521708][ T6091] EXT4-fs (loop1): 1 truncate cleaned up
[   61.528127][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.590178][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'.
[   61.622625][ T6098] scsi_nl_rcv_msg: discarding partial skb
[   62.001688][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.190652][ T6117] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   62.222970][ T6121] erofs (device loop2): mounted with root inode @ nid 36.
[   62.467460][ T6140] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   62.481540][ T6142] device-mapper: table: 248:0: too large device
[   62.484174][ T6142] device-mapper: ioctl: error adding target to table
[   62.602073][ T6151] EXT4-fs: Ignoring removed nobh option
[   62.607382][ T6151] EXT4-fs: Ignoring removed bh option
[   62.611506][ T6151] EXT4-fs (loop2): Test dummy encryption mode enabled
[   62.622839][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.659791][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.689202][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.700263][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.807210][ T6165] Bluetooth: MGMT ver 1.23
[   62.864066][ T6155] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Inode #4105 has refcount flag but no i_refcount_loc
[   62.878882][ T6155] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   62.891276][ T6155] OCFS2: File system is now read-only.
[   62.897259][ T6155] (syz.0.181,6155,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[   62.903865][ T6155] (syz.0.181,6155,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[   62.910501][ T6155] (syz.0.181,6155,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[   62.916512][ T6155] (syz.0.181,6155,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[   62.916526][ T6155] (syz.0.181,6155,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[   62.929776][ T6155] (syz.0.181,6155,0):ocfs2_initialize_super:2195 ERROR: status = -30
[   62.933830][ T6155] (syz.0.181,6155,0):ocfs2_fill_super:1177 ERROR: status = -30
[   62.936949][ T6169] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   62.941573][ T6169] FAT-fs (loop1): Filesystem has been set read-only
[   63.175592][ T5706] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   63.650265][ T6188] set_capacity_and_notify: 5 callbacks suppressed
[   63.650274][ T6188] loop1: detected capacity change from 0 to 131072
[   63.656444][ T6188] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   63.658936][ T6188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   63.661650][ T6188] F2FS-fs (loop1): invalid crc value
[   63.696657][ T6188] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   63.702887][ T6188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   63.706508][ T6188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   63.722062][ T6188] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   63.750992][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short
[   63.756230][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.760216][ T5706] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   63.763657][ T5706] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   63.771050][ T5706] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   63.774700][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.778032][ T5706] usb 3-1: Product: syz
[   63.780017][ T5706] usb 3-1: Manufacturer: syz
[   63.781952][ T5706] usb 3-1: SerialNumber: syz
[   64.046453][ T5706] usb 3-1: USB disconnect, device number 3
[   64.116259][ T6197] xt_SECMARK: invalid mode: 2
[   64.152779][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   64.317831][ T6207] Cannot find add_set index 2 as target
[   64.376396][   T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   64.539789][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   64.544986][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[   64.552508][   T24] usb 1-1: config 4 has an invalid interface number: 106 but max is 0
[   64.566237][   T24] usb 1-1: config 4 has no interface number 0
[   64.569909][   T24] usb 1-1: config 4 interface 106 has no altsetting 0
[   64.573393][   T24] usb 1-1: language id specifier not provided by device, defaulting to English
[   64.581964][   T24] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91
[   64.587182][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.592814][   T24] usb 1-1: Product: syz
[   64.594481][   T24] usb 1-1: Manufacturer: 朎㢶
[   64.596647][   T24] usb 1-1: SerialNumber: syz
[   64.821706][   T24] uvcvideo 1-1:4.106: Found UVC 0.00 device syz (0408:4033)
[   64.826551][   T24] uvcvideo 1-1:4.106: Forcing UVC version to 1.0a
[   64.829552][   T24] uvcvideo 1-1:4.106: No valid video chain found.
[   64.835711][ T5706] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   64.837477][   T24] usb 1-1: USB disconnect, device number 5
[   64.860741][ T6227] loop2: detected capacity change from 0 to 512
[   64.866309][ T6227] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836
[   64.997030][ T5706] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.001614][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0
[   65.006023][ T5706] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[   65.015195][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.023574][ T5706] usb 2-1: config 0 descriptor??
[   65.401903][ T6250] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[   65.410312][ T6250] gretap0: entered promiscuous mode
[   65.423942][ T6250] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[   65.458284][ T5706] input: HID 5543:0522 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:5543:0522.0002/input/input5
[   65.555774][ T5706] uclogic 0003:5543:0522.0002: input,hidraw0: USB HID v0.02 Joystick [HID 5543:0522] on usb-dummy_hcd.1-1/input0
[   65.639465][ T5040] usb 2-1: USB disconnect, device number 3
[   65.725253][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   65.875185][   T24] usb 1-1: Using ep0 maxpacket: 16
[   65.879480][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   65.884482][   T24] usb 1-1: config 4 has an invalid interface number: 127 but max is 0
[   65.888839][   T24] usb 1-1: config 4 has no interface number 0
[   65.891439][   T24] usb 1-1: config 4 interface 127 has no altsetting 0
[   65.897447][   T24] usb 1-1: string descriptor 0 read error: -22
[   65.900221][   T24] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[   65.903951][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.129872][ T5706] usb 1-1: USB disconnect, device number 6
[   66.398980][ T6270] loop1: detected capacity change from 0 to 256
[   66.408727][ T6270] exfat: Deprecated parameter 'namecase'
[   66.415210][ T6270] exfat: Deprecated parameter 'namecase'
[   66.420298][ T6270] exfat: Deprecated parameter 'namecase'
[   66.443180][ T6270] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   66.499784][ T6265] loop2: detected capacity change from 0 to 32768
[   66.509805][ T6265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.229 (6265)
[   66.552802][ T6265] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.558268][ T6265] BTRFS info (device loop2): using crc32c checksum algorithm
[   66.646778][ T6265] BTRFS info (device loop2): setting nodatasum
[   66.654894][ T6265] BTRFS info (device loop2): enabling ssd optimizations
[   66.662366][ T6265] BTRFS info (device loop2): turning on flush-on-commit
[   66.672022][ T6265] BTRFS info (device loop2): enabling free space tree
[   66.679778][ T6265] BTRFS info (device loop2): use lzo compression, level 1
[   66.689882][ T6265] BTRFS info (device loop2): max_inline set to 0
[   67.169182][ T5599] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.429445][ T6347] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   67.458705][ T6347] netlink: 208 bytes leftover after parsing attributes in process `syz.2.233'.
[   67.485222][ T6347] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   67.503949][ T6347] netlink: 22 bytes leftover after parsing attributes in process `syz.2.233'.
[   67.597440][ T6352] trusted_key: encrypted_key: hex blob is missing
[   67.654208][ T6358] capability: warning: `syz.2.239' uses 32-bit capabilities (legacy support in use)
[   67.686983][ T6360] FAULT_INJECTION: forcing a failure.
[   67.686983][ T6360] name failslab, interval 1, probability 0, space 0, times 0
[   67.695266][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) 
[   67.695286][ T6360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.695293][ T6360] Call Trace:
[   67.695299][ T6360]  <TASK>
[   67.695331][ T6360]  dump_stack_lvl+0xe8/0x150
[   67.695355][ T6360]  should_fail_ex+0x40c/0x560
[   67.695380][ T6360]  should_failslab+0xa8/0x100
[   67.695401][ T6360]  __kmalloc_noprof+0xfe/0x720
[   67.695416][ T6360]  ? rcu_is_watching+0x15/0xb0
[   67.695436][ T6360]  ? vhost_dev_set_owner+0x2a7/0xb00
[   67.695453][ T6360]  ? vhost_dev_set_owner+0x2a7/0xb00
[   67.695474][ T6360]  vhost_dev_set_owner+0x2a7/0xb00
[   67.695502][ T6360]  vhost_dev_ioctl+0xdb/0x1170
[   67.695522][ T6360]  ? vhost_vsock_dev_ioctl+0x220/0xed0
[   67.695536][ T6360]  ? __pfx___mutex_lock+0x10/0x10
[   67.695553][ T6360]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[   67.695581][ T6360]  vhost_vsock_dev_ioctl+0x22e/0xed0
[   67.695599][ T6360]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[   67.695613][ T6360]  ? __fget_files+0x2a/0x420
[   67.695629][ T6360]  ? __fget_files+0x3a2/0x420
[   67.695644][ T6360]  ? __fget_files+0x2a/0x420
[   67.695662][ T6360]  ? bpf_lsm_file_ioctl+0x9/0x20
[   67.695676][ T6360]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[   67.695690][ T6360]  __se_sys_ioctl+0xfc/0x170
[   67.695702][ T6360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.695716][ T6360]  do_syscall_64+0x174/0x580
[   67.695729][ T6360]  ? trace_irq_disable+0x3b/0x140
[   67.695748][ T6360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.695761][ T6360] RIP: 0033:0x7f88bef9e159
[   67.695774][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.695784][ T6360] RSP: 002b:00007f88bfd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.695799][ T6360] RAX: ffffffffffffffda RBX: 00007f88bf225fa0 RCX: 00007f88bef9e159
[   67.695808][ T6360] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[   67.695816][ T6360] RBP: 00007f88bf03506b R08: 0000000000000000 R09: 0000000000000000
[   67.695824][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.695831][ T6360] R13: 00007f88bf226038 R14: 00007f88bf225fa0 R15: 00007ffd52bb3758
[   67.695852][ T6360]  </TASK>
[   67.785576][ T6362] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.241'.
[   67.872150][ T6372] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   67.903588][ T6372] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.969135][ T6372] bond1: (slave geneve2): making interface the new active one
[   67.981747][ T6372] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   68.019581][ T6372] syz.1.245 (6372) used greatest stack depth: 20744 bytes left
[   68.241772][ T6390] FAULT_INJECTION: forcing a failure.
[   68.241772][ T6390] name failslab, interval 1, probability 0, space 0, times 0
[   68.246856][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.1.252 Not tainted syzkaller #0 PREEMPT(full) 
[   68.246872][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.246879][ T6390] Call Trace:
[   68.246885][ T6390]  <TASK>
[   68.246891][ T6390]  dump_stack_lvl+0xe8/0x150
[   68.246913][ T6390]  should_fail_ex+0x40c/0x560
[   68.246936][ T6390]  should_failslab+0xa8/0x100
[   68.246957][ T6390]  __kmalloc_noprof+0xfe/0x720
[   68.246972][ T6390]  ? security_inode_alloc+0xd5/0x310
[   68.246988][ T6390]  ? __kmalloc_cache_noprof+0x150/0x660
[   68.247004][ T6390]  ? alloc_pipe_info+0x1f9/0x4c0
[   68.247014][ T6390]  ? alloc_pipe_info+0x1f9/0x4c0
[   68.247031][ T6390]  alloc_pipe_info+0x1f9/0x4c0
[   68.247043][ T6390]  create_pipe_files+0x88/0x7c0
[   68.247105][ T6390]  __do_pipe_flags+0x46/0x1f0
[   68.247120][ T6390]  do_pipe2+0xaa/0x190
[   68.247134][ T6390]  ? __pfx_do_pipe2+0x10/0x10
[   68.247147][ T6390]  ? rcu_is_watching+0x15/0xb0
[   68.247167][ T6390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.247178][ T6390]  __x64_sys_pipe+0x3a/0x50
[   68.247190][ T6390]  do_syscall_64+0x174/0x580
[   68.247204][ T6390]  ? trace_irq_disable+0x3b/0x140
[   68.247223][ T6390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.247235][ T6390] RIP: 0033:0x7f177859e159
[   68.247247][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.247257][ T6390] RSP: 002b:00007f17794c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[   68.247270][ T6390] RAX: ffffffffffffffda RBX: 00007f1778825fa0 RCX: 00007f177859e159
[   68.247277][ T6390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   68.247286][ T6390] RBP: 00007f177863506b R08: 0000000000000000 R09: 0000000000000000
[   68.247292][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.247298][ T6390] R13: 00007f1778826038 R14: 00007f1778825fa0 R15: 00007fffff1d1b08
[   68.247352][ T6390]  </TASK>
[   68.359175][ T6392] loop2: detected capacity change from 0 to 512
[   68.385009][ T6392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   68.391022][ T6392] System zones: 1-12
[   68.394008][ T6392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.253: missing EA_INODE flag
[   68.399339][ T6392] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   68.400909][ T6392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.253: error while reading EA inode 12 err=-117
[   68.404038][ T6394] vxcan3: entered promiscuous mode
[   68.404083][ T6394] vxcan3: entered allmulticast mode
[   68.408251][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   68.408263][    C0] EXT4-fs (loop2): initial error at time 1789989445: ext4_xattr_inode_iget:441: inode 12
[   68.408284][    C0] EXT4-fs (loop2): last error at time 1789989445: ext4_xattr_inode_iget:441: inode 12
[   68.423352][ T6392] loop2: lost filesystem error report for type 5 error -117
[   68.423629][ T6392] EXT4-fs (loop2): 1 orphan inode deleted
[   68.431540][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.966065][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   69.137031][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   69.140962][   T10] usb 2-1: config 70 has an invalid interface number: 6 but max is 0
[   69.144115][   T10] usb 2-1: config 70 has an invalid descriptor of length 0, skipping remainder of the config
[   69.148488][   T10] usb 2-1: config 70 has no interface number 0
[   69.152821][   T10] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c005, bcdDevice=83.d1
[   69.156339][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.159085][   T10] usb 2-1: Product: syz
[   69.160773][   T10] usb 2-1: Manufacturer: syz
[   69.162553][   T10] usb 2-1: SerialNumber: syz
[   69.247764][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.322404][ T6412] process 'syz.2.259' launched './file0' with NULL argv: empty string added
[   69.330903][ T6412] Invalid argument reading file caps for ./file0
[   69.390471][   T10] usb 2-1: USB disconnect, device number 4
[   69.699283][ T6437] loop2: detected capacity change from 0 to 4096
[   69.731829][ T6438] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.832840][ T6442] loop2: detected capacity change from 0 to 256
[   69.839471][ T6442] exfat: Deprecated parameter 'utf8'
[   69.849527][ T6442] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[   71.289738][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[   71.292856][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[   71.585358][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   71.737251][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.745463][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[   71.752229][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   71.757260][   T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   71.760670][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.180802][   T10] cxacru 2-1:1.0: send of cm 0x91 failed (-71)
[   72.189456][   T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[   72.196950][   T10] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[   72.209508][   T10] cxacru 2-1:1.0: probe with driver cxacru failed with error -71
[   72.214804][   T10] usb 2-1: USB disconnect, device number 5
[   72.495178][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   72.646089][   T24] usb 3-1: Using ep0 maxpacket: 16
[   72.656637][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.660754][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.664475][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.669868][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[   72.673438][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.682044][   T24] usb 3-1: config 0 descriptor??
[   72.764301][ T6480] syz.1.287 uses obsolete (PF_INET,SOCK_PACKET)
[   72.935187][ T5040] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   72.939415][ T6482] loop1: detected capacity change from 0 to 8192
[   73.047744][ T6486] WARNING! power/level is deprecated; use power/control instead
[   73.074862][ T6488] loop1: detected capacity change from 0 to 256
[   73.096739][ T5040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.102925][   T24] kye 0003:0458:500F.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   73.106889][ T5040] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   73.114974][ T5040] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   73.123083][   T24] kye 0003:0458:500F.0003: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.2-1/input0
[   73.132658][   T24] kye 0003:0458:500F.0003: tablet-enabling feature report not found
[   73.135765][   T24] kye 0003:0458:500F.0003: tablet enabling failed
[   73.137887][ T5040] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[   73.140731][ T5040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.143465][ T5040] usb 1-1: Product: syz
[   73.146876][ T5040] usb 1-1: Manufacturer: syz
[   73.148708][ T5040] usb 1-1: SerialNumber: syz
[   73.156398][ T5040] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821)
[   73.312434][ T5706] usb 3-1: USB disconnect, device number 4
[   73.355388][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.363840][ T5040] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1).
[   73.368667][ T5040] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770.
[   73.379097][ T5040] usb 1-1: USB disconnect, device number 7
[   73.505183][   T10] usb 2-1: Using ep0 maxpacket: 16
[   73.509010][   T10] usb 2-1: config 6 has an invalid interface number: 200 but max is 3
[   73.512156][   T10] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   73.516565][   T10] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 4
[   73.519940][   T10] usb 2-1: config 6 has no interface number 0
[   73.522266][   T10] usb 2-1: too many endpoints for config 6 interface 200 altsetting 3: 41, using maximum allowed: 30
[   73.526869][   T10] usb 2-1: config 6 interface 200 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   73.531196][   T10] usb 2-1: config 6 interface 200 altsetting 3 endpoint 0x8E has an invalid bInterval 64, changing to 7
[   73.535778][   T10] usb 2-1: config 6 interface 200 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[   73.540934][   T10] usb 2-1: config 6 interface 200 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0
[   73.544964][   T10] usb 2-1: config 6 interface 200 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 41
[   73.550473][   T10] usb 2-1: config 6 interface 200 has no altsetting 0
[   73.555547][   T10] usb 2-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=95.62
[   73.559252][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.562473][   T10] usb 2-1: Product: syz
[   73.564183][   T10] usb 2-1: Manufacturer: syz
[   73.566132][   T10] usb 2-1: SerialNumber: syz
[   73.786364][   T10] usb 2-1: USB disconnect, device number 6
[   73.852483][ T6492] netlink: 'syz.2.293': attribute type 1 has an invalid length.
[   73.892606][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'.
[   74.038971][ T6506] loop2: detected capacity change from 0 to 512
[   74.061809][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.065979][ T6506] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.099934][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.477076][ T6519] loop1: detected capacity change from 0 to 32768
[   74.506193][ T6519] lbmIODone: I/O error in JFS log
[   74.507884][ T6519] *** Log Format Error ! ***
[   74.509900][ T6519] lmLogInit: exit(-22)
[   74.511251][ T6519] lmLogOpen: exit(-22)
[   74.633485][ T6523] comedi: No check for data length of config insn id 230 is implemented
[   74.637540][ T6523] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[   74.640552][ T6523] comedi: Assuming n=15 is correct
[   74.666880][ T6525] loop1: detected capacity change from 0 to 128
[   74.682846][ T6525] FAT-fs (loop1): bogus number of reserved sectors
[   74.696184][ T6525] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   74.701769][ T6525] FAT-fs (loop1): Can't find a valid FAT filesystem
[   74.826236][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'.
[   74.905988][ T6537] loop1: detected capacity change from 0 to 512
[   74.940713][ T6542] ubi0: attaching mtd0
[   74.951320][ T6537] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   74.959328][ T6537] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[   75.373020][ T6576] loop1: detected capacity change from 0 to 16
[   75.390308][ T6576] erofs (device loop1): mounted with root inode @ nid 36.
[   75.399254][ T6576] erofs (device loop1): negative i_size @ nid 86
[   75.429505][ T6579] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[   75.464022][ T6582] loop1: detected capacity change from 0 to 256
[   75.477445][ T6579] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.491309][ T6584] bond1: option tlb_dynamic_lb: unable to set because the bond device is up
[   75.758594][ T6586] loop1: detected capacity change from 0 to 32768
[   75.769060][ T6586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.333 (6586)
[   75.808515][ T6586] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.815161][ T6586] BTRFS info (device loop1): using sha256 checksum algorithm
[   75.872905][ T6586] BTRFS info (device loop1): enabling ssd optimizations
[   75.878788][ T6586] BTRFS info (device loop1): turning on async discard
[   75.885452][ T6586] BTRFS info (device loop1): enabling free space tree
[   75.922713][ T5604] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.969134][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   76.124453][ T6621] loop1: detected capacity change from 0 to 32768
[   76.138405][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   76.144021][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   76.148850][ T5706] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   76.151361][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[   76.154459][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.162599][   T10] usb 1-1: config 0 descriptor??
[   76.165521][ T6621] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   76.197100][ T6621] XFS (loop1): Ending clean mount
[   76.228378][ T5604] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   76.309809][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.314460][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   76.321561][ T5706] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   76.329344][ T5706] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.340726][ T5706] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[   76.344415][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   76.348423][ T5706] usb 3-1: Product: syz
[   76.350417][ T5706] usb 3-1: Manufacturer: syz
[   76.360625][ T5706] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[   76.366360][ T5706] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[   76.372649][ T5706] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[   76.568615][ T5040] usb 3-1: USB disconnect, device number 5
[   76.577938][ T5040] garmin_gps 3-1:1.0: device disconnected
[   76.594991][   T10] input: HID 17ef:60a3 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:60A3.0004/input/input6
[   76.655285][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   76.663469][   T10] lenovo 0003:17EF:60A3.0004: input,hidraw0: USB HID v0.07 Joystick [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0
[   76.792479][   T10] usb 1-1: USB disconnect, device number 8
[   76.807055][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.810830][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.814460][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.821533][   T24] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[   76.825215][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.828155][   T24] usb 2-1: Product: syz
[   76.829530][   T24] usb 2-1: Manufacturer: syz
[   76.831166][   T24] usb 2-1: SerialNumber: syz
[   76.836426][   T24] etas_es58x 2-1:1.0: Starting syz syz (Serial Number syz)
[   77.042758][   T24] usb 2-1: USB disconnect, device number 7
[   77.137242][ T6635] program syz.2.345 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.170726][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   77.457091][ T6655] loop0: detected capacity change from 0 to 64
[   77.636860][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   77.786980][   T10] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.801931][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   77.808387][   T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[   77.814473][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.823363][   T10] usb 3-1: config 0 descriptor??
[   77.923879][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.945146][ T5705] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   78.098444][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.107686][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.112467][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.119026][ T5705] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.121912][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.129341][ T5705] usb 1-1: config 0 descriptor??
[   78.262834][   T10] chicony 0003:04F2:0418.0005: hidraw0: USB HID vf.ff Joystick [HID 04f2:0418] on usb-dummy_hcd.2-1/input0
[   78.463720][ T5706] usb 3-1: USB disconnect, device number 6
[   78.587205][ T5705] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   79.056859][ T6707] loop1: detected capacity change from 0 to 32768
[   79.064017][ T6707] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.377 (6707)
[   79.091115][ T6707] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   79.100179][ T6707] BTRFS info (device loop1): using blake2b checksum algorithm
[   79.181705][ T6707] BTRFS info (device loop1): enabling ssd optimizations
[   79.192620][ T6707] BTRFS info (device loop1): turning on async discard
[   79.201181][ T6707] BTRFS info (device loop1): enabling free space tree
[   79.238667][ T6707] BTRFS critical (device loop1 state E): emergency shutdown
[   79.267195][ T5604] BTRFS info (device loop1 state E): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   79.579194][ T6743] Bluetooth: hci0: unsupported parameter 5135
[   79.581603][ T6743] Bluetooth: hci0: unsupported parameter 8192
[   79.583771][ T6743] Bluetooth: hci0: unsupported parameter 5135
[   79.587186][ T6743] Bluetooth: hci0: unsupported parameter 8192
[   79.769530][    C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1
[   79.887977][ T6752] loop2: detected capacity change from 0 to 32768
[   79.934417][ T6752] JBD2: Ignoring recovery information on journal
[   79.958441][ T6752] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   80.214335][ T5599] ocfs2: Unmounting device (7,2) on (node local)
[   80.983125][ T5705] usb 1-1: USB disconnect, device number 9
[   81.035715][ T6784] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[   81.147490][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   81.152401][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[   81.152418][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.152427][   T54] Workqueue: hci0 hci_rx_work
[   81.152446][   T54] Call Trace:
[   81.152452][   T54]  <TASK>
[   81.152458][   T54]  dump_stack_lvl+0xe8/0x150
[   81.152477][   T54]  sysfs_create_dir_ns+0x271/0x2a0
[   81.152496][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   81.152513][   T54]  ? do_raw_spin_unlock+0x4d/0x210
[   81.152530][   T54]  kobject_add_internal+0x622/0xcd0
[   81.152552][   T54]  kobject_add+0x163/0x240
[   81.152570][   T54]  ? __pfx_kobject_add+0x10/0x10
[   81.152588][   T54]  ? get_device_parent+0x366/0x3a0
[   81.152608][   T54]  device_add+0x3fa/0xb80
[   81.152625][   T54]  hci_conn_add_sysfs+0xd5/0x210
[   81.152641][   T54]  le_conn_complete_evt+0xfef/0x1580
[   81.152663][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   81.152680][   T54]  ? __mutex_unlock_slowpath+0x731/0x900
[   81.152696][   T54]  ? skb_pull_data+0xf0/0x200
[   81.152711][   T54]  hci_le_conn_complete_evt+0x187/0x470
[   81.152732][   T54]  hci_event_packet+0x67a/0xf10
[   81.152752][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   81.152768][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[   81.152784][   T54]  ? audit_filter_rules+0x3020/0x5d10
[   81.152802][   T54]  ? hci_send_to_monitor+0xe2/0x590
[   81.152822][   T54]  hci_rx_work+0x3ee/0x1020
[   81.152842][   T54]  ? process_scheduled_works+0xa20/0x14e0
[   81.152855][   T54]  process_scheduled_works+0xa8e/0x14e0
[   81.152886][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.152903][   T54]  ? assign_work+0x3cf/0x5d0
[   81.152918][   T54]  worker_thread+0xa47/0xfb0
[   81.152947][   T54]  kthread+0x388/0x470
[   81.152974][   T54]  ? __pfx_worker_thread+0x10/0x10
[   81.152985][   T54]  ? __pfx_kthread+0x10/0x10
[   81.153002][   T54]  ret_from_fork+0x514/0xb70
[   81.153020][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[   81.153034][   T54]  ? __switch_to+0xc89/0x1420
[   81.153049][   T54]  ? __pfx_kthread+0x10/0x10
[   81.153065][   T54]  ret_from_fork_asm+0x1a/0x30
[   81.153091][   T54]  </TASK>
[   81.153114][   T54] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   81.242133][   T54] Bluetooth: hci0: failed to register connection device
[   81.325258][ T5706] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   81.416370][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   81.481319][ T5706] usb 2-1: config 2 has an invalid interface number: 51 but max is 0
[   81.484776][ T5706] usb 2-1: config 2 has no interface number 0
[   81.487991][ T5706] usb 2-1: config 2 interface 51 has no altsetting 0
[   81.492931][ T5706] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=1c.fd
[   81.496918][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.500045][ T5706] usb 2-1: Product: syz
[   81.501689][ T5706] usb 2-1: Manufacturer: syz
[   81.503495][ T5706] usb 2-1: SerialNumber: syz
[   81.531499][   T33] cfg80211: failed to load regulatory.db
[   81.567710][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   81.572184][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.576919][    T9] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[   81.579655][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.592854][    T9] gspca_main: spca501-2.14.0 probing 0000:0000
[   81.732452][ T5706] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.51/input/input9
[   81.741781][ T5030] bcm5974 2-1:2.51: could not read from device
[   81.748072][ T5030] bcm5974 2-1:2.51: could not read from device
[   81.755335][ T5030] bcm5974 2-1:2.51: could not read from device
[   81.760345][ T5030] bcm5974 2-1:2.51: could not read from device
[   81.762375][ T5706] usb 2-1: USB disconnect, device number 8
[   81.796312][    T9] gspca_spca501: reg write: error -71
[   81.801275][    T9] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   81.808671][    T9] spca501 3-1:1.0: probe with driver spca501 failed with error -22
[   81.813370][    T9] uvcvideo 3-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[   81.819734][    T9] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   81.823038][    T9] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[   81.831493][    T9] uvcvideo 3-1:1.1: Failed to initialize the device (-71).
[   81.843746][    T9] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71
[   81.849741][    T9] usb 3-1: USB disconnect, device number 7
[   82.421472][ T6806] loop2: detected capacity change from 0 to 2048
[   82.544821][ T6806] hpfs: filesystem error: improperly stopped; already mounted read-only
[   82.549411][ T6806] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   82.552631][ T6806] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[   82.667731][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   82.695793][ T6816] loop2: detected capacity change from 0 to 128
[   82.701575][ T6816] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   82.828800][    T9] usb 2-1: config 2 has an invalid interface number: 255 but max is 0
[   82.833510][    T9] usb 2-1: config 2 has no interface number 0
[   82.837851][    T9] usb 2-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30
[   82.842106][    T9] usb 2-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   82.847388][    T9] usb 2-1: config 2 interface 255 has no altsetting 0
[   82.852209][    T9] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c8.51
[   82.857643][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.860730][    T9] usb 2-1: Product: syz
[   82.862359][    T9] usb 2-1: Manufacturer: syz
[   82.864146][    T9] usb 2-1: SerialNumber: syz
[   82.869080][ T6814] loop0: detected capacity change from 0 to 32768
[   82.879756][ T6814] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.419 (6814)
[   82.900190][ T6814] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.908481][ T6814] BTRFS info (device loop0): using crc32c checksum algorithm
[   82.934147][ T6814] BTRFS info (device loop0): enabling ssd optimizations
[   82.937155][ T6814] BTRFS info (device loop0): turning on flush-on-commit
[   82.939966][ T6814] BTRFS info (device loop0): enabling free space tree
[   82.942694][ T6814] BTRFS info (device loop0): enabling auto defrag
[   82.945923][ T6814] BTRFS info (device loop0): use lzo compression, level 1
[   82.948914][ T6814] BTRFS info (device loop0): max_inline set to 4096
[   83.020008][ T5595] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.096382][   T33] usb 2-1: USB disconnect, device number 9
[   83.198978][ T6842] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[   83.251449][ T6846] program syz.0.427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.438370][ T6850] loop0: detected capacity change from 0 to 32768
[   83.469575][ T6850]  loop0: p1 p3 < >
[   83.587535][ T5605] udevd[5605]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   83.592591][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   83.725293][   T33] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   84.383960][ T6873] loop1: detected capacity change from 0 to 4096
[   84.392916][ T6873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.397114][ T6873] EXT4-fs (loop1): Test dummy encryption mode enabled
[   84.415178][ T6873] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   84.419157][ T6873] System zones: 0-5
[   84.424733][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.437719][ T6873] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[   84.450351][ T6873] fscrypt: AES-256-XTS using blk-crypto-fallback
[   84.536954][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.705275][   T33] usb 3-1: Using ep0 maxpacket: 16
[   84.972172][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.975475][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   84.978921][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   84.981871][   T33] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   84.985244][   T33] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   84.990287][   T33] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   84.993090][   T33] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   84.995521][   T33] usb 3-1: Manufacturer: syz
[   84.999964][   T33] usb 3-1: config 0 descriptor??
[   85.006470][ T5706] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   85.053945][ T6888] loop0: detected capacity change from 0 to 1024
[   85.059844][ T6888] EXT4-fs: Ignoring removed bh option
[   85.079707][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   85.136897][ T6888] loop0: detected capacity change from 1024 to 64
[   85.155151][ T5706] usb 2-1: Using ep0 maxpacket: 16
[   85.158537][ T5706] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   85.161165][ T5706] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[   85.163699][ T5706] usb 2-1: config 0 has no interface number 0
[   85.168265][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   85.171496][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.174064][ T5706] usb 2-1: Product: syz
[   85.176493][ T5706] usb 2-1: Manufacturer: syz
[   85.178274][ T5706] usb 2-1: SerialNumber: syz
[   85.181095][ T5706] usb 2-1: config 0 descriptor??
[   85.256932][   T33] rc_core: IR keymap rc-hauppauge not found
[   85.258808][   T33] Registered IR keymap rc-empty
[   85.260779][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.275185][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.296158][   T33] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   85.301166][   T33] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[   85.309035][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.325289][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.345200][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.375792][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.388362][ T5706] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[   85.392104][ T5706] uvcvideo 2-1:0.105: No valid video chain found.
[   85.395061][ T5706] usb 2-1: USB disconnect, device number 10
[   85.405649][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.412422][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.417266][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.436363][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.456678][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.485190][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.515176][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.545175][   T33] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   85.579055][   T33] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[   85.581535][   T33] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   85.673518][ T5706] usb 3-1: USB disconnect, device number 8
[   86.033738][ T6903] loop1: detected capacity change from 0 to 512
[   86.040680][ T6903] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   86.196051][ T6909] loop1: detected capacity change from 0 to 128
[   86.228597][   T34] audit: type=1800 audit(1789989463.397:4): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.452" name="file1" dev="loop1" ino=1048613 res=0 errno=0
[   86.309574][ T6913] overlayfs: upper fs does not support tmpfile.
[   86.347373][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[   86.675390][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   86.774462][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   86.785625][ T6889] kmmpd-loop0: attempt to access beyond end of device
[   86.785625][ T6889] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64
[   86.791194][ T6889] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[   86.816448][ T5706] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   86.833450][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   86.843114][    T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[   86.860978][    T9] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[   86.875032][    T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   86.882523][ T5632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.889312][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[   86.898069][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.908902][ T6921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   86.917968][    T9] ims_pcu 3-1:1.0: Second endpoint on data interface is not BULK IN
[   86.927010][    T9] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22
[   86.980911][ T5706] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[   86.984767][ T5706] usb 2-1: config 1 has no interface number 0
[   86.989158][ T5706] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   86.995024][ T5706] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   87.007035][ T5706] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   87.010349][ T5632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.013863][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.016567][ T5706] usb 2-1: Product: syz
[   87.017876][ T5706] usb 2-1: Manufacturer: syz
[   87.020858][ T5706] usb 2-1: SerialNumber: syz
[   87.029598][ T6927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   87.036308][ T5706] usb 2-1: Expected 3 endpoints, found: 2
[   87.038785][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.050531][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.054038][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.056901][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.062011][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.113937][ T5632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.124844][   T33] usb 3-1: USB disconnect, device number 9
[   87.227307][ T5632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.244653][   T10] usb 2-1: USB disconnect, device number 11
[   87.326608][ T5632] bridge_slave_1: left allmulticast mode
[   87.329805][ T5632] bridge_slave_1: left promiscuous mode
[   87.333015][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.342419][ T5632] bridge_slave_0: left allmulticast mode
[   87.344439][ T5632] bridge_slave_0: left promiscuous mode
[   87.348461][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.497556][ T5632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.503101][ T5632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.506978][ T5632] bond0 (unregistering): Released all slaves
[   87.513791][ T5632] bond1 (unregistering): Released all slaves
[   87.540368][ T5342] 8021q: adding VLAN 0 to HW filter on device eth1
[   87.728065][ T5342] 8021q: adding VLAN 0 to HW filter on device eth2
[   87.893730][ T5342] 8021q: adding VLAN 0 to HW filter on device eth3
[   87.935285][   T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   87.969239][ T5632] hsr_slave_0: left promiscuous mode
[   87.973836][ T5632] hsr_slave_1: left promiscuous mode
[   87.979852][ T5632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.982427][ T5632] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.987332][ T5632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.990520][ T5632] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.001164][ T5632] veth1_macvtap: left promiscuous mode
[   88.003601][ T5632] veth0_macvtap: left promiscuous mode
[   88.007767][ T5632] veth1_vlan: left promiscuous mode
[   88.010911][ T5632] veth0_vlan: left promiscuous mode
[   88.091069][ T6972] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   88.091610][   T10] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[   88.097902][   T10] usb 3-1: config 0 has no interface number 0
[   88.101518][   T10] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   88.110072][   T10] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   88.113575][   T10] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[   88.118285][   T10] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   88.127640][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[   88.137949][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[   88.145426][   T10] usb 3-1: Product: syz
[   88.147189][ T6975] netlink: 'syz.1.470': attribute type 3 has an invalid length.
[   88.151941][   T10] usb 3-1: Manufacturer: syz
[   88.155383][   T10] usb 3-1: SerialNumber: syz
[   88.161061][   T10] usb 3-1: config 0 descriptor??
[   88.164417][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[   88.180271][   T10] xpad 3-1:0.237: probe with driver xpad failed with error -5
[   88.247407][ T5632] team0 (unregistering): Port device team_slave_1 removed
[   88.254146][ T5632] team0 (unregistering): Port device team_slave_0 removed
[   88.392382][   T24] usb 3-1: USB disconnect, device number 10
[   88.401848][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.407033][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.411295][ T6929] bridge_slave_0: entered allmulticast mode
[   88.430631][ T6929] bridge_slave_0: entered promiscuous mode
[   88.434444][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.436675][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.438890][ T6929] bridge_slave_1: entered allmulticast mode
[   88.442018][ T6929] bridge_slave_1: entered promiscuous mode
[   88.475028][   T34] audit: type=1800 audit(1789989465.627:5): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name=08 dev="sda1" ino=1939 res=0 errno=0
[   88.524359][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.529175][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.557606][ T6929] team0: Port device team_slave_0 added
[   88.566888][ T6929] team0: Port device team_slave_1 added
[   88.603361][ T5342] 8021q: adding VLAN 0 to HW filter on device eth4
[   88.662726][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.666998][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.679355][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.688354][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.691738][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.701377][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.816668][ T6929] hsr_slave_0: entered promiscuous mode
[   88.822554][ T6929] hsr_slave_1: entered promiscuous mode
[   89.026471][ T7000] binfmt_misc: register: failed to install interpreter file ./file2
[   89.039944][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'.
[   89.082537][ T7002] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.118077][ T6929] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.127429][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.131757][ T6929] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.136179][ T4985] Bluetooth: hci0: command tx timeout
[   89.150828][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.156103][ T6929] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.183496][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.187432][ T6929] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.192438][ T6929] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.248819][ T7002] bond2: (slave veth3): Enslaving as an active interface with an up link
[   89.322229][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.348642][ T6929] 8021q: adding VLAN 0 to HW filter on device team0
[   89.361796][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.364103][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.371686][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.373920][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.581667][ T7032] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   89.594605][ T7032] FAULT_INJECTION: forcing a failure.
[   89.594605][ T7032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.600392][ T7032] CPU: 0 UID: 0 PID: 7032 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) 
[   89.600409][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.600417][ T7032] Call Trace:
[   89.600422][ T7032]  <TASK>
[   89.600428][ T7032]  dump_stack_lvl+0xe8/0x150
[   89.600451][ T7032]  should_fail_ex+0x40c/0x560
[   89.600477][ T7032]  _copy_to_user+0x31/0xb0
[   89.600495][ T7032]  bpf_test_finish+0x1cf/0x690
[   89.600520][ T7032]  ? __pfx_bpf_test_finish+0x10/0x10
[   89.600564][ T7032]  ? _copy_from_user+0x94/0xb0
[   89.600582][ T7032]  ? bpf_test_init+0x113/0x150
[   89.600600][ T7032]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[   89.600629][ T7032]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   89.600651][ T7032]  ? __fget_files+0x2a/0x420
[   89.600671][ T7032]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   89.600690][ T7032]  bpf_prog_test_run+0x2c5/0x340
[   89.600709][ T7032]  __sys_bpf+0xa22/0xd90
[   89.600729][ T7032]  ? __pfx___sys_bpf+0x10/0x10
[   89.600748][ T7032]  ? do_futex+0x3e7/0x4e0
[   89.600781][ T7032]  ? ksys_write+0x242/0x270
[   89.600801][ T7032]  ? rcu_is_watching+0x15/0xb0
[   89.600821][ T7032]  __x64_sys_bpf+0xba/0xd0
[   89.600835][ T7032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.600848][ T7032]  do_syscall_64+0x174/0x580
[   89.600862][ T7032]  ? trace_irq_disable+0x3b/0x140
[   89.600880][ T7032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.600901][ T7032] RIP: 0033:0x7f177859e159
[   89.600914][ T7032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.600925][ T7032] RSP: 002b:00007f17794c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   89.600940][ T7032] RAX: ffffffffffffffda RBX: 00007f1778825fa0 RCX: 00007f177859e159
[   89.600949][ T7032] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[   89.600959][ T7032] RBP: 00007f177863506b R08: 0000000000000000 R09: 0000000000000000
[   89.600967][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.600975][ T7032] R13: 00007f1778826038 R14: 00007f1778825fa0 R15: 00007fffff1d1b08
[   89.600996][ T7032]  </TASK>
[   89.736487][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.769408][ T7040] netlink: 165 bytes leftover after parsing attributes in process `syz.1.485'.
[   89.793669][ T6929] veth0_vlan: entered promiscuous mode
[   89.799777][ T6929] veth1_vlan: entered promiscuous mode
[   89.815648][ T6929] veth0_macvtap: entered promiscuous mode
[   89.826816][ T6929] veth1_macvtap: entered promiscuous mode
[   89.838590][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.845014][ T6929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.866454][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.869171][ T7043] input: syz0 as /devices/virtual/input/input11
[   89.871410][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.877415][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.880755][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.969557][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.975287][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.003873][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.012597][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.068274][ T7049] loop1: detected capacity change from 0 to 512
[   90.072124][ T7049] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   90.144107][ T7053] openvswitch: netlink: Missing key (keys=c0, expected=480)
[   90.692341][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115517400: rx timeout, send abort
[   90.848256][ T7074] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   91.192606][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115517c00: rx timeout, send abort
[   91.197652][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115517400: abort rx timeout. Force session deactivation
[   91.215352][ T4985] Bluetooth: hci0: command tx timeout
[   91.682777][ T7078] loop1: detected capacity change from 0 to 2048
[   91.694592][    C0] vcan0: j1939_tp_rxtimer: 0xffff888103f22800: rx timeout, send abort
[   91.698447][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888103f22800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[   91.704958][    C0] vcan0: j1939_tp_rxtimer: 0xffff888115517c00: abort rx timeout. Force session deactivation
[   91.717521][ T7079] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.768291][ T7078] syz.1.501: attempt to access beyond end of device
[   91.768291][ T7078] loop1: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048
[   91.788910][ T7078] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[   91.819390][ T7079] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   91.824164][ T7079] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   91.832965][ T7079] Remounting filesystem read-only
[   91.844436][ T5604] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   91.973119][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'.
[   92.013953][ T7091] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   92.022234][ T7091] bond3 (unregistering): Released all slaves
[   92.888460][ T7103] mmap: syz.1.510 (7103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   92.971570][ T7107] loop1: detected capacity change from 0 to 1024
[   92.979508][ T7107] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   92.984736][ T7107] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   92.991120][ T7107] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   92.998572][ T7107] EXT4-fs (loop1): orphan cleanup on readonly fs
[   93.002695][ T7107] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.512: Inode bitmap for bg 0 marked uninitialized
[   93.008592][ T7107] loop1: lost filesystem error report for type 5 error -117
[   93.016313][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.049743][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.296435][ T4985] Bluetooth: hci0: command tx timeout
[   93.584436][ T7125] loop2: detected capacity change from 0 to 128
[   93.674807][ T7119] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   93.712763][   T24] team_slave_0: entered promiscuous mode
[   93.716399][   T24] team_slave_1: entered promiscuous mode
[   93.993559][ T7139] FAULT_INJECTION: forcing a failure.
[   93.993559][ T7139] name failslab, interval 1, probability 0, space 0, times 0
[   93.998289][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.2.528 Not tainted syzkaller #0 PREEMPT(full) 
[   93.998306][ T7139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.998313][ T7139] Call Trace:
[   93.998318][ T7139]  <TASK>
[   93.998323][ T7139]  dump_stack_lvl+0xe8/0x150
[   93.998337][ T7139]  should_fail_ex+0x40c/0x560
[   93.998350][ T7139]  ? alloc_fdtable+0x169/0x2c0
[   93.998360][ T7139]  should_failslab+0xa8/0x100
[   93.998371][ T7139]  __kvmalloc_node_noprof+0x176/0x860
[   93.998383][ T7139]  ? __kvmalloc_node_noprof+0x35c/0x860
[   93.998392][ T7139]  ? alloc_fdtable+0x169/0x2c0
[   93.998402][ T7139]  alloc_fdtable+0x169/0x2c0
[   93.998430][ T7139]  dup_fd+0x7fe/0xaf0
[   93.998440][ T7139]  ? _raw_spin_unlock+0x28/0x50
[   93.998448][ T7139]  ? copy_fs_struct+0x1c3/0x270
[   93.998458][ T7139]  ksys_unshare+0x4ba/0xa00
[   93.998473][ T7139]  ? __pfx_ksys_unshare+0x10/0x10
[   93.998483][ T7139]  ? rcu_is_watching+0x15/0xb0
[   93.998497][ T7139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.998505][ T7139]  __x64_sys_unshare+0x38/0x50
[   93.998514][ T7139]  do_syscall_64+0x174/0x580
[   93.998522][ T7139]  ? trace_irq_disable+0x3b/0x140
[   93.998533][ T7139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.998539][ T7139] RIP: 0033:0x7fdf9359e159
[   93.998547][ T7139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.998553][ T7139] RSP: 002b:00007fdf917f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   93.998561][ T7139] RAX: ffffffffffffffda RBX: 00007fdf93825fa0 RCX: 00007fdf9359e159
[   93.998566][ T7139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[   93.998571][ T7139] RBP: 00007fdf9363506b R08: 0000000000000000 R09: 0000000000000000
[   93.998575][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.998579][ T7139] R13: 00007fdf93826038 R14: 00007fdf93825fa0 R15: 00007fffe81e73f8
[   93.998590][ T7139]  </TASK>
[   94.555455][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   94.615389][  T629] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   94.728014][   T10] usb 3-1: Using ep0 maxpacket: 8
[   94.756746][   T10] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[   94.766718][   T10] usb 3-1: config 2 has no interface number 0
[   94.770496][   T10] usb 3-1: config 2 interface 31 has no altsetting 0
[   94.775651][  T629] usb 2-1: Using ep0 maxpacket: 16
[   94.780245][   T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09
[   94.787942][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   94.795742][  T629] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.802087][   T10] usb 3-1: SerialNumber: syz
[   94.808678][  T629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   94.813429][  T629] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.828247][  T629] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[   94.833124][  T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.844320][  T629] usb 2-1: Product: syz
[   94.846348][  T629] usb 2-1: Manufacturer: syz
[   94.848303][  T629] usb 2-1: SerialNumber: syz
[   94.857995][  T629] usb 2-1: config 0 descriptor??
[   94.867530][  T629] mcba_usb 2-1:0.0: Can't find endpoints
[   95.080843][  T629] usb 2-1: USB disconnect, device number 12
[   95.365384][ T4985] Bluetooth: hci0: command tx timeout
[   95.438231][   T10] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[   95.445507][   T10] usb 3-1: USB disconnect, device number 11
[   95.821141][ T7184] loop1: detected capacity change from 0 to 128
[   95.907523][ T7186] loop1: detected capacity change from 0 to 1024
[   96.206409][ T7188] loop2: detected capacity change from 0 to 32768
[   96.255327][ T7188] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.280502][ T7188] XFS (loop2): Ending clean mount
[   96.290884][   T34] audit: type=1800 audit(1789989473.457:6): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.548" name="file1" dev="loop2" ino=6150 res=0 errno=0
[   96.301428][ T7188] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[   96.313426][ T7202] FAULT_INJECTION: forcing a failure.
[   96.313426][ T7202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.317585][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(full) 
[   96.317597][ T7202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.317601][ T7202] Call Trace:
[   96.317605][ T7202]  <TASK>
[   96.317608][ T7202]  dump_stack_lvl+0xe8/0x150
[   96.317623][ T7202]  should_fail_ex+0x40c/0x560
[   96.317638][ T7202]  _copy_from_user+0x2d/0xb0
[   96.317648][ T7202]  __se_sys_prlimit64+0x12f/0xbc0
[   96.317660][ T7202]  ? __se_sys_futex+0x3a8/0x450
[   96.317672][ T7202]  ? __pfx___se_sys_prlimit64+0x10/0x10
[   96.317683][ T7202]  ? ksys_write+0x242/0x270
[   96.317694][ T7202]  ? rcu_is_watching+0x15/0xb0
[   96.317708][ T7202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.317716][ T7202]  do_syscall_64+0x174/0x580
[   96.317724][ T7202]  ? trace_irq_disable+0x3b/0x140
[   96.317735][ T7202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.317742][ T7202] RIP: 0033:0x7f1efd39e159
[   96.317749][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.317756][ T7202] RSP: 002b:00007f1efe18b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e
[   96.317764][ T7202] RAX: ffffffffffffffda RBX: 00007f1efd625fa0 RCX: 00007f1efd39e159
[   96.317769][ T7202] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   96.317774][ T7202] RBP: 00007f1efd43506b R08: 0000000000000000 R09: 0000000000000000
[   96.317778][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.317782][ T7202] R13: 00007f1efd626038 R14: 00007f1efd625fa0 R15: 00007ffdadc01338
[   96.317792][ T7202]  </TASK>
[   96.435698][   T33] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   96.438827][   T34] audit: type=1326 audit(1789989473.597:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7204 comm="syz.3.552" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1efd39e159 code=0x0
[   96.598237][   T33] usb 2-1: not running at top speed; connect to a high speed hub
[   96.602758][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.606828][   T33] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[   96.610407][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.625821][   T33] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[   96.643043][   T33] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   96.838484][   T33] usb 2-1: USB disconnect, device number 13
[   96.840311][ T7188] syz.2.548 (7188) used greatest stack depth: 20576 bytes left
[   96.843823][ T5599] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.851315][   T33] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   96.854849][   T33] cyberjack 2-1:1.0: device disconnected
[   97.585227][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.749722][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   97.753397][   T24] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[   97.757496][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.881899][ T7232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.562'.
[   97.954451][ T7234] syzkaller0: entered promiscuous mode
[   97.956852][ T7234] syzkaller0: entered allmulticast mode
[   97.986530][   T24] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device
[   98.002913][ T7236] netlink: 108 bytes leftover after parsing attributes in process `syz.2.564'.
[   98.007479][   T24] wwan wwan0: port wwan0qmi0 attached
[   98.196872][   T24] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, ba:ae:0a:3a:70:28
[   98.407548][   T24] usb 4-1: USB disconnect, device number 2
[   98.417295][   T24] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device
[   98.516320][   T24] wwan wwan0: port wwan0qmi0 disconnected
[   98.880171][ T7277] sock: sock_set_timeout: `syz.1.573' (pid 7277) tries to set negative timeout
[   98.984709][ T7280] FAULT_INJECTION: forcing a failure.
[   98.984709][ T7280] name failslab, interval 1, probability 0, space 0, times 0
[   98.990004][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(full) 
[   98.990022][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.990029][ T7280] Call Trace:
[   98.990035][ T7280]  <TASK>
[   98.990041][ T7280]  dump_stack_lvl+0xe8/0x150
[   98.990064][ T7280]  should_fail_ex+0x40c/0x560
[   98.990089][ T7280]  should_failslab+0xa8/0x100
[   98.990107][ T7280]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   98.990124][ T7280]  ? alloc_empty_file+0x5b/0x1d0
[   98.990165][ T7280]  ? alloc_empty_file+0x5b/0x1d0
[   98.990186][ T7280]  alloc_empty_file+0x5b/0x1d0
[   98.990202][ T7280]  alloc_file_pseudo+0x115/0x1e0
[   98.990220][ T7280]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   98.990237][ T7280]  ? _raw_spin_unlock+0x28/0x50
[   98.990249][ T7280]  ? alloc_fd+0x651/0x6c0
[   98.990267][ T7280]  sock_alloc_file+0xb8/0x2e0
[   98.990280][ T7280]  ? __sys_socket+0x12b/0x1b0
[   98.990295][ T7280]  __sys_socket+0x13f/0x1b0
[   98.990310][ T7280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.990324][ T7280]  __x64_sys_socket+0x7a/0x90
[   98.990339][ T7280]  do_syscall_64+0x174/0x580
[   98.990353][ T7280]  ? trace_irq_disable+0x3b/0x140
[   98.990372][ T7280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.990385][ T7280] RIP: 0033:0x7f1efd39e159
[   98.990397][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.990407][ T7280] RSP: 002b:00007f1efe18b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   98.990421][ T7280] RAX: ffffffffffffffda RBX: 00007f1efd625fa0 RCX: 00007f1efd39e159
[   98.990430][ T7280] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d
[   98.990437][ T7280] RBP: 00007f1efd43506b R08: 0000000000000000 R09: 0000000000000000
[   98.990445][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.990452][ T7280] R13: 00007f1efd626038 R14: 00007f1efd625fa0 R15: 00007ffdadc01338
[   98.990492][ T7280]  </TASK>
[   99.199651][ T7286] loop2: detected capacity change from 0 to 128
[   99.209439][ T7286] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   99.213386][ T7286] hpfs: filesystem error: improperly stopped
[   99.215658][ T7286] hpfs: You really don't want any checks? You are crazy...
[   99.218511][ T7286] hpfs: hpfs_map_sector(): read error
[   99.220559][ T7286] hpfs: code page support is disabled
[   99.223534][ T7286] hpfs: hpfs_map_4sectors(): unaligned read
[   99.226219][ T7286] hpfs: hpfs_map_4sectors(): unaligned read
[   99.228348][ T7286] hpfs: filesystem error: unable to find root dir
[   99.845986][ T5706] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  100.028600][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.050354][ T5706] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  100.054892][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  100.061490][ T5706] usb 2-1: Product: syz
[  100.063234][ T5706] usb 2-1: Manufacturer: syz
[  100.119925][ T5706] rndis_host 2-1:1.0: slave class 0
[  100.274482][ T7315] loop3: detected capacity change from 0 to 1024
[  100.284854][ T7315] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  100.331282][ T5706] usb 2-1: USB disconnect, device number 14
[  100.371587][ T7315] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.584: lblock 2 mapped to illegal pblock 2 (length 1)
[  100.377395][ T7315] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  100.378848][ T7315] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  100.386463][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  100.386478][    C1] EXT4-fs (loop3): initial error at time 1789989477: ext4_map_blocks:791: inode 3: block 2
[  100.386504][    C1] EXT4-fs (loop3): last error at time 1789989477: ext4_map_blocks:791: inode 3: block 2
[  100.397474][ T7315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.584: Invalid inode table block 1 in block_group 0
[  100.403852][ T7315] loop3: lost filesystem error report for type 5 error -117
[  100.407995][ T7315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  100.414661][ T7315] loop3: lost filesystem error report for type 5 error -117
[  100.415270][ T7315] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.584: mark_inode_dirty error
[  100.422756][ T7315] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  100.423366][ T7315] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  100.431946][ T7315] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.584: Failed to acquire dquot type 0
[  100.436855][ T7315] loop3: lost filesystem error report for type 5 error -117
[  100.440943][ T7315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  100.449746][ T7315] loop3: lost filesystem error report for type 5 error -117
[  100.455266][ T7315] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.584: mark_inode_dirty error
[  100.461832][ T7315] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  100.462195][ T7315] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  100.473860][ T7315] EXT4-fs (loop3): 1 orphan inode deleted
[  100.479347][ T7315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.505942][   T41] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u10:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  100.538689][   T41] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  100.538805][ T7315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.584: Invalid inode table block 1 in block_group 0
[  100.548471][   T41] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u10:2: Failed to release dquot type 0
[  100.566913][ T7315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  100.703703][ T6929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.710225][ T6929] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  100.717366][ T6929] loop3: lost filesystem error report for type 5 error -117
[  100.720294][ T6929] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  100.733267][ T6929] loop3: lost filesystem error report for type 5 error -117
[  100.741602][ T6929] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  100.750219][ T6929] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  101.095378][ T5653] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.267734][ T5653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  101.271307][ T5653] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  101.274920][ T5653] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  101.279613][ T5653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.332902][ T5653] usb 4-1: probing VID:PID(0424:012C)   
[  101.341191][ T5653] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[  101.343594][ T5653] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[  101.347731][ T5653] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[  101.350431][ T5653] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[  101.353167][ T5653] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  101.438472][ T7341] loop1: detected capacity change from 0 to 131072
[  101.442210][ T7341] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  101.444744][ T7341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  101.447823][ T7341] F2FS-fs (loop1): invalid crc value
[  101.477646][ T7341] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.484556][ T7341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  101.486871][ T7341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  101.514906][ T7341] F2FS-fs (loop1): inaccessible inode: 1, run fsck to repair
[  101.746474][ T5653] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  101.808620][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'.
[  101.947997][ T5653] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted
[  102.033015][ T7365] netlink: 252 bytes leftover after parsing attributes in process `syz.2.598'.
[  102.066377][ T7367] loop1: detected capacity change from 0 to 64
[  102.073495][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.600'.
[  102.076425][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'.
[  102.083293][ T7369] IPv6: sit1: Disabled Multicast RS
[  102.129855][ T7371] loop1: detected capacity change from 0 to 512
[  102.149745][ T7371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  102.176293][ T7371] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.602: bad orphan inode 131083
[  102.179721][ T7371] loop1: lost filesystem error report for type 5 error -117
[  102.183050][ T7371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.445296][ T5678] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  102.448452][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  102.605230][   T24] usb 2-1: Using ep0 maxpacket: 32
[  102.606941][ T5678] usb 3-1: Using ep0 maxpacket: 16
[  102.611905][ T5678] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  102.615554][   T24] usb 2-1: config index 0 descriptor too short (expected 27632, got 27)
[  102.618640][ T5678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  102.622532][   T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  102.625335][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  102.628245][   T24] usb 2-1: config 1 has no interface number 0
[  102.630370][   T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.633737][   T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  102.637871][   T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  102.640781][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.643777][ T5678] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  102.652318][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.656182][ T5678] usb 3-1: Product: syz
[  102.657452][ T5678] usb 3-1: Manufacturer: syz
[  102.659169][   T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  102.661313][ T5678] usb 3-1: SerialNumber: syz
[  102.664491][ T5678] usb 3-1: config 0 descriptor??
[  102.672067][ T5678] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  102.675486][ T5678] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  102.786496][ T5653] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  102.809973][   T31] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  102.813756][ T5653] usb 4-1: USB disconnect, device number 3
[  102.824794][   T31] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  102.853870][   T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  102.908058][ T5653] USB vub300 remote SDIO host controller[0] now disconnected
[  102.975460][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487
[  102.982200][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1
[  102.986903][    C1] preempt_count: 101, expected: 0
[  102.988789][    C1] RCU nest depth: 0, expected: 0
[  102.990716][    C1] 1 lock held by swapper/1/0:
[  102.992552][    C1]  #0: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[  102.996745][    C1] Preemption disabled at:
[  102.996756][    C1] [<0000000000000000>] 0x0
[  103.000421][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  103.000437][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.000445][    C1] Call Trace:
[  103.000451][    C1]  <IRQ>
[  103.000457][    C1]  dump_stack_lvl+0xe8/0x150
[  103.000479][    C1]  __might_resched+0x378/0x4d0
[  103.000499][    C1]  __cancel_work_sync+0x6d/0x110
[  103.000516][    C1]  mmc_free_host+0x19/0x30
[  103.000530][    C1]  call_timer_fn+0x192/0x5e0
[  103.000548][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.000566][    C1]  ? call_timer_fn+0xd4/0x5e0
[  103.000582][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  103.000606][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.000618][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.000637][    C1]  __run_timer_base+0x652/0x8b0
[  103.000653][    C1]  ? ktime_get+0x45/0x220
[  103.000676][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  103.000694][    C1]  ? ktime_get+0x1f5/0x220
[  103.000709][    C1]  ? lapic_next_event+0x11/0x20
[  103.000731][    C1]  run_timer_softirq+0xb7/0x170
[  103.000749][    C1]  handle_softirqs+0x225/0x840
[  103.000765][    C1]  ? __irq_exit_rcu+0xca/0x220
[  103.000783][    C1]  __irq_exit_rcu+0xca/0x220
[  103.000797][    C1]  irq_exit_rcu+0x9/0x30
[  103.000808][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.000821][    C1]  </IRQ>
[  103.000825][    C1]  <TASK>
[  103.000830][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.000849][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  103.000864][    C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 ee 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  103.000874][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000206
[  103.000886][    C1] RAX: 00000000000a8ff9 RBX: ffffffff819b3450 RCX: 0000000080000001
[  103.000895][    C1] RDX: 0000000000000001 RSI: ffffffff8e22723f RDI: ffffffff8c4bb580
[  103.000903][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  103.000912][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  103.000920][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  103.000931][    C1]  ? do_idle+0x2e0/0x540
[  103.000952][    C1]  default_idle+0x9/0x20
[  103.000966][    C1]  default_idle_call+0x72/0xb0
[  103.000980][    C1]  do_idle+0x2e0/0x540
[  103.000997][    C1]  ? __pfx_do_idle+0x10/0x10
[  103.001018][    C1]  cpu_startup_entry+0x43/0x60
[  103.001033][    C1]  start_secondary+0x101/0x110
[  103.001048][    C1]  common_startup_64+0x13e/0x157
[  103.001071][    C1]  </TASK>
[  103.001227][    C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90000190000, but annotated.
[  103.003210][    C1] 
[  103.003216][    C1] ======================================================
[  103.003221][    C1] WARNING: possible circular locking dependency detected
[  103.003228][    C1] syzkaller #0 Tainted: G        W          
[  103.003235][    C1] ------------------------------------------------------
[  103.003240][    C1] swapper/1/0 is trying to acquire lock:
[  103.003246][    C1] ffffffff8eb4bf40 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xaf0
[  103.003277][    C1] 
[  103.003277][    C1] but task is already holding lock:
[  103.003281][    C1] ffffffff9aa44640 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0
[  103.003308][    C1] 
[  103.003308][    C1] which lock already depends on the new lock.
[  103.003308][    C1] 
[  103.003313][    C1] 
[  103.003313][    C1] the existing dependency chain (in reverse order) is:
[  103.003317][    C1] 
[  103.003317][    C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}:
[  103.003333][    C1]        _raw_spin_lock_irqsave+0x40/0x60
[  103.003344][    C1]        debug_object_assert_init+0xb0/0x380
[  103.003354][    C1]        hrtimer_start_range_ns+0x3d/0x3e0
[  103.003371][    C1]        rpm_suspend+0x1333/0x17b0
[  103.003386][    C1]        __pm_runtime_idle+0x12f/0x1a0
[  103.003401][    C1]        __device_attach+0x355/0x450
[  103.003418][    C1]        device_initial_probe+0xa1/0xd0
[  103.003433][    C1]        bus_probe_device+0x12a/0x220
[  103.003446][    C1]        device_add+0x7d7/0xb80
[  103.003461][    C1]        serdev_controller_add+0x85/0x6d0
[  103.003474][    C1]        serdev_tty_port_register+0x159/0x260
[  103.003487][    C1]        tty_port_register_device_attr_serdev+0x169/0x1f0
[  103.003505][    C1]        serial_core_register_port+0xffa/0x2840
[  103.003519][    C1]        serial8250_register_8250_port+0x16b4/0x2090
[  103.003533][    C1]        serial_pnp_probe+0x56a/0x7f0
[  103.003545][    C1]        pnp_device_probe+0x30b/0x4c0
[  103.003559][    C1]        really_probe+0x254/0xae0
[  103.003569][    C1]        __driver_probe_device+0x1e8/0x360
[  103.003585][    C1]        driver_probe_device+0x4f/0x240
[  103.003595][    C1]        __driver_attach+0x339/0x600
[  103.003604][    C1]        bus_for_each_dev+0x23b/0x2c0
[  103.003616][    C1]        bus_add_driver+0x345/0x670
[  103.003628][    C1]        driver_register+0x23a/0x320
[  103.003639][    C1]        serial8250_init+0x8f/0x160
[  103.003656][    C1]        do_one_initcall+0x250/0x870
[  103.003670][    C1]        do_initcall_level+0x10a/0x1a0
[  103.003681][    C1]        do_initcalls+0x59/0xa0
[  103.003690][    C1]        kernel_init_freeable+0x29d/0x3e0
[  103.003700][    C1]        kernel_init+0x1d/0x1d0
[  103.003714][    C1]        ret_from_fork+0x514/0xb70
[  103.003728][    C1]        ret_from_fork_asm+0x1a/0x30
[  103.003743][    C1] 
[  103.003743][    C1] -> #2 (&dev->power.lock){-.-.}-{3:3}:
[  103.003758][    C1]        _raw_spin_lock_irqsave+0x40/0x60
[  103.003768][    C1]        __pm_runtime_resume+0x10f/0x180
[  103.003783][    C1]        __uart_start+0x171/0x460
[  103.003796][    C1]        uart_write+0x251/0x9f0
[  103.003809][    C1]        n_tty_write+0xd49/0x11e0
[  103.003819][    C1]        file_tty_write+0x509/0x9c0
[  103.003833][    C1]        vfs_write+0x612/0xba0
[  103.003854][    C1]        ksys_write+0x150/0x270
[  103.003869][    C1]        do_syscall_64+0x174/0x580
[  103.003882][    C1]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.003892][    C1] 
[  103.003892][    C1] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  103.003908][    C1]        _raw_spin_lock_irqsave+0x40/0x60
[  103.003917][    C1]        serial8250_console_write+0x153/0x1ba0
[  103.003933][    C1]        console_flush_all+0x6ea/0xaf0
[  103.003943][    C1]        console_unlock+0xd1/0x1c0
[  103.003959][    C1]        vprintk_emit+0x485/0x560
[  103.003974][    C1]        _printk+0xdd/0x130
[  103.003984][    C1]        register_console+0xbc3/0xfc0
[  103.003995][    C1]        univ8250_console_init+0x3a/0x70
[  103.004010][    C1]        console_init+0x10b/0x4a0
[  103.004024][    C1]        start_kernel+0x238/0x3e0
[  103.004040][    C1]        x86_64_start_reservations+0x24/0x30
[  103.004053][    C1]        x86_64_start_kernel+0x137/0x1b0
[  103.004066][    C1]        common_startup_64+0x13e/0x157
[  103.004077][    C1] 
[  103.004077][    C1] -> #0 (console_owner){-.-.}-{0:0}:
[  103.004091][    C1]        __lock_acquire+0x1520/0x2cf0
[  103.004105][    C1]        lock_acquire+0x106/0x350
[  103.004145][    C1]        console_flush_all+0x693/0xaf0
[  103.004156][    C1]        console_unlock+0xd1/0x1c0
[  103.004172][    C1]        vprintk_emit+0x485/0x560
[  103.004187][    C1]        _printk+0xdd/0x130
[  103.004196][    C1]        __debug_object_init+0x2c3/0x3c0
[  103.004207][    C1]        __synchronize_srcu+0x1d5/0x2f0
[  103.004221][    C1]        wakeup_source_unregister+0x129/0x3f0
[  103.004236][    C1]        mmc_host_classdev_release+0x47/0x100
[  103.004248][    C1]        device_release+0xc4/0x1f0
[  103.004259][    C1]        kobject_put+0x222/0x550
[  103.004273][    C1]        call_timer_fn+0x192/0x5e0
[  103.004288][    C1]        __run_timer_base+0x652/0x8b0
[  103.004301][    C1]        run_timer_softirq+0xb7/0x170
[  103.004314][    C1]        handle_softirqs+0x225/0x840
[  103.004326][    C1]        __irq_exit_rcu+0xca/0x220
[  103.004338][    C1]        irq_exit_rcu+0x9/0x30
[  103.004347][    C1]        sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.004358][    C1]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.004369][    C1]        pv_native_safe_halt+0xf/0x20
[  103.004380][    C1]        default_idle+0x9/0x20
[  103.004392][    C1]        default_idle_call+0x72/0xb0
[  103.004404][    C1]        do_idle+0x2e0/0x540
[  103.004416][    C1]        cpu_startup_entry+0x43/0x60
[  103.004429][    C1]        start_secondary+0x101/0x110
[  103.004442][    C1]        common_startup_64+0x13e/0x157
[  103.004453][    C1] 
[  103.004453][    C1] other info that might help us debug this:
[  103.004453][    C1] 
[  103.004457][    C1] Chain exists of:
[  103.004457][    C1]   console_owner --> &dev->power.lock --> &obj_hash[i].lock
[  103.004457][    C1] 
[  103.004476][    C1]  Possible unsafe locking scenario:
[  103.004476][    C1] 
[  103.004480][    C1]        CPU0                    CPU1
[  103.004484][    C1]        ----                    ----
[  103.004488][    C1]   lock(&obj_hash[i].lock);
[  103.004496][    C1]                                lock(&dev->power.lock);
[  103.004505][    C1]                                lock(&obj_hash[i].lock);
[  103.004514][    C1]   lock(console_owner);
[  103.004521][    C1] 
[  103.004521][    C1]  *** DEADLOCK ***
[  103.004521][    C1] 
[  103.004525][    C1] 4 locks held by swapper/1/0:
[  103.004531][    C1]  #0: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[  103.004563][    C1]  #1: ffffffff9aa44640 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0
[  103.004591][    C1]  #2: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130
[  103.004616][    C1]  #3: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0
[  103.004643][    C1] 
[  103.004643][    C1] stack backtrace:
[  103.004651][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  103.004666][    C1] Tainted: [W]=WARN
[  103.004670][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.004678][    C1] Call Trace:
[  103.004683][    C1]  <IRQ>
[  103.004688][    C1]  dump_stack_lvl+0xe8/0x150
[  103.004703][    C1]  print_circular_bug+0x2e1/0x300
[  103.004721][    C1]  check_noncircular+0x12e/0x150
[  103.004739][    C1]  __lock_acquire+0x1520/0x2cf0
[  103.004761][    C1]  ? console_flush_all+0x123/0xaf0
[  103.004772][    C1]  lock_acquire+0x106/0x350
[  103.004786][    C1]  ? console_flush_all+0x123/0xaf0
[  103.004799][    C1]  ? do_raw_spin_unlock+0x4d/0x210
[  103.004812][    C1]  ? console_flush_all+0x123/0xaf0
[  103.004823][    C1]  console_flush_all+0x693/0xaf0
[  103.004834][    C1]  ? console_flush_all+0x123/0xaf0
[  103.004853][    C1]  ? console_flush_all+0x123/0xaf0
[  103.004866][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  103.004879][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  103.004893][    C1]  console_unlock+0xd1/0x1c0
[  103.004910][    C1]  ? __pfx_console_unlock+0x10/0x10
[  103.004927][    C1]  ? _raw_spin_unlock+0x30/0x50
[  103.004937][    C1]  ? _printk+0xdd/0x130
[  103.004949][    C1]  vprintk_emit+0x485/0x560
[  103.004966][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  103.004985][    C1]  _printk+0xdd/0x130
[  103.004997][    C1]  ? __pfx__printk+0x10/0x10
[  103.005011][    C1]  __debug_object_init+0x2c3/0x3c0
[  103.005025][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  103.005043][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  103.005059][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  103.005094][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.005110][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  103.005150][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  103.005164][    C1]  ? synchronize_srcu+0x20a/0x260
[  103.005179][    C1]  wakeup_source_unregister+0x129/0x3f0
[  103.005195][    C1]  mmc_host_classdev_release+0x47/0x100
[  103.005207][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  103.005218][    C1]  device_release+0xc4/0x1f0
[  103.005230][    C1]  kobject_put+0x222/0x550
[  103.005245][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  103.005259][    C1]  call_timer_fn+0x192/0x5e0
[  103.005272][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.005287][    C1]  ? call_timer_fn+0xd4/0x5e0
[  103.005301][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  103.005317][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.005327][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.005343][    C1]  __run_timer_base+0x652/0x8b0
[  103.005357][    C1]  ? ktime_get+0x45/0x220
[  103.005372][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  103.005387][    C1]  ? ktime_get+0x1f5/0x220
[  103.005400][    C1]  ? lapic_next_event+0x11/0x20
[  103.005417][    C1]  run_timer_softirq+0xb7/0x170
[  103.005432][    C1]  handle_softirqs+0x225/0x840
[  103.005445][    C1]  ? __irq_exit_rcu+0xca/0x220
[  103.005459][    C1]  __irq_exit_rcu+0xca/0x220
[  103.005471][    C1]  irq_exit_rcu+0x9/0x30
[  103.005483][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.005495][    C1]  </IRQ>
[  103.005499][    C1]  <TASK>
[  103.005503][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.005515][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  103.005529][    C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 ee 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  103.005539][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000206
[  103.005549][    C1] RAX: 00000000000a8ff9 RBX: ffffffff819b3450 RCX: 0000000080000001
[  103.005557][    C1] RDX: 0000000000000001 RSI: ffffffff8e22723f RDI: ffffffff8c4bb580
[  103.005565][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  103.005574][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  103.005582][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  103.005592][    C1]  ? do_idle+0x2e0/0x540
[  103.005608][    C1]  default_idle+0x9/0x20
[  103.005621][    C1]  default_idle_call+0x72/0xb0
[  103.005635][    C1]  do_idle+0x2e0/0x540
[  103.005649][    C1]  ? __pfx_do_idle+0x10/0x10
[  103.005665][    C1]  cpu_startup_entry+0x43/0x60
[  103.005679][    C1]  start_secondary+0x101/0x110
[  103.005693][    C1]  common_startup_64+0x13e/0x157
[  103.005709][    C1]  </TASK>
[  103.475767][    C1] ------------[ cut here ]------------
[  103.477975][    C1] 1
[  103.477984][    C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: swapper/1/0
[  103.482689][    C1] Modules linked in:
[  103.484278][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  103.488306][    C1] Tainted: [W]=WARN
[  103.489777][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.493664][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  103.495945][    C1] Code: f4 06 cc 41 ff c7 44 89 3d 69 02 ce 15 48 c7 c1 80 be 4b 8c 48 c7 c7 e0 be 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 7d 80 49 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 c1 62 58 0a 3b 05 bf
[  103.503248][    C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046
[  103.505595][    C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 85c341df1e387a00
[  103.508729][    C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[  103.511802][    C1] RBP: ffff8881604e8020 R08: ffff88823c624713 R09: 1ffff110478c48e2
[  103.514857][    C1] R10: dffffc0000000000 R11: ffffed10478c48e3 R12: ffff88816c7eab08
[  103.518006][    C1] R13: ffff888110f960e0 R14: dffffc0000000000 R15: 0000000000000001
[  103.521100][    C1] FS:  0000000000000000(0000) GS:ffff8882a8f59000(0000) knlGS:0000000000000000
[  103.524754][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.527429][    C1] CR2: 00007f1efe18aff8 CR3: 0000000118026000 CR4: 00000000000006f0
[  103.530565][    C1] Call Trace:
[  103.531945][    C1]  <IRQ>
[  103.533098][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  103.535272][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  103.537255][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  103.539401][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.541414][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  103.543450][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  103.545685][    C1]  ? synchronize_srcu+0x20a/0x260
[  103.547661][    C1]  wakeup_source_unregister+0x129/0x3f0
[  103.549766][    C1]  mmc_host_classdev_release+0x47/0x100
[  103.551983][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  103.554490][    C1]  device_release+0xc4/0x1f0
[  103.556396][    C1]  kobject_put+0x222/0x550
[  103.558249][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  103.560172][    C1]  call_timer_fn+0x192/0x5e0
[  103.562044][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.564759][    C1]  ? call_timer_fn+0xd4/0x5e0
[  103.566694][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  103.568734][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.570792][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.573488][    C1]  __run_timer_base+0x652/0x8b0
[  103.575488][    C1]  ? ktime_get+0x45/0x220
[  103.577223][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  103.579406][    C1]  ? ktime_get+0x1f5/0x220
[  103.581196][    C1]  ? lapic_next_event+0x11/0x20
[  103.583166][    C1]  run_timer_softirq+0xb7/0x170
[  103.585137][    C1]  handle_softirqs+0x225/0x840
[  103.587041][    C1]  ? __irq_exit_rcu+0xca/0x220
[  103.588978][    C1]  __irq_exit_rcu+0xca/0x220
[  103.590871][    C1]  irq_exit_rcu+0x9/0x30
[  103.592625][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.594916][    C1]  </IRQ>
[  103.596162][    C1]  <TASK>
[  103.597388][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.599833][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  103.602145][    C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 ee 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  103.609876][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000206
[  103.612364][    C1] RAX: 00000000000a8ff9 RBX: ffffffff819b3450 RCX: 0000000080000001
[  103.615595][    C1] RDX: 0000000000000001 RSI: ffffffff8e22723f RDI: ffffffff8c4bb580
[  103.618752][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  103.621887][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  103.624991][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  103.628214][    C1]  ? do_idle+0x2e0/0x540
[  103.629981][    C1]  default_idle+0x9/0x20
[  103.631745][    C1]  default_idle_call+0x72/0xb0
[  103.633698][    C1]  do_idle+0x2e0/0x540
[  103.635380][    C1]  ? __pfx_do_idle+0x10/0x10
[  103.637211][    C1]  cpu_startup_entry+0x43/0x60
[  103.639185][    C1]  start_secondary+0x101/0x110
[  103.641142][    C1]  common_startup_64+0x13e/0x157
[  103.643193][    C1]  </TASK>
[  103.644394][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  103.647309][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  103.651368][    C1] Tainted: [W]=WARN
[  103.652921][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.656732][    C1] Call Trace:
[  103.658011][    C1]  <IRQ>
[  103.659211][    C1]  vpanic+0x56c/0xa60
[  103.660734][    C1]  ? __pfx__printk+0x10/0x10
[  103.662523][    C1]  ? __pfx_vpanic+0x10/0x10
[  103.664242][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  103.666333][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  103.668447][    C1]  panic+0xc5/0xd0
[  103.670022][    C1]  ? __pfx_panic+0x10/0x10
[  103.671882][    C1]  ? common_startup_64+0x13e/0x157
[  103.673984][    C1]  __warn+0x315/0x4c0
[  103.675627][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  103.677822][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  103.680008][    C1]  __report_bug+0x276/0x570
[  103.681888][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  103.684083][    C1]  ? __pfx___report_bug+0x10/0x10
[  103.686188][    C1]  ? __wake_up_klogd+0xe6/0x120
[  103.688218][    C1]  ? vprintk_emit+0x4eb/0x560
[  103.690168][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  103.692249][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  103.694435][    C1]  report_bug+0x16a/0x220
[  103.696223][    C1]  ? __debug_object_init+0x2c4/0x3c0
[  103.698407][    C1]  ? __debug_object_init+0x2c6/0x3c0
[  103.700570][    C1]  handle_bug+0x9c/0x200
[  103.702319][    C1]  exc_invalid_op+0x1a/0x50
[  103.704196][    C1]  asm_exc_invalid_op+0x1a/0x20
[  103.706212][    C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0
[  103.708633][    C1] Code: f4 06 cc 41 ff c7 44 89 3d 69 02 ce 15 48 c7 c1 80 be 4b 8c 48 c7 c7 e0 be 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 7d 80 49 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 c1 62 58 0a 3b 05 bf
[  103.716197][    C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046
[  103.718667][    C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 85c341df1e387a00
[  103.721838][    C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000
[  103.725066][    C1] RBP: ffff8881604e8020 R08: ffff88823c624713 R09: 1ffff110478c48e2
[  103.728251][    C1] R10: dffffc0000000000 R11: ffffed10478c48e3 R12: ffff88816c7eab08
[  103.731395][    C1] R13: ffff888110f960e0 R14: dffffc0000000000 R15: 0000000000000001
[  103.734589][    C1]  ? __debug_object_init+0x2c3/0x3c0
[  103.736788][    C1]  ? __init_swait_queue_head+0xa8/0x150
[  103.739062][    C1]  __synchronize_srcu+0x1d5/0x2f0
[  103.741171][    C1]  ? __pfx___synchronize_srcu+0x10/0x10
[  103.743401][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.745463][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  103.747600][    C1]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  103.749843][    C1]  ? synchronize_srcu+0x20a/0x260
[  103.751908][    C1]  wakeup_source_unregister+0x129/0x3f0
[  103.754167][    C1]  mmc_host_classdev_release+0x47/0x100
[  103.756325][    C1]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  103.758672][    C1]  device_release+0xc4/0x1f0
[  103.760491][    C1]  kobject_put+0x222/0x550
[  103.762296][    C1]  ? mmc_pwrseq_free+0x86/0xa0
[  103.764229][    C1]  call_timer_fn+0x192/0x5e0
[  103.766008][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.768683][    C1]  ? call_timer_fn+0xd4/0x5e0
[  103.770575][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  103.772555][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.774630][    C1]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  103.777372][    C1]  __run_timer_base+0x652/0x8b0
[  103.779382][    C1]  ? ktime_get+0x45/0x220
[  103.781059][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  103.783158][    C1]  ? ktime_get+0x1f5/0x220
[  103.784920][    C1]  ? lapic_next_event+0x11/0x20
[  103.786923][    C1]  run_timer_softirq+0xb7/0x170
[  103.789842][    C1]  handle_softirqs+0x225/0x840
[  103.791811][    C1]  ? __irq_exit_rcu+0xca/0x220
[  103.793737][    C1]  __irq_exit_rcu+0xca/0x220
[  103.795634][    C1]  irq_exit_rcu+0x9/0x30
[  103.797350][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  103.799518][    C1]  </IRQ>
[  103.800726][    C1]  <TASK>
[  103.801959][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  103.804403][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  103.806714][    C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 ee 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  103.814499][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000206
[  103.816918][    C1] RAX: 00000000000a8ff9 RBX: ffffffff819b3450 RCX: 0000000080000001
[  103.819981][    C1] RDX: 0000000000000001 RSI: ffffffff8e22723f RDI: ffffffff8c4bb580
[  103.823098][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  103.826286][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  103.829470][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  103.832659][    C1]  ? do_idle+0x2e0/0x540
[  103.834420][    C1]  default_idle+0x9/0x20
[  103.836159][    C1]  default_idle_call+0x72/0xb0
[  103.838137][    C1]  do_idle+0x2e0/0x540
[  103.839772][    C1]  ? __pfx_do_idle+0x10/0x10
[  103.841660][    C1]  cpu_startup_entry+0x43/0x60
[  103.843611][    C1]  start_secondary+0x101/0x110
[  103.845550][    C1]  common_startup_64+0x13e/0x157
[  103.847554][    C1]  </TASK>
[  103.849533][    C1] Kernel Offset: disabled
[  103.851310][    C1] Rebooting in 86400 seconds..
