last executing test programs:

10.252843438s ago: executing program 3 (id=80):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b)
write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)

9.836600589s ago: executing program 3 (id=84):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x19)

9.622469867s ago: executing program 1 (id=85):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4 +4.1 +4.2\n', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='10\n', 0x3)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f0000000500)='tcp 2049\n', 0x9)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='1\n', 0x2)
close(r3)

9.565430415s ago: executing program 3 (id=87):
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

8.48047293s ago: executing program 3 (id=91):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/tpm_tis\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0)

7.693247151s ago: executing program 3 (id=93):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4.2\n', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n', 0x2)
close(r2)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000a00)="80000070112233440000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004700"/116, 0x74, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000b00)=""/256, 0x100, 0x40, 0x0, 0x0)

7.208767638s ago: executing program 5 (id=96):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)

6.791990617s ago: executing program 1 (id=98):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./sys/bus/platform/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/4096, 0x1000)

6.734259505s ago: executing program 2 (id=99):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipe\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./rpc_pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)

6.430213946s ago: executing program 5 (id=100):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipe\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200), 0x1000)

6.424290659s ago: executing program 2 (id=112):
r0 = socket$inet(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)

6.342032397s ago: executing program 5 (id=101):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040))

6.209840437s ago: executing program 2 (id=103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/devices\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net\x00', 0x0, 0x0)
write(r0, &(0x7f0000000200)='test\x00', 0x5)

6.161444917s ago: executing program 2 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='-2 -3 +4\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f00000001c0)='1\n', 0x2)
close(r2)

5.974178313s ago: executing program 0 (id=105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_v1\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt_v1\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0)

5.885975433s ago: executing program 5 (id=106):
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/aiptek/1-1:17.0/ytilt\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/128, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:17.0/ytilt\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700)=""/128, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/aiptek/1-1:1.0/ytilt\x00', 0x0, 0x0)
read(r2, &(0x7f0000000900)=""/128, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/usb/devices/1-1:1.0/ytilt\x00', 0x0, 0x0)
read(r3, &(0x7f0000000b00)=""/128, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/usb/drivers/aiptek/2-1:17.0/ytilt\x00', 0x0, 0x0)
read(r4, &(0x7f0000000d00)=""/128, 0x80)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/usb/devices/2-1:17.0/ytilt\x00', 0x0, 0x0)
read(r5, &(0x7f0000000f00)=""/128, 0x80)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/usb/drivers/aiptek/2-1:1.0/ytilt\x00', 0x0, 0x0)
read(r6, &(0x7f0000001100)=""/128, 0x80)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/2-1:1.0/ytilt\x00', 0x0, 0x0)
read(r7, &(0x7f0000001300)=""/128, 0x80)
r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/usb/drivers/aiptek/3-1:17.0/ytilt\x00', 0x0, 0x0)
read(r8, &(0x7f0000001500)=""/128, 0x80)
r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/usb/devices/3-1:17.0/ytilt\x00', 0x0, 0x0)
read(r9, &(0x7f0000001700)=""/128, 0x80)
r10 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/usb/drivers/aiptek/3-1:1.0/ytilt\x00', 0x0, 0x0)
read(r10, &(0x7f0000001900)=""/128, 0x80)
r11 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/usb/devices/3-1:1.0/ytilt\x00', 0x0, 0x0)
read(r11, &(0x7f0000001b00)=""/128, 0x80)

5.808155198s ago: executing program 0 (id=107):
r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001223b0007058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00223b00000005200933a10185010a0e03150026e80375209501b1020a16031500250175089501b1020a19031500250175089501b1020a3404159c26e803751095018102c0"], 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_disconnect(r0)

5.256023318s ago: executing program 3 (id=108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='mem\x00', 0x3)
close(r0)

4.897928874s ago: executing program 1 (id=109):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, ' \x00'}, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001")

4.130377783s ago: executing program 4 (id=110):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x10000, 0x0)
close(r0)

3.573833655s ago: executing program 4 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/virtio-pci/uevent\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)

3.132223694s ago: executing program 0 (id=113):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy1/netdev:wlan1/stations\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/1024, 0x400)

3.08021285s ago: executing program 2 (id=114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/drivers\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001500)=""/4096, 0x1000)

3.076650207s ago: executing program 5 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='2049\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='4\n', 0x2)
close(r2)

2.913154001s ago: executing program 4 (id=116):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)

2.637682793s ago: executing program 1 (id=117):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0)

2.605192755s ago: executing program 2 (id=118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ed43000010000000109022200010100e0320904000001030002000921100100012222000705810308000a0000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/hid/drivers/arvo\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000)

2.466277842s ago: executing program 0 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/bus/platform/devices\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/platform/devices/pcspkr\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/platform/drivers\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/reg-fixed-voltage\x00', 0x0, 0x0)

2.466052301s ago: executing program 4 (id=120):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200), 0x1000)

2.325534967s ago: executing program 4 (id=121):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/ath11k/initstate\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/ath11k/refcnt\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/ath11k/holders\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/ath11k/sections\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/ath11k/version\x00', 0x0, 0x0)

2.316745804s ago: executing program 1 (id=122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='-2 -3 +4.2\n', 0xb)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000700)='1\n', 0x2)
close(r2)
nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000900)={0x2, 0x801, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000a00)="80000070112233440000000000000002000186a30000000400000001000000000000000000000000000000000000000000000002000000010000004700"/116, 0x74, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000b00)=""/256, 0x100, 0x40, 0x0, 0x0)

2.146186083s ago: executing program 0 (id=123):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @loopback}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x6f, @loopback}, 0x10)
listen(r1, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='udp 2049\n', 0x9)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0)
write(r3, &(0x7f00000001c0)='1\n', 0x2)
close(r3)

2.020026227s ago: executing program 4 (id=124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='.\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6)
close(r1)
syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000280)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/uevent\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/subsystem\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/power\x00', 0x0, 0x0)

1.68716985s ago: executing program 5 (id=125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='tcp 2049\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 testdom\n', 0x22)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='testdom 1 \\x00000000 2147483647 ./export\n', 0x29)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='testdom ./export 2147483647 9218 0 0 0\n', 0x27)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,proto=tcp,clientaddr=127.0.0.1\x00'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/dir\x00', 0x1ff)
symlinkat(&(0x7f0000000540)='target\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./mnt/link\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/fifo\x00', 0x11a4, 0x0)

331.087368ms ago: executing program 1 (id=126):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200000, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0)
read(r1, &(0x7f0000000100)=""/100, 0x64)

0s ago: executing program 0 (id=127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='ucsi_acpi\n', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='pcspkr\n', 0x7)
close(r3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
[   86.053838][  T188] cfg80211: failed to load regulatory.db
[   88.651463][ T5599] cgroup: Unknown subsys name 'net'
[   88.725441][ T5599] cgroup: Unknown subsys name 'cpuset'
[   88.729550][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.394003][ T5599] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   95.019625][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.023406][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.024063][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.030103][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.030541][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.037317][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.051999][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.059271][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.067218][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.074237][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.116484][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.121434][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.124538][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.126884][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.128196][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.130587][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.140156][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.140713][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.149687][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.164199][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.171906][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.172997][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.174314][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.175262][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.178970][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.265425][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.267848][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.270026][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.285527][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.295338][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.171947][ T5627] Bluetooth: hci5: command tx timeout
[   97.172108][ T5627] Bluetooth: hci3: command tx timeout
[   97.172428][ T5627] Bluetooth: hci1: command tx timeout
[   97.251550][ T5632] Bluetooth: hci2: command tx timeout
[   97.251705][ T5632] Bluetooth: hci4: command tx timeout
[   97.330719][ T5627] Bluetooth: hci0: command tx timeout
[   97.733601][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.734432][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.734870][ T5617] bridge_slave_0: entered allmulticast mode
[   97.737524][ T5617] bridge_slave_0: entered promiscuous mode
[   97.812032][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.812145][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.812276][ T5617] bridge_slave_1: entered allmulticast mode
[   97.813989][ T5617] bridge_slave_1: entered promiscuous mode
[   97.964727][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.980006][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.980402][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.980901][ T5621] bridge_slave_0: entered allmulticast mode
[   97.983017][ T5621] bridge_slave_0: entered promiscuous mode
[   97.987294][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.987404][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.987556][ T5621] bridge_slave_1: entered allmulticast mode
[   97.990121][ T5621] bridge_slave_1: entered promiscuous mode
[   98.019330][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.019449][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.019603][ T5618] bridge_slave_0: entered allmulticast mode
[   98.022553][ T5618] bridge_slave_0: entered promiscuous mode
[   98.026617][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.026734][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.026886][ T5618] bridge_slave_1: entered allmulticast mode
[   98.028962][ T5618] bridge_slave_1: entered promiscuous mode
[   98.078428][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.126918][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.166777][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.184636][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.212624][ T5617] team0: Port device team_slave_0 added
[   98.223862][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.251752][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.251921][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.252073][ T5619] bridge_slave_0: entered allmulticast mode
[   98.253908][ T5619] bridge_slave_0: entered promiscuous mode
[   98.266229][ T5617] team0: Port device team_slave_1 added
[   98.308822][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.308929][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.309313][ T5622] bridge_slave_0: entered allmulticast mode
[   98.312060][ T5622] bridge_slave_0: entered promiscuous mode
[   98.315465][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.315580][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.315730][ T5622] bridge_slave_1: entered allmulticast mode
[   98.317897][ T5622] bridge_slave_1: entered promiscuous mode
[   98.347967][ T5618] team0: Port device team_slave_0 added
[   98.348174][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.348289][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.348452][ T5619] bridge_slave_1: entered allmulticast mode
[   98.352034][ T5619] bridge_slave_1: entered promiscuous mode
[   98.389008][ T5621] team0: Port device team_slave_0 added
[   98.390615][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.390726][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.390858][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.431121][ T5618] team0: Port device team_slave_1 added
[   98.463196][ T5621] team0: Port device team_slave_1 added
[   98.464035][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.464052][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.464086][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.479026][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.480214][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.481160][ T5620] bridge_slave_0: entered allmulticast mode
[   98.483494][ T5620] bridge_slave_0: entered promiscuous mode
[   98.575997][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.576230][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.576414][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.576894][ T5620] bridge_slave_1: entered allmulticast mode
[   98.579104][ T5620] bridge_slave_1: entered promiscuous mode
[   98.581810][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.581831][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.581875][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.587722][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.609237][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.609265][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.609309][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.615366][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.633535][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.633557][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.633602][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.637842][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.672484][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.672507][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.672552][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.817496][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.837706][ T5619] team0: Port device team_slave_0 added
[   98.846915][ T5617] hsr_slave_0: entered promiscuous mode
[   98.848179][ T5617] hsr_slave_1: entered promiscuous mode
[   98.868501][ T5622] team0: Port device team_slave_0 added
[   98.872682][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.904267][ T5619] team0: Port device team_slave_1 added
[   98.947387][ T5622] team0: Port device team_slave_1 added
[   98.989535][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.989558][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.989599][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.013192][ T5621] hsr_slave_0: entered promiscuous mode
[   99.014487][ T5621] hsr_slave_1: entered promiscuous mode
[   99.015356][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   99.015431][ T5621] Cannot create hsr debugfs directory
[   99.033808][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.033831][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.033875][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.038371][ T5620] team0: Port device team_slave_0 added
[   99.048414][ T5618] hsr_slave_0: entered promiscuous mode
[   99.049637][ T5618] hsr_slave_1: entered promiscuous mode
[   99.050519][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   99.050545][ T5618] Cannot create hsr debugfs directory
[   99.128859][ T5620] team0: Port device team_slave_1 added
[   99.160123][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.160148][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.160190][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.164407][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.164428][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.164472][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.250807][ T5627] Bluetooth: hci1: command tx timeout
[   99.250850][ T5627] Bluetooth: hci3: command tx timeout
[   99.250883][ T5627] Bluetooth: hci5: command tx timeout
[   99.296652][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.296676][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.296709][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.335739][ T5632] Bluetooth: hci4: command tx timeout
[   99.335781][ T5632] Bluetooth: hci2: command tx timeout
[   99.370932][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.370956][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.371001][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.414350][ T5627] Bluetooth: hci0: command tx timeout
[   99.468937][ T5619] hsr_slave_0: entered promiscuous mode
[   99.469829][ T5619] hsr_slave_1: entered promiscuous mode
[   99.470560][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   99.470588][ T5619] Cannot create hsr debugfs directory
[   99.540936][ T5622] hsr_slave_0: entered promiscuous mode
[   99.541867][ T5622] hsr_slave_1: entered promiscuous mode
[   99.542731][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   99.542759][ T5622] Cannot create hsr debugfs directory
[   99.665542][ T5620] hsr_slave_0: entered promiscuous mode
[   99.666409][ T5620] hsr_slave_1: entered promiscuous mode
[   99.667016][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   99.667043][ T5620] Cannot create hsr debugfs directory
[  100.099682][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.107871][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.109157][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.114100][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.143880][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.148636][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.185359][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.189356][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.284240][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.288512][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.307122][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.313065][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.330308][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.342338][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.359432][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.365999][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.438306][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.445818][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.446861][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.453455][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.473317][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.477561][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.500170][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.508372][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.610221][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.623212][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.639978][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  100.651577][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.654223][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.658897][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.659758][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  100.667564][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.745722][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.765435][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.858954][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[  100.860434][ T5622] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.874300][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.899119][ T5622] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.905889][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.906906][ T5622] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.912224][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.915148][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[  100.942876][ T5622] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.946414][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.950031][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.950142][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.954965][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.955101][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.963998][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.964119][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.039727][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.039819][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.136829][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.143177][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.144499][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.156024][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.182470][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.186337][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.187224][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.201862][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.280359][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.332390][ T5632] Bluetooth: hci3: command tx timeout
[  101.332433][ T5632] Bluetooth: hci1: command tx timeout
[  101.332573][ T5627] Bluetooth: hci5: command tx timeout
[  101.349746][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.411583][ T4927] Bluetooth: hci2: command tx timeout
[  101.411626][ T4927] Bluetooth: hci4: command tx timeout
[  101.445333][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[  101.460203][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[  101.491340][ T5627] Bluetooth: hci0: command tx timeout
[  101.545216][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.545397][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.554914][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.555053][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.606998][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.607122][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.634210][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.634356][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.715697][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.842674][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[  101.894835][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.894960][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.975738][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.975863][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.072604][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.172692][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[  102.259286][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.259411][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.294166][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.294285][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.680281][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.895828][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.087759][ T5617] veth0_vlan: entered promiscuous mode
[  103.182852][ T5617] veth1_vlan: entered promiscuous mode
[  103.245132][ T5618] veth0_vlan: entered promiscuous mode
[  103.314610][ T5618] veth1_vlan: entered promiscuous mode
[  103.413117][ T5632] Bluetooth: hci1: command tx timeout
[  103.413159][ T5632] Bluetooth: hci3: command tx timeout
[  103.413237][ T5627] Bluetooth: hci5: command tx timeout
[  103.446197][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.454082][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.491638][ T4927] Bluetooth: hci2: command tx timeout
[  103.491695][ T5627] Bluetooth: hci4: command tx timeout
[  103.503202][ T5617] veth0_macvtap: entered promiscuous mode
[  103.550333][ T5617] veth1_macvtap: entered promiscuous mode
[  103.572074][ T5627] Bluetooth: hci0: command tx timeout
[  103.572372][ T5618] veth0_macvtap: entered promiscuous mode
[  103.616616][ T5618] veth1_macvtap: entered promiscuous mode
[  103.679176][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.768560][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.779892][ T5619] veth0_vlan: entered promiscuous mode
[  103.784569][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.827951][ T5619] veth1_vlan: entered promiscuous mode
[  103.860018][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.862467][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.865912][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.865976][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.866036][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.871743][ T5621] veth0_vlan: entered promiscuous mode
[  104.001165][ T5621] veth1_vlan: entered promiscuous mode
[  104.063556][  T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.170290][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.192774][  T996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.192845][  T996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.192907][  T996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.194067][ T5619] veth0_macvtap: entered promiscuous mode
[  104.262356][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.278878][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.278906][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.289642][ T5619] veth1_macvtap: entered promiscuous mode
[  104.339781][ T5621] veth0_macvtap: entered promiscuous mode
[  104.405820][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.405849][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.445095][ T5621] veth1_macvtap: entered promiscuous mode
[  104.524024][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.524056][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.561725][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.611660][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.616479][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.644542][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.665503][  T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.697681][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.697711][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.706965][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.707414][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.828419][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  104.881293][   T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.881680][   T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.881887][   T81] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.882088][   T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.950964][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.131912][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.131944][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.326609][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.326638][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.468391][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.468423][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.622552][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.622582][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.627024][ T5622] veth0_vlan: entered promiscuous mode
[  105.673580][   T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.726213][ T5620] veth0_vlan: entered promiscuous mode
[  105.735711][ T5622] veth1_vlan: entered promiscuous mode
[  105.827537][ T5620] veth1_vlan: entered promiscuous mode
[  105.846778][   T30] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00
[  105.857406][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.025233][ T5622] veth0_macvtap: entered promiscuous mode
[  106.188556][ T5620] veth0_macvtap: entered promiscuous mode
[  106.199138][ T5622] veth1_macvtap: entered promiscuous mode
[  106.227142][ T5858] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99)
[  106.257253][ T5620] veth1_macvtap: entered promiscuous mode
[  106.270546][ T5853] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  106.270605][ T5853] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  106.307801][ T5853] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  106.315774][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.332399][ T5853] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.349752][ T5853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  106.372264][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.452201][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.490407][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.491624][   T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.493112][   T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.493181][   T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.498799][ T5742] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  106.553147][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.671500][ T5742] usb 1-1: New USB device found, idVendor=0bda, idProduct=2838, bcdDevice= 1.00
[  106.672568][   T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.686782][   T30] comedi comedi5: could not switch to alternate setting 1
[  106.686812][   T30] usbduxfast 3-1:1.0: driver 'usbduxfast' failed to auto-configure device.
[  106.708401][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.708439][ T5742] usb 1-1: Product: syz
[  106.708482][ T5742] usb 1-1: Manufacturer: syz
[  106.708508][ T5742] usb 1-1: SerialNumber: syz
[  106.742610][  T996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.742802][  T996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.743028][  T996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.795416][   T30] usb 3-1: USB disconnect, device number 2
[  106.993153][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.993184][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.116400][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.116750][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.264360][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.264390][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.301481][ T5871] svc: failed to register lockdv1 RPC service (errno 111).
[  107.301733][ T5871] lockd_up: makesock failed, error=-111
[  107.405556][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.405589][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.719941][ T5871] svc: failed to register nfsdv3 RPC service (errno 111).
[  107.730408][ T5871] svc: failed to register nfsaclv3 RPC service (errno 111).
[  107.730437][ T5871] failed to unregister udp with rpcbind
[  107.753947][ T5871] svc: failed to register nfsdv3 RPC service (errno 97).
[  107.753980][ T5871] svc: failed to register nfsaclv3 RPC service (errno 97).
[  107.754003][ T5871] failed to unregister udp with rpcbind
[  107.813691][ T5742] dvb_usb_rtl28xxu 1-1:1.0: chip type detection failed -110
[  107.813795][ T5742] dvb_usb_rtl28xxu 1-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  108.086952][ T5856] usb 1-1: USB disconnect, device number 2
[  108.251274][ T5882] svc: failed to register lockdv1 RPC service (errno 111).
[  108.426517][ T5882] svc: failed to register nfsdv3 RPC service (errno 111).
[  108.428489][ T5882] svc: failed to register nfsaclv3 RPC service (errno 111).
[  108.428511][ T5882] failed to unregister tcp with rpcbind
[  108.428745][ T5882] svc: failed to register nfsdv3 RPC service (errno 97).
[  108.428770][ T5882] svc: failed to register nfsaclv3 RPC service (errno 97).
[  108.429022][ T5882] failed to unregister tcp with rpcbind
[  108.652754][ T5889] svc: failed to register lockdv1 RPC service (errno 111).
[  108.759618][ T5901] lo speed is unknown, defaulting to 1000
[  108.788333][ T5901] lo speed is unknown, defaulting to 1000
[  108.806529][ T5901] lo speed is unknown, defaulting to 1000
[  108.886105][ T5889] svc: failed to register nfsdv3 RPC service (errno 111).
[  108.891072][ T5889] svc: failed to register nfsaclv3 RPC service (errno 111).
[  108.891099][ T5889] failed to unregister tcp with rpcbind
[  108.891301][ T5889] svc: failed to register nfsdv3 RPC service (errno 97).
[  108.891327][ T5889] svc: failed to register nfsaclv3 RPC service (errno 97).
[  108.891349][ T5889] failed to unregister tcp with rpcbind
[  109.384659][ T5910] svc: failed to register lockdv1 RPC service (errno 111).
[  109.674966][ T5910] svc: failed to register nfsdv3 RPC service (errno 111).
[  109.677984][ T5910] svc: failed to register nfsaclv3 RPC service (errno 111).
[  109.678011][ T5910] failed to unregister tcp with rpcbind
[  109.685480][ T5910] svc: failed to register nfsdv3 RPC service (errno 97).
[  109.685509][ T5910] svc: failed to register nfsaclv3 RPC service (errno 97).
[  109.685531][ T5910] failed to unregister tcp with rpcbind
[  109.915193][ T5919] svc: failed to register lockdv1 RPC service (errno 111).
[  110.159344][ T5919] svc: failed to register nfsdv3 RPC service (errno 111).
[  110.160349][ T5901] infiniband syz0: set active
[  110.161301][ T5919] svc: failed to register nfsaclv3 RPC service (errno 111).
[  110.161327][ T5919] failed to unregister tcp with rpcbind
[  110.161328][ T5862] lo speed is unknown, defaulting to 1000
[  110.161611][ T5919] svc: failed to register nfsdv3 RPC service (errno 97).
[  110.161643][ T5919] svc: failed to register nfsaclv3 RPC service (errno 97).
[  110.161666][ T5919] failed to unregister tcp with rpcbind
[  110.165213][ T5901] infiniband syz0: added lo
[  110.179415][ T5901] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  110.190013][ T5901] infiniband syz0: Couldn't open port 1
[  110.190278][ T5901] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  110.190334][ T5901] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  110.190412][ T5901] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  110.471694][ T5901] RDS/IB: syz0: added
[  110.472202][ T5901] smc: adding ib device syz0 with port count 1
[  110.481218][ T5901] smc:    ib device syz0 port 1 has no pnetid
[  110.482102][ T5742] lo speed is unknown, defaulting to 1000
[  110.502417][ T5901] lo speed is unknown, defaulting to 1000
[  110.831909][ T5935] ftl_cs: FTL header not found.
[  111.039193][ T5935] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072]
[  111.440408][ T5943] loop3: detected capacity change from 0 to 2048
[  111.475675][ T5943] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  111.475856][ T5943] NILFS (loop3): mounting unchecked fs
[  111.495610][ T5939] loop5: detected capacity change from 0 to 32768
[  111.509686][ T5901] lo speed is unknown, defaulting to 1000
[  111.591547][ T5931] NFSD: Unable to initialize client recovery tracking! (-110)
[  111.591574][ T5931] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  111.591593][ T5931] NFSD: starting 90-second grace period (net f000055d)
[  111.595839][ T5939] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.656685][ T5943] NILFS (loop3): recovery complete
[  111.691687][ T5953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.834925][ T5939] XFS (loop5): Ending clean mount
[  111.904677][ T5939] XFS (loop5): Quotacheck needed: Please wait.
[  112.057973][ T5939] XFS (loop5): Quotacheck: Done.
[  112.364462][ T5959] loop4: detected capacity change from 0 to 2048
[  112.379163][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.380031][ T5959] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  112.380069][ T5959] NILFS (loop4): mounting unchecked fs
[  112.500384][ T5959] NILFS (loop4): recovery complete
[  112.523591][ T5963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.560981][   T25] usb 3-1: Using ep0 maxpacket: 16
[  112.562303][   T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  112.563626][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  112.566354][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.566393][   T25] usb 3-1: Product: syz
[  112.566419][   T25] usb 3-1: Manufacturer: syz
[  112.566446][   T25] usb 3-1: SerialNumber: syz
[  112.624914][   T25] usb 3-1: config 0 descriptor??
[  112.653256][   T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  112.653306][   T25] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  112.754209][ T5959] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  112.754295][ T5959] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  113.268273][   T25] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  113.285404][ T5901] lo speed is unknown, defaulting to 1000
[  113.601483][ T5633] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.752879][ T5633] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  113.757489][ T5633] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  113.757570][ T5633] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  113.769771][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  113.769853][ T5633] usb 5-1: Product: syz
[  113.769880][ T5633] usb 5-1: Manufacturer: syz
[  113.812957][ T5969] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  113.813176][ T5969] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  113.902748][ T5633] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  114.120945][ T5633] mos7840 5-1:1.0: probe with driver mos7840 failed with error -71
[  114.242566][ T5633] usb 5-1: USB disconnect, device number 2
[  114.665681][ T5622] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.721808][ T5973] NFSD: Unable to initialize client recovery tracking! (-110)
[  114.721829][ T5973] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  114.721846][ T5973] NFSD: starting 90-second grace period (net f000055d)
[  114.813478][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.836465][   T25] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  114.836696][   T25] em28xx 3-1:0.0: board has no eeprom
[  114.842914][ T5901] lo speed is unknown, defaulting to 1000
[  114.952309][   T25] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  114.952347][   T25] em28xx 3-1:0.0: dvb set to bulk mode.
[  114.956163][ T5626] em28xx 3-1:0.0: Binding DVB extension
[  114.994393][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice= 1.00
[  115.007093][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.007128][   T10] usb 4-1: Product: syz
[  115.007154][   T10] usb 4-1: Manufacturer: syz
[  115.007181][   T10] usb 4-1: SerialNumber: syz
[  115.202518][ T5626] em28xx 3-1:0.0: Registering input extension
[  115.210594][   T10] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx
[  116.007507][ T5986] svc: failed to register lockdv1 RPC service (errno 111).
[  116.323220][ T5986] svc: failed to register nfsdv3 RPC service (errno 111).
[  116.326747][ T5986] svc: failed to register nfsaclv3 RPC service (errno 111).
[  116.326812][ T5986] failed to unregister udp with rpcbind
[  116.327024][ T5986] svc: failed to register nfsdv3 RPC service (errno 97).
[  116.327052][ T5986] svc: failed to register nfsaclv3 RPC service (errno 97).
[  116.327106][ T5986] failed to unregister udp with rpcbind
[  116.582928][ T5988] loop5: detected capacity change from 0 to 32768
[  116.606405][ T5901] lo speed is unknown, defaulting to 1000
[  116.645559][ T5988] (syz.5.38,5988,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.650510][ T5988] (syz.5.38,5988,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.657150][ T5985] nvme_tcp: queue 0: failed to receive icresp, error -104
[  116.872815][ T5626] usb 3-1: USB disconnect, device number 3
[  116.900197][ T5626] em28xx 3-1:0.0: Disconnecting em28xx
[  116.900331][ T5626] em28xx 3-1:0.0: Closing input extension
[  116.923845][ T5988] JBD2: Ignoring recovery information on journal
[  117.187186][ T5988] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  117.328930][ T5626] em28xx: Freeing device
[  117.364784][ T6004] null_blk: nullb1: using native zone append
[  117.441682][ T6005] nvmet: adding nsid 1 to subsystem testsubsys
[  117.449149][ T6005] nvmet: failed to open block device /dev/nullb1: (-2)
[  117.751934][   T13] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:fe1f5477-2b67-4681-8b41-511aa8f62bfa.
[  117.784031][ T5626] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  117.836812][ T5622] ocfs2: Unmounting device (7,5) on (node local)
[  117.914436][ T2349] pvrusb2: Failed to submit write-control URB status=-2
[  117.937780][ T6005] nvme nvme0: creating 2 I/O queues.
[  117.942902][ T6004] null_blk: disk nullb1 created
[  117.956991][ T5626] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00
[  117.970884][ T5626] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  117.970929][ T5626] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  117.971022][ T5626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.983796][ T2349] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2
[  117.983831][ T2349] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw
[  118.018531][   T10] usb 4-1: USB disconnect, device number 2
[  118.042833][ T6002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  118.042997][ T6002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  118.107595][ T6005] nvme nvme0: new ctrl: "testsubsys"
[  118.214848][ T5626] ushc 3-1:1.0: probe with driver ushc failed with error -110
[  118.642331][ T6023] loop0: detected capacity change from 0 to 4096
[  118.716343][ T5901] lo speed is unknown, defaulting to 1000
[  118.735506][  T996] nvme nvme0: rescanning namespaces.
[  118.736222][ T6028] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  118.870375][   T13] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:fe1f5477-2b67-4681-8b41-511aa8f62bfa.
[  118.879644][ T6028] nvme nvme1: creating 2 I/O queues.
[  118.920311][ T6028] nvme nvme1: new ctrl: "testsubsys"
[  118.946423][ T6029] o2cb: Local heartbeat has not been started.
[  118.946447][ T6029] o2cb: Cluster check failed. Fix errors before retrying.
[  118.946491][ T6029] (syz.4.48,6029,1):user_dlm_register:674 ERROR: status = -22
[  118.946533][ T6029] (syz.4.48,6029,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0"
[  119.170815][    C1] net_ratelimit: 75 callbacks suppressed
[  119.576405][ T6037] ubi0: attaching mtd1
[  119.581055][ T6015] NFSD: Unable to initialize client recovery tracking! (-110)
[  119.581075][ T6015] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  119.581093][ T6015] NFSD: starting 10-second grace period (net f000055d)
[  119.640623][ T6037] ubi0: scanning is finished
[  119.646568][ T6037] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  119.648590][ T6041] UBIFS error (pid: 6041): cannot open "ubi0_0", error -19
[  119.680809][ T5742] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  119.772239][ T6037] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22
[  119.831616][ T5742] usb 1-1: New USB device found, idVendor=04cb, idProduct=0104, bcdDevice= 1.00
[  119.833615][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  119.833667][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  119.833764][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.847583][ T6035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  119.847763][ T6035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  119.896182][ T5742] gspca_main: finepix-2.14.0 probing 04cb:0104
[  120.195418][ T5625] usb 3-1: USB disconnect, device number 4
[  120.600171][ T5626] usb 1-1: USB disconnect, device number 3
[  120.710786][ T5625] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  120.861867][ T5625] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  120.872371][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.872443][ T5625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.876480][ T5625] usb 6-1: config 0 descriptor??
[  121.091863][ T6021] NFSD: Unable to initialize client recovery tracking! (-110)
[  121.091887][ T6021] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  121.091905][ T6021] NFSD: starting 90-second grace period (net f000045d)
[  121.298224][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298273][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298309][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298344][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298379][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298415][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298450][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298486][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298521][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.298557][ T5625] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0
[  121.338480][ T5625] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0
[  121.910891][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  122.064413][ T5862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 0.00
[  122.066170][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.095621][ T5862] usbtest 2-1:1.0: Linux user mode test driver
[  122.095665][ T5862] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  122.312159][ T5862] usb 2-1: USB disconnect, device number 2
[  122.752852][ T6051] NFSD: Unable to initialize client recovery tracking! (-110)
[  122.752879][ T6051] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  122.752898][ T6051] NFSD: starting 90-second grace period (net f0000451)
[  123.016097][   T59] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.079596][ T5620] svc: failed to register nfsdv3 RPC service (errno 111).
[  123.099086][ T5620] svc: failed to register nfsaclv3 RPC service (errno 111).
[  123.099142][ T5620] failed to unregister udp with rpcbind
[  123.099440][ T5620] svc: failed to register nfsdv3 RPC service (errno 97).
[  123.099468][ T5620] svc: failed to register nfsaclv3 RPC service (errno 97).
[  123.099492][ T5620] failed to unregister udp with rpcbind
[  123.333724][ T6072] NFSD: Failed to start, no listeners configured.
[  123.365101][ T6067] 8021q: adding VLAN 0 to HW filter on device macsec1
[  123.370408][   T25] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  123.635398][ T6076] ptp ptp0: new virtual clock ptp1
[  123.635430][ T6076] ptp ptp0: guarantee physical clock free running
[  123.752651][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  123.897444][ T6084] block2mtd: error: cannot open device /dev/ram0
[  123.911547][   T25] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  123.923129][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  123.923182][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.955532][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  123.955570][   T25] usb 3-1: Product: syz
[  123.955598][   T25] usb 3-1: Manufacturer: syz
[  123.978498][ T6088] netlink: 'syz.4.66': attribute type 2 has an invalid length.
[  123.978602][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  123.985065][ T6088] netlink: 'syz.4.66': attribute type 2 has an invalid length.
[  123.999976][ T6089] UBIFS error (pid: 6089): cannot open "ubi0:test", error -19
[  124.006772][ T6088] netlink: 'syz.4.66': attribute type 2 has an invalid length.
[  124.006818][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  124.008278][ T6088] netlink: 'syz.4.66': attribute type 2 has an invalid length.
[  124.008305][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  124.009123][   T25] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  124.018299][ T6088] netlink: 'syz.4.66': attribute type 2 has an invalid length.
[  124.038639][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  124.104045][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  124.195474][ T1108] IPVS: starting estimator thread 0...
[  124.293037][ T6092] IPVS: using max 23 ests per chain, 55200 per kthread
[  124.380739][    C1] net_ratelimit: 213 callbacks suppressed
[  124.668559][ T6099] loop1: detected capacity change from 0 to 2048
[  124.683767][ T6095] svc: failed to register lockdv1 RPC service (errno 111).
[  124.718172][ T6099] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  124.718217][ T6099] NILFS (loop1): mounting unchecked fs
[  124.757845][   T25] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  124.794075][ T6099] NILFS (loop1): recovery complete
[  124.794756][   T25] usb 3-1: USB disconnect, device number 5
[  124.806587][ T6102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.854981][   T25] mos7840 3-1:1.0: device disconnected
[  124.954238][ T6099] overlayfs: failed to resolve './file1': -2
[  125.028789][ T6095] svc: failed to register nfsdv3 RPC service (errno 111).
[  125.033883][ T6095] svc: failed to register nfsaclv3 RPC service (errno 111).
[  125.033912][ T6095] failed to unregister tcp with rpcbind
[  125.034108][ T6095] svc: failed to register nfsdv3 RPC service (errno 97).
[  125.034136][ T6095] svc: failed to register nfsaclv3 RPC service (errno 97).
[  125.034160][ T6095] failed to unregister tcp with rpcbind
[  125.490246][ T6106] loop1: detected capacity change from 0 to 2048
[  125.502983][ T6106] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.503021][ T6106] NILFS (loop1): mounting unchecked fs
[  125.575826][ T6106] NILFS (loop1): recovery complete
[  125.590902][ T6109] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.895471][ T6096] loop0: detected capacity change from 0 to 32768
[  125.982823][ T6096] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  125.982879][ T6096] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  126.148804][ T6096] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  126.180156][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  126.180185][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  126.214642][ T6104] loop3: detected capacity change from 0 to 32768
[  126.248001][ T6104] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  126.248029][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.3.72 Not tainted syzkaller #0 PREEMPT(full) 
[  126.248076][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  126.248101][ T6104] Call Trace:
[  126.248115][ T6104]  <TASK>
[  126.248130][ T6104]  dump_stack_lvl+0x100/0x190
[  126.248192][ T6104]  sysfs_warn_dup.cold+0x1c/0x28
[  126.248254][ T6104]  sysfs_create_dir_ns+0x24b/0x2b0
[  126.248298][ T6104]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  126.248339][ T6104]  ? find_held_lock+0x2b/0x80
[  126.248395][ T6104]  ? kobject_add_internal+0x25f/0x930
[  126.248459][ T6104]  ? kobject_add_internal+0x25f/0x930
[  126.248518][ T6104]  kobject_add_internal+0x2c8/0x930
[  126.248575][ T6104]  kobject_init_and_add+0x121/0x180
[  126.248627][ T6104]  ? __pfx_kobject_init_and_add+0x10/0x10
[  126.248685][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.248733][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.248786][ T6104]  ? lockdep_init_map_type+0x5c/0x250
[  126.248830][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.248878][ T6104]  ? lockdep_init_map_type+0x5c/0x250
[  126.248929][ T6104]  gfs2_sys_fs_add+0x209/0x410
[  126.248970][ T6104]  ? __pfx_gfs2_sys_fs_add+0x10/0x10
[  126.249009][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.249062][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.249109][ T6104]  ? alloc_workqueue_noprof+0xe1/0x130
[  126.249171][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.249232][ T6104]  gfs2_fill_super+0x1452/0x2d00
[  126.249279][ T6104]  ? __pfx_vsnprintf+0x10/0x10
[  126.249363][ T6104]  ? __pfx_gfs2_fill_super+0x10/0x10
[  126.249413][ T6104]  ? __pfx_snprintf+0x10/0x10
[  126.249481][ T6104]  ? find_held_lock+0x2b/0x80
[  126.249534][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.249581][ T6104]  ? set_blocksize+0x1cf/0x460
[  126.249625][ T6104]  ? setup_bdev_super+0x4b6/0x770
[  126.249684][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.249731][ T6104]  ? sb_set_blocksize+0x1f6/0x290
[  126.249795][ T6104]  ? get_tree_bdev_flags+0x38c/0x620
[  126.249851][ T6104]  get_tree_bdev_flags+0x38c/0x620
[  126.249906][ T6104]  ? __pfx_gfs2_fill_super+0x10/0x10
[  126.249959][ T6104]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  126.250022][ T6104]  ? rcu_is_watching+0x13/0xc0
[  126.250074][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250122][ T6104]  ? apparmor_capable+0x1d7/0x4d0
[  126.250177][ T6104]  ? __asan_memset+0x23/0x50
[  126.250235][ T6104]  gfs2_get_tree+0x4e/0x280
[  126.250285][ T6104]  vfs_get_tree+0x92/0x320
[  126.250331][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250381][ T6104]  path_mount+0x7d0/0x24c0
[  126.250439][ T6104]  ? __pfx_path_mount+0x10/0x10
[  126.250484][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250531][ T6104]  ? lockdep_hardirqs_on+0x7d/0x110
[  126.250600][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250648][ T6104]  ? kmem_cache_free+0x127/0x6c0
[  126.250715][ T6104]  ? __x64_sys_mount+0x293/0x310
[  126.250762][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250815][ T6104]  __x64_sys_mount+0x293/0x310
[  126.250865][ T6104]  ? __pfx___x64_sys_mount+0x10/0x10
[  126.250919][ T6104]  ? srso_alias_return_thunk+0x5/0xfbef5
[  126.250976][ T6104]  do_syscall_64+0x123/0x790
[  126.251046][ T6104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.251088][ T6104] RIP: 0033:0x7f5bc059f3ca
[  126.251120][ T6104] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.251160][ T6104] RSP: 002b:00007f5bbe7f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.251199][ T6104] RAX: ffffffffffffffda RBX: 00007f5bbe7f5ee0 RCX: 00007f5bc059f3ca
[  126.251227][ T6104] RDX: 0000200000000280 RSI: 0000200000012500 RDI: 00007f5bbe7f5ea0
[  126.251255][ T6104] RBP: 0000200000000280 R08: 00007f5bbe7f5ee0 R09: 0000000000000002
[  126.251281][ T6104] R10: 0000000000000002 R11: 0000000000000246 R12: 0000200000012500
[  126.251308][ T6104] R13: 00007f5bbe7f5ea0 R14: 00000000000124d4 R15: 00002000000001c0
[  126.251360][ T6104]  </TASK>
[  126.399894][ T6104] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  126.399926][ T6104] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  126.869569][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 689ms
[  126.870359][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  126.881316][ T6096] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  126.961985][ T5742] usb 6-1: USB disconnect, device number 2
[  127.163429][ T6114] loop4: detected capacity change from 0 to 40427
[  127.208724][ T6114] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  127.208761][ T6114] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  127.707606][ T6096] gfs2: fsid=syz:syz.0: found 1 quota changes
[  128.056612][ T5621] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  128.056665][ T5621] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  128.056722][ T5621] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5621 [syz-executor] gfs2_quota_sync+0x322/0x570
[  128.056819][ T5621] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  128.056868][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  128.056913][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  128.056938][ T5621] Call Trace:
[  128.056951][ T5621]  <TASK>
[  128.056966][ T5621]  dump_stack_lvl+0x100/0x190
[  128.057023][ T5621]  gfs2_withdraw.cold+0xa/0xed
[  128.057074][ T5621]  inode_go_instantiate+0xd63/0x1540
[  128.057132][ T5621]  ? __pfx_inode_go_instantiate+0x10/0x10
[  128.057181][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.057239][ T5621]  gfs2_instantiate+0x16c/0x250
[  128.057300][ T5621]  gfs2_glock_wait+0x214/0x330
[  128.057364][ T5621]  ? __pfx_gfs2_glock_wait+0x10/0x10
[  128.057436][ T5621]  gfs2_glock_nq+0xa03/0x14f0
[  128.057482][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.057538][ T5621]  do_sync+0x705/0xd60
[  128.057595][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.057642][ T5621]  ? do_raw_spin_unlock+0x145/0x1e0
[  128.057708][ T5621]  ? __pfx_do_sync+0x10/0x10
[  128.057766][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.057824][ T5621]  ? qd_grab_sync+0x41e/0x560
[  128.057890][ T5621]  ? gfs2_quota_sync+0x322/0x570
[  128.057950][ T5621]  ? gfs2_quota_sync+0x278/0x570
[  128.058010][ T5621]  ? gfs2_quota_sync+0x278/0x570
[  128.058068][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.058126][ T5621]  gfs2_quota_sync+0x322/0x570
[  128.058201][ T5621]  gfs2_sync_fs+0x44/0xb0
[  128.058249][ T5621]  ? __pfx_gfs2_sync_fs+0x10/0x10
[  128.058297][ T5621]  sync_filesystem+0x117/0x290
[  128.058348][ T5621]  generic_shutdown_super+0x86/0x360
[  128.058401][ T5621]  kill_block_super+0x3b/0xa0
[  128.058454][ T5621]  gfs2_kill_sb+0x4a9/0x590
[  128.058509][ T5621]  deactivate_locked_super+0xbd/0x140
[  128.058566][ T5621]  deactivate_super+0xea/0x110
[  128.058622][ T5621]  cleanup_mnt+0x21f/0x450
[  128.058690][ T5621]  task_work_run+0x150/0x240
[  128.058750][ T5621]  ? __pfx_task_work_run+0x10/0x10
[  128.058818][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.058873][ T5621]  exit_to_user_mode_loop+0x1d8/0x700
[  128.058917][ T5621]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.058965][ T5621]  ? rcu_is_watching+0x13/0xc0
[  128.059019][ T5621]  do_syscall_64+0x661/0x790
[  128.059087][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.059128][ T5621] RIP: 0033:0x7ff72199f397
[  128.059159][ T5621] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  128.059198][ T5621] RSP: 002b:00007ffca428a1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.059236][ T5621] RAX: 0000000000000000 RBX: 00007ff721a344bb RCX: 00007ff72199f397
[  128.059263][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca428a280
[  128.059288][ T5621] RBP: 00007ffca428a280 R08: 00007ffca428b280 R09: 00000000ffffffff
[  128.059315][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca428b310
[  128.059341][ T5621] R13: 00007ff721a344bb R14: 000000000001e606 R15: 00007ffca428b350
[  128.059391][ T5621]  </TASK>
[  128.137314][ T6114] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.194560][ T5621] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  128.229764][ T6114] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  128.239381][ T6114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  128.597218][ T6132] loop5: detected capacity change from 0 to 32768
[  128.607907][ T6132] xfs: Deprecated parameter 'ikeep'
[  128.607937][ T6132] XFS: ikeep mount option is deprecated.
[  128.607998][ T6132] xfs: Deprecated parameter 'noattr2'
[  128.608022][ T6132] XFS: noattr2 mount option is deprecated.
[  128.672636][ T6132] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.909508][ T6132] XFS (loop5): Ending clean mount
[  128.918177][ T5620] syz-executor: attempt to access beyond end of device
[  128.918177][ T5620] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  128.961373][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  128.961426][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  128.961450][ T5620] Call Trace:
[  128.961463][ T5620]  <TASK>
[  128.961479][ T5620]  dump_stack_lvl+0x100/0x190
[  128.961540][ T5620]  f2fs_stop_checkpoint+0x5e6/0xb30
[  128.961586][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.961634][ T5620]  ? errseq_set+0xe3/0x150
[  128.961683][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.961729][ T5620]  f2fs_write_end_bio+0xef9/0x12d0
[  128.961784][ T5620]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  128.961827][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.961875][ T5620]  ? find_held_lock+0x2b/0x80
[  128.961922][ T5620]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  128.961979][ T5620]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  128.962032][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.962081][ T5620]  f2fs_write_end_io+0xc8/0x240
[  128.962121][ T5620]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  128.962161][ T5620]  bio_endio+0x7ba/0x9c0
[  128.962218][ T5620]  submit_bio_noacct+0x22a/0x2130
[  128.962275][ T5620]  f2fs_submit_write_bio+0x133/0x330
[  128.962318][ T5620]  __submit_merged_bio+0x330/0x7b0
[  128.962361][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.962411][ T5620]  __submit_merged_write_cond+0x3fe/0x510
[  128.962465][ T5620]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  128.962527][ T5620]  ? __pfx___might_resched+0x10/0x10
[  128.962586][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.962632][ T5620]  ? folio_clear_dirty_for_io+0x178/0x960
[  128.962691][ T5620]  f2fs_write_cache_pages+0x20e9/0x2630
[  128.962780][ T5620]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  128.962838][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.962892][ T5620]  ? __bfs+0x150/0x2a0
[  128.962948][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.962995][ T5620]  ? __lock_acquire+0x5c0/0x1f40
[  128.963031][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963077][ T5620]  ? __css_rstat_updated+0x1ce/0x590
[  128.963142][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963187][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.963252][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963299][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963346][ T5620]  ? __bfs+0x150/0x2a0
[  128.963430][ T5620]  ? check_noncircular+0x97/0x160
[  128.963496][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963542][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.963595][ T5620]  f2fs_write_data_pages+0x799/0x16d0
[  128.963651][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963697][ T5620]  ? is_bpf_text_address+0x8a/0x1a0
[  128.963750][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.963827][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.963874][ T5620]  ? lock_acquire+0x1d1/0x380
[  128.963909][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.963972][ T5620]  do_writepages+0x278/0x600
[  128.964031][ T5620]  ? __pfx_do_writepages+0x10/0x10
[  128.964082][ T5620]  ? do_raw_spin_unlock+0x145/0x1e0
[  128.964130][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.964176][ T5620]  ? _raw_spin_unlock+0x28/0x50
[  128.964236][ T5620]  filemap_writeback+0x22d/0x2e0
[  128.964294][ T5620]  ? __pfx_filemap_writeback+0x10/0x10
[  128.964387][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.964428][ T5620]  ? find_held_lock+0x2b/0x80
[  128.964474][ T5620]  ? f2fs_sync_dirty_inodes+0x38f/0x960
[  128.964527][ T5620]  ? f2fs_sync_dirty_inodes+0x38f/0x960
[  128.964578][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.964631][ T5620]  f2fs_sync_dirty_inodes+0x452/0x960
[  128.964698][ T5620]  block_operations+0x2a6/0xfc0
[  128.964764][ T5620]  ? __pfx_block_operations+0x10/0x10
[  128.964876][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.964926][ T5620]  ? ktime_get+0x22c/0x320
[  128.964965][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965011][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.965067][ T5620]  f2fs_write_checkpoint+0x58b/0x53e0
[  128.965128][ T5620]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.965186][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965233][ T5620]  ? _raw_spin_unlock_irq+0x2e/0x50
[  128.965285][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965333][ T5620]  ? __wait_for_common+0x1f3/0x4c0
[  128.965392][ T5620]  ? __pfx_schedule_timeout+0x10/0x10
[  128.965443][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965490][ T5620]  ? do_raw_spin_lock+0x128/0x260
[  128.965539][ T5620]  ? __pfx___wait_for_common+0x10/0x10
[  128.965601][ T5620]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  128.965660][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965707][ T5620]  ? mark_held_locks+0x40/0x70
[  128.965750][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965801][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.965849][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.965896][ T5620]  ? kthread_stop+0x280/0x630
[  128.965949][ T5620]  kill_f2fs_super+0x3f1/0x4a0
[  128.966007][ T5620]  ? __pfx_kill_f2fs_super+0x10/0x10
[  128.966081][ T5620]  ? lockdep_hardirqs_on+0x7d/0x110
[  128.966143][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.966191][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.966250][ T5620]  deactivate_locked_super+0xbd/0x140
[  128.966307][ T5620]  deactivate_super+0xea/0x110
[  128.966362][ T5620]  cleanup_mnt+0x21f/0x450
[  128.966429][ T5620]  task_work_run+0x150/0x240
[  128.966487][ T5620]  ? __pfx_task_work_run+0x10/0x10
[  128.966547][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.966603][ T5620]  exit_to_user_mode_loop+0x1d8/0x700
[  128.966645][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.966691][ T5620]  ? rcu_is_watching+0x13/0xc0
[  128.966743][ T5620]  do_syscall_64+0x661/0x790
[  128.966815][ T5620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.966855][ T5620] RIP: 0033:0x7f26c259f397
[  128.966886][ T5620] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  128.966924][ T5620] RSP: 002b:00007fff7bd4a6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.966962][ T5620] RAX: 0000000000000000 RBX: 00007f26c26344bb RCX: 00007f26c259f397
[  128.966989][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7bd4a770
[  128.967013][ T5620] RBP: 00007fff7bd4a770 R08: 00007fff7bd4b770 R09: 00000000ffffffff
[  128.967039][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7bd4b800
[  128.967064][ T5620] R13: 00007f26c26344bb R14: 000000000001f6fe R15: 00007fff7bd4b840
[  128.967114][ T5620]  </TASK>
[  129.006453][ T6132] XFS (loop5): Quotacheck needed: Please wait.
[  129.097220][ T5620] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.097346][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  129.097392][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  129.097416][ T5620] Call Trace:
[  129.097430][ T5620]  <TASK>
[  129.097445][ T5620]  dump_stack_lvl+0x100/0x190
[  129.097504][ T5620]  f2fs_stop_checkpoint+0x5e6/0xb30
[  129.097549][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.097597][ T5620]  ? errseq_set+0xe3/0x150
[  129.097646][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.097700][ T5620]  f2fs_write_end_bio+0xef9/0x12d0
[  129.097753][ T5620]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  129.097804][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.097857][ T5620]  ? find_held_lock+0x2b/0x80
[  129.097909][ T5620]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  129.097970][ T5620]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  129.098029][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.098084][ T5620]  f2fs_write_end_io+0xc8/0x240
[  129.098129][ T5620]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  129.098176][ T5620]  bio_endio+0x7ba/0x9c0
[  129.098241][ T5620]  submit_bio_noacct+0x22a/0x2130
[  129.098308][ T5620]  f2fs_submit_write_bio+0x133/0x330
[  129.098354][ T5620]  __submit_merged_bio+0x330/0x7b0
[  129.098401][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.098456][ T5620]  __submit_merged_write_cond+0x3fe/0x510
[  129.098516][ T5620]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  129.098577][ T5620]  ? __pfx___might_resched+0x10/0x10
[  129.098637][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.098684][ T5620]  ? folio_clear_dirty_for_io+0x178/0x960
[  129.098744][ T5620]  f2fs_write_cache_pages+0x20e9/0x2630
[  129.098822][ T5620]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  129.098880][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.098932][ T5620]  ? __bfs+0x150/0x2a0
[  129.098987][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099034][ T5620]  ? __lock_acquire+0x5c0/0x1f40
[  129.099070][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099116][ T5620]  ? __css_rstat_updated+0x1ce/0x590
[  129.099180][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099226][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.099298][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099344][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099390][ T5620]  ? __bfs+0x150/0x2a0
[  129.099474][ T5620]  ? check_noncircular+0x97/0x160
[  129.099540][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099587][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.099641][ T5620]  f2fs_write_data_pages+0x799/0x16d0
[  129.099697][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099745][ T5620]  ? is_bpf_text_address+0x8a/0x1a0
[  129.099797][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.099867][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.099914][ T5620]  ? lock_acquire+0x1d1/0x380
[  129.099949][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.100010][ T5620]  do_writepages+0x278/0x600
[  129.100068][ T5620]  ? __pfx_do_writepages+0x10/0x10
[  129.100119][ T5620]  ? do_raw_spin_unlock+0x145/0x1e0
[  129.100166][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.100212][ T5620]  ? _raw_spin_unlock+0x28/0x50
[  129.100275][ T5620]  filemap_writeback+0x22d/0x2e0
[  129.100333][ T5620]  ? __pfx_filemap_writeback+0x10/0x10
[  129.100438][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.100484][ T5620]  ? find_held_lock+0x2b/0x80
[  129.100534][ T5620]  ? f2fs_sync_dirty_inodes+0x38f/0x960
[  129.100592][ T5620]  ? f2fs_sync_dirty_inodes+0x38f/0x960
[  129.100648][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.100706][ T5620]  f2fs_sync_dirty_inodes+0x452/0x960
[  129.100780][ T5620]  block_operations+0x2a6/0xfc0
[  129.100847][ T5620]  ? __pfx_block_operations+0x10/0x10
[  129.100955][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101004][ T5620]  ? ktime_get+0x22c/0x320
[  129.101044][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101090][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.101145][ T5620]  f2fs_write_checkpoint+0x58b/0x53e0
[  129.101205][ T5620]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.101261][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101311][ T5620]  ? _raw_spin_unlock_irq+0x2e/0x50
[  129.101364][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101410][ T5620]  ? __wait_for_common+0x1f3/0x4c0
[  129.101468][ T5620]  ? __pfx_schedule_timeout+0x10/0x10
[  129.101519][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101565][ T5620]  ? do_raw_spin_lock+0x128/0x260
[  129.101613][ T5620]  ? __pfx___wait_for_common+0x10/0x10
[  129.101675][ T5620]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.101734][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101781][ T5620]  ? mark_held_locks+0x40/0x70
[  129.101824][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101870][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.101917][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.101964][ T5620]  ? kthread_stop+0x280/0x630
[  129.102020][ T5620]  kill_f2fs_super+0x3f1/0x4a0
[  129.102077][ T5620]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.102153][ T5620]  ? lockdep_hardirqs_on+0x7d/0x110
[  129.102213][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.102261][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.102324][ T5620]  deactivate_locked_super+0xbd/0x140
[  129.102381][ T5620]  deactivate_super+0xea/0x110
[  129.102436][ T5620]  cleanup_mnt+0x21f/0x450
[  129.102502][ T5620]  task_work_run+0x150/0x240
[  129.102560][ T5620]  ? __pfx_task_work_run+0x10/0x10
[  129.102621][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.102679][ T5620]  exit_to_user_mode_loop+0x1d8/0x700
[  129.102721][ T5620]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.102768][ T5620]  ? rcu_is_watching+0x13/0xc0
[  129.102821][ T5620]  do_syscall_64+0x661/0x790
[  129.102887][ T5620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.102927][ T5620] RIP: 0033:0x7f26c259f397
[  129.102958][ T5620] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  129.102997][ T5620] RSP: 002b:00007fff7bd4a6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.103035][ T5620] RAX: 0000000000000000 RBX: 00007f26c26344bb RCX: 00007f26c259f397
[  129.103061][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7bd4a770
[  129.103086][ T5620] RBP: 00007fff7bd4a770 R08: 00007fff7bd4b770 R09: 00000000ffffffff
[  129.103112][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7bd4b800
[  129.103138][ T5620] R13: 00007f26c26344bb R14: 000000000001f6fe R15: 00007fff7bd4b840
[  129.103189][ T5620]  </TASK>
[  129.159716][ T5620] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.305027][ T6132] XFS (loop5): Quotacheck: Done.
[  129.501704][ T5732] net_ratelimit: 83 callbacks suppressed
[  129.650590][ T5862] loop4: lost filesystem error report for type 5 error -108
[  129.993800][ T6148] NFSD: Unable to initialize client recovery tracking! (-110)
[  129.993822][ T6148] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  129.993841][ T6148] NFSD: starting 10-second grace period (net f000055d)
[  130.365986][ T5622] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.262078][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.412189][ T5904] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  131.417220][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.417259][ T5904] usb 5-1: Product: syz
[  131.417293][ T5904] usb 5-1: Manufacturer: syz
[  131.417321][ T5904] usb 5-1: SerialNumber: syz
[  131.890256][ T5904] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  131.910822][ T6179] NFSD: Unable to initialize client recovery tracking! (-110)
[  131.910846][ T6179] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  131.910865][ T6179] NFSD: starting 90-second grace period (net f000045d)
[  131.980856][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  132.070921][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  132.090890][ T5904] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  132.094260][ T5904] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  132.124291][ T5904] kalmia 5-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.4-1, Samsung Kalmia LTE USB dongle, aa:55:61:30:c1:3a
[  132.149203][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  132.149300][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  132.151903][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  132.155414][    T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  132.155463][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  132.155510][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  132.155608][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.187958][ T6208] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  132.243969][ T5862] usb 1-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[  132.250794][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.250842][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.250934][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.753848][ T5862] hid-sensor-hub 0003:8086:0000.0002: item fetching failed at offset 58/59
[  132.757089][ T5862] hid-sensor-hub 0003:8086:0000.0002: parse failed
[  132.757245][ T5862] hid-sensor-hub 0003:8086:0000.0002: probe with driver hid-sensor-hub failed with error -22
[  132.828164][ T5904] usb 5-1: USB disconnect, device number 3
[  132.870035][ T5904] kalmia 5-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.4-1, Samsung Kalmia LTE USB dongle
[  132.955357][ T5625] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  133.077245][   T25] usb 1-1: USB disconnect, device number 4
[  133.114011][ T5625] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  133.137421][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.137459][ T5625] usb 2-1: Product: syz
[  133.137486][ T5625] usb 2-1: Manufacturer: syz
[  133.137514][ T5625] usb 2-1: SerialNumber: syz
[  133.495583][    T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  133.526458][    T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input6
[  133.603982][ T6209] NFSD: Unable to initialize client recovery tracking! (-110)
[  133.604631][ T6209] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  133.604652][ T6209] NFSD: starting 90-second grace period (net f0000451)
[  133.911248][ T5625] usb 2-1: failed to set cport flags for port 0
[  133.911310][ T5625] greybus greybus1: 0/0:0: failed to enable host cport: -110
[  134.011965][ T5625] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110
[  134.037169][    T9] usb 6-1: USB disconnect, device number 3
[  134.037361][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  134.178650][ T5625] usb 2-1: USB disconnect, device number 3
[  134.654266][ T6252] PM: suspend entry (deep)
[  134.850753][    C1] net_ratelimit: 97 callbacks suppressed
[  134.947369][ T1115] Filesystems sync: 0.287 seconds
[  134.996974][ T6264] rdma_rxe: rxe_newlink: failed to add lo
[  135.194663][ T6260] NFSD: Failed to start, no listeners configured.
[  135.384566][ T6252] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  135.384780][ T6252] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.444955][ T6252] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.474777][ T6252] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  135.474945][ T6252] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  135.551245][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  135.629148][ T6252] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  135.679534][ T6252] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  135.682104][ T6252] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  135.706942][ T5904] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00
[  135.722403][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.756887][ T6252] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  135.837081][ T6252] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  135.845467][ T6252] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  135.895640][ T6252] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  135.926699][ T6252] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  135.926926][ T6252] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  135.962111][ T6252] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  136.034095][ T6252] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  136.034746][ T6252] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  136.043986][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  136.074887][ T6252] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  136.191721][   T25] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00
[  136.193347][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.277946][ T5904] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v1.10 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  136.920869][ T6278] NFSD: Unable to initialize client recovery tracking! (-110)
[  136.920899][ T6278] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  136.920950][ T6278] NFSD: starting 10-second grace period (net f000055d)
[  137.264407][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.375386][ T6288] svc: failed to register nfsdv3 RPC service (errno 512).
[  137.375644][ T6288] svc: failed to register nfsaclv3 RPC service (errno 512).
[  137.375666][ T6288] failed to unregister udp with rpcbind
[  137.375846][ T6288] svc: failed to register nfsdv3 RPC service (errno 97).
[  137.375914][ T6288] svc: failed to register nfsaclv3 RPC service (errno 97).
[  137.375934][ T6288] failed to unregister udp with rpcbind
[  137.427108][   T25] comedi comedi5: could not switch to alternate setting 1
[  137.427139][   T25] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device.
[  137.462536][ T5904] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device
[  137.462599][ T5904] arvo 0003:1E7D:30D4.0003: couldn't install keyboard
[  137.466014][   T25] usb 5-1: USB disconnect, device number 4
[  137.500899][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  137.515296][ T5904] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -71
[  137.570098][ T5904] usb 3-1: USB disconnect, device number 6
[  137.700980][ T6300] kobject: 'xprt-0-tcp' (ffff888055700b00): kobject_add_internal: parent: 'switch-0', set: 'sunrpc'
[  137.701360][ T6300] kobject: 'xprt-0-tcp' (ffff888055700b00): kobject_uevent_env
[  137.701456][ T6300] kobject: 'xprt-0-tcp' (ffff888055700b00): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp'
[  137.702129][    C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq
[  137.702165][    C0] kcov: kcov_start: t = ffff88801eee9f40, size = 262144, area = ffffc900022d2000
[  137.702213][    C0] kcov: kcov_move_area: ffffc90019513000 1048576 <= ffffc900022d2000 29
[  137.706582][ T6300] kobject: 'clnt-0' (ffff888055700680): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc'
[  137.706827][ T6300] kobject: 'clnt-0' (ffff888055700680): kobject_uevent_env
[  137.706920][ T6300] kobject: 'clnt-0' (ffff888055700680): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0'
[  137.707243][ T6300] kobject: 'clnt-1' (ffff888055700600): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc'
[  137.707488][ T6300] kobject: 'clnt-1' (ffff888055700600): kobject_uevent_env
[  137.707552][ T6300] kobject: 'clnt-1' (ffff888055700600): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  137.708473][ T6302] platform pcspkr: bus: 'platform': __driver_probe_device: matched device with driver ucsi_acpi
[  137.708579][ T6302] platform pcspkr: bus: 'platform': really_probe: probing driver ucsi_acpi with device
[  137.709034][ T6302] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000dd: 0000 [#1] SMP KASAN NOPTI
[  137.721664][ T4977] get_one_event: group=ffff888029ae6000 event=ffff888033f6e5c0
[  137.721699][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff888033f6e5c0
[  137.721731][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff888033f6e5c0
[  137.721772][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff888033f6e5c0
[  137.721812][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  137.726054][ T6217] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff88803879d578 mask=8000
[  137.726100][ T6217] fsnotify_insert_event: group=ffff888029ae6000 event=ffff888033f6e4c0
[  137.727118][ T4977] get_one_event: group=ffff888029ae6000 event=ffff888033f6e4c0
[  137.727152][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff888033f6e4c0
[  137.727184][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff888033f6e4c0
[  137.727213][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff888033f6e4c0
[  137.727253][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  137.860935][    C1] virtqueue callback for ffff888027078e00 (ffffffff86ead570)
[  137.870678][    C1] No more buffers in queue
[  137.871057][    C1] Receiving skb proto 0x0800 len 52 type 0
[  137.871094][    C1] No more buffers in queue
[  137.920803][    C1] eth0: xmit ffff88804a36c8c0 42:01:0a:80:00:01
[  137.920850][    C1] Added buffer head 43 to ffff888027078c00
[  137.920890][    C1] virtqueue callback for ffff888027078c00 (ffffffff86eb6320)
[  137.930666][    C1] Sent skb ffff88804a36c8c0
[  137.930722][    C1] No more buffers in queue
[  137.930745][    C1] No more buffers in queue
[  138.004536][ T6302] KASAN: null-ptr-deref in range [0x00000000000006e8-0x00000000000006ef]
[  138.012956][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT(full) 
[  138.022163][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  138.032217][ T6302] RIP: 0010:ucsi_acpi_probe+0x84/0x560
[  138.037710][ T6302] Code: 84 db 74 09 e8 3d b4 08 fa 49 8d 6d f0 e8 34 b4 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea
[  138.057327][ T6302] RSP: 0018:ffffc90006bdfb20 EFLAGS: 00010217
[  138.063431][ T6302] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000ecea000
[  138.071420][ T6302] RDX: 00000000000000dd RSI: ffffffff880359fc RDI: 00000000000006ec
[  138.079403][ T6302] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  138.087547][ T6302] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e709000
[  138.095519][ T6302] R13: 0000000000000000 R14: ffff88801e709430 R15: ffff88801e709070
[  138.103513][ T6302] FS:  00007ff7228636c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000
[  138.112449][ T6302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.119036][ T6302] CR2: 000000110c336dde CR3: 0000000026d5a000 CR4: 0000000000350ef0
[  138.127011][ T6302] Call Trace:
[  138.130290][ T6302]  <TASK>
[  138.133219][ T6302]  ? __pfx_ucsi_acpi_probe+0x10/0x10
[  138.138537][ T6302]  platform_probe+0x106/0x1d0
[  138.143228][ T6302]  ? __pfx_platform_probe+0x10/0x10
[  138.148460][ T6302]  really_probe+0x241/0xa60
[  138.152990][ T6302]  __driver_probe_device+0x210/0x460
[  138.158302][ T6302]  device_driver_attach+0xd1/0x220
[  138.163449][ T6302]  bind_store+0xf4/0x190
[  138.167705][ T6302]  ? __pfx_bind_store+0x10/0x10
[  138.172593][ T6302]  drv_attr_store+0x74/0xb0
[  138.177108][ T6302]  ? __pfx_drv_attr_store+0x10/0x10
[  138.182315][ T6302]  sysfs_kf_write+0xf2/0x150
[  138.186940][ T6302]  kernfs_fop_write_iter+0x3e0/0x5f0
[  138.192249][ T6302]  ? __pfx_sysfs_kf_write+0x10/0x10
[  138.197486][ T6302]  vfs_write+0x6af/0x1050
[  138.201840][ T6302]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  138.207675][ T6302]  ? __pfx_vfs_write+0x10/0x10
[  138.212466][ T6302]  ? find_held_lock+0x2b/0x80
[  138.217179][ T6302]  ksys_write+0x12a/0x250
[  138.221534][ T6302]  ? __pfx_ksys_write+0x10/0x10
[  138.226412][ T6302]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.232065][ T6302]  do_syscall_64+0x123/0x790
[  138.236690][ T6302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.242592][ T6302] RIP: 0033:0x7ff72199e159
[  138.247027][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  138.266644][ T6302] RSP: 002b:00007ff722863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.275069][ T6302] RAX: ffffffffffffffda RBX: 00007ff721c25fa0 RCX: 00007ff72199e159
[  138.283043][ T6302] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000005
[  138.291017][ T6302] RBP: 00007ff721a3506b R08: 0000000000000000 R09: 0000000000000000
[  138.298989][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.306958][ T6302] R13: 00007ff721c26038 R14: 00007ff721c25fa0 R15: 00007ffca428af58
[  138.314943][ T6302]  </TASK>
[  138.317959][ T6302] Modules linked in:
[  138.323000][    C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[  138.331860][    C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[  138.340514][ T6302] ---[ end trace 0000000000000000 ]---
[  138.343008][ T5631] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff888076b194b0 mask=8000
[  138.343056][ T5631] fsnotify_insert_event: group=ffff888029ae6000 event=ffff888033f6e540
[  138.344903][ T4977] get_one_event: group=ffff888029ae6000 event=ffff888033f6e540
[  138.344939][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff888033f6e540
[  138.344971][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff888033f6e540
[  138.345001][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff888033f6e540
[  138.345041][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  138.364800][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout
[  138.364828][ T4927] hci5: err 0x6e
[  138.364864][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.364886][ T4927] hci2: err 0x6e
[  138.364917][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.364938][ T4927] hci0: err 0x6e
[  138.364969][ T4927] hci5 cmd_cnt 1 cmd queued 2
[  138.364994][ T4927] hci5: skb ffff88802a742c80
[  138.365027][ T4927] hci5 type 1 len 6
[  138.365061][ T4927] hci2 cmd_cnt 1 cmd queued 2
[  138.365086][ T4927] hci2: skb ffff88802ecd0a00
[  138.365115][ T4927] hci2 type 1 len 6
[  138.365147][ T4927] hci0 cmd_cnt 1 cmd queued 2
[  138.365171][ T4927] hci0: skb ffff88802a6b58c0
[  138.365199][ T4927] hci0 type 1 len 6
[  138.365253][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout
[  138.365276][ T5627] hci4: err 0x6e
[  138.365306][ T5627] hci4 cmd_cnt 1 cmd queued 2
[  138.365331][ T5627] hci4: skb ffff88807c9d8c80
[  138.365361][ T5627] hci4 type 1 len 6
[  138.388416][ T5619] send_to_group: group=ffff888029ae6000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88801dab6080 data_type=2 dir=0000000000000000 cookie=0
[  138.388495][ T5619] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff888032692d48 mask=8
[  138.388708][ T5619] fsnotify_insert_event: group=ffff888029ae6000 event=ffff888033f6e440
[  138.389619][ T4977] get_one_event: group=ffff888029ae6000 event=ffff888033f6e440
[  138.389653][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff888033f6e440
[  138.389686][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff888033f6e440
[  138.389715][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff888033f6e440
[  138.389756][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  138.400799][ T4977] kobject: 'loop1' (ffff88802494dde0): kobject_uevent_env
[  138.400850][ T4977] kobject: 'loop1' (ffff88802494dde0): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  138.402743][ T6217] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff888032692d48 mask=8000
[  138.402795][ T6217] fsnotify_insert_event: group=ffff888029ae6000 event=ffff888033f6e3c0
[  138.407829][ T4977] get_one_event: group=ffff888029ae6000 event=ffff888033f6e3c0
[  138.407862][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff888033f6e3c0
[  138.407895][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff888033f6e3c0
[  138.407924][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff888033f6e3c0
[  138.407963][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  138.432229][ T6303] kcov: kcov_start: t = ffff88802274be80, size = 524288, area = ffffc9000f4ec000
[  138.432664][ T6304] kcov: kcov_start: t = ffff888022748000, size = 524288, area = ffffc900104f0000
[  138.456574][ T5626] kernfs switch: removing
[  138.456627][ T5626] kobject: 'clnt-1' (ffff888055700600): kobject_uevent_env
[  138.457075][ T5626] kobject: 'clnt-1' (ffff888055700600): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  138.457217][ T5626] kernfs rpc_version: removing
[  138.457264][ T5626] kernfs program: removing
[  138.457304][ T5626] kernfs max_connect: removing
[  138.457344][ T5626] kernfs clnt-1: removing
[  138.457381][ T5626] kobject: 'clnt-1' (ffff888055700600): kobject_cleanup, parent 0000000000000000
[  138.457417][ T5626] kobject: 'clnt-1' (ffff888055700600): calling ktype release
[  138.457456][ T5626] kobject: 'clnt-1': free name
[  138.457716][  T996] nvmet: ctrl 2 update keep-alive timer for 5 secs
[  138.457806][  T996] nvmet: ctrl 1 update keep-alive timer for 5 secs
[  138.463794][ T6303] kobject: 'nfsd_file' (ffff888076ed0e30): kobject_add_internal: parent: 'slab', set: 'slab'
[  138.467436][ T6303] kobject: 'nfsd_file_mark' (ffff888076ed0cf0): kobject_add_internal: parent: 'slab', set: 'slab'
[  138.506671][ T6300] kobject: 'switch-1' (ffff88805606b300): kobject_add_internal: parent: 'xprt-switches', set: 'sunrpc'
[  138.506806][ T6300] kobject: 'switch-1' (ffff88805606b300): kobject_uevent_env
[  138.506859][ T6300] kobject: 'switch-1' (ffff88805606b300): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1'
[  138.507132][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b980): kobject_add_internal: parent: 'switch-1', set: 'sunrpc'
[  138.507324][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b980): kobject_uevent_env
[  138.507380][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b980): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1/xprt-1-tcp'
[  138.507620][ T6300] kobject: 'clnt-1' (ffff88805606b900): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc'
[  138.507751][ T6300] kobject: 'clnt-1' (ffff88805606b900): kobject_uevent_env
[  138.507809][ T6300] kobject: 'clnt-1' (ffff88805606b900): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  138.508034][ T6300] kernfs switch: removing
[  138.508344][ T6300] kobject: 'clnt-1' (ffff88805606b900): kobject_uevent_env
[  138.508400][ T6300] kobject: 'clnt-1' (ffff88805606b900): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  138.509452][ T6300] kernfs rpc_version: removing
[  138.509504][ T6300] kernfs program: removing
[  138.509548][ T6300] kernfs max_connect: removing
[  138.509592][ T6300] kernfs clnt-1: removing
[  138.509634][ T6300] kobject: 'clnt-1' (ffff88805606b900): kobject_cleanup, parent 0000000000000000
[  138.509670][ T6300] kobject: 'clnt-1' (ffff88805606b900): calling ktype release
[  138.509709][ T6300] kobject: 'clnt-1': free name
[  138.509773][ T6300] kobject: 'switch-1' (ffff88805606b300): kobject_uevent_env
[  138.509832][ T6300] kobject: 'switch-1' (ffff88805606b300): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1'
[  138.509961][ T6300] kernfs xprt_switch_info: removing
[  138.510009][ T6300] kernfs add_xprt: removing
[  138.510053][ T6300] kernfs switch-1: removing
[  138.510330][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b980): kobject_uevent_env
[  138.510378][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b980): fill_kobj_path: path = '/switch-1/xprt-1-tcp'
[  138.510553][ T5626] kobject: 'switch-1' (ffff88805606b300): kobject_cleanup, parent 0000000000000000
[  138.510590][ T5626] kobject: 'switch-1' (ffff88805606b300): calling ktype release
[  138.510625][ T5626] kobject: 'switch-1': free name
[  138.510712][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b980): kobject_cleanup, parent 0000000000000000
[  138.510749][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b980): calling ktype release
[  138.510788][ T5626] kobject: 'xprt-1-tcp': free name
[  138.515294][ T6300] kobject: 'switch-1' (ffff88805606b080): kobject_add_internal: parent: 'xprt-switches', set: 'sunrpc'
[  138.516447][ T6300] kobject: 'switch-1' (ffff88805606b080): kobject_uevent_env
[  138.516501][ T6300] kobject: 'switch-1' (ffff88805606b080): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1'
[  138.516655][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b780): kobject_add_internal: parent: 'switch-1', set: 'sunrpc'
[  138.517426][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b780): kobject_uevent_env
[  138.517481][ T6300] kobject: 'xprt-1-tcp' (ffff88805606b780): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1/xprt-1-tcp'
[  138.517716][ T6300] kobject: 'clnt-1' (ffff88805606b880): kobject_add_internal: parent: 'rpc-clients', set: 'sunrpc'
[  138.519005][ T6300] kobject: 'clnt-1' (ffff88805606b880): kobject_uevent_env
[  138.519061][ T6300] kobject: 'clnt-1' (ffff88805606b880): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  138.532431][ T6271] kcov: kcov_task_exit: t = ffff88802caeddc0, kcov->t = ffff88802caeddc0
[  138.536241][ T6286] kcov: kcov_task_exit: t = ffff88802ecf8000, kcov->t = ffff88802ecf8000
[  138.558059][ T6305] kcov: kcov_start: t = ffff888033790000, size = 524288, area = ffffc900110f3000
[  138.597171][ T6304] kcov: kcov_task_exit: t = ffff888022748000, kcov->t = ffff888022748000
[  138.630732][ T6293] kcov: kcov_task_exit: t = ffff88802f961f40, kcov->t = ffff88802f961f40
[  138.632258][ T6294] kcov: kcov_task_exit: t = ffff888030909f40, kcov->t = ffff888030909f40
[  138.689234][ T6300] kobject: 'switch-1' (ffff88805606b080): kobject_uevent_env
[  138.689301][ T6300] kobject: 'switch-1' (ffff88805606b080): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-1'
[  138.689443][ T6300] kernfs xprt_switch_info: removing
[  138.689499][ T6300] kernfs add_xprt: removing
[  138.689757][ T6300] kernfs switch-1: removing
[  138.689970][ T5626] kernfs switch: removing
[  138.690010][ T5626] kobject: 'clnt-1' (ffff88805606b880): kobject_uevent_env
[  138.690073][ T5626] kobject: 'clnt-1' (ffff88805606b880): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-1'
[  138.690176][ T5626] kernfs rpc_version: removing
[  138.690239][ T5626] kernfs program: removing
[  138.690277][ T5626] kernfs max_connect: removing
[  138.690316][ T5626] kernfs clnt-1: removing
[  138.690353][ T5626] kobject: 'clnt-1' (ffff88805606b880): kobject_cleanup, parent 0000000000000000
[  138.690388][ T5626] kobject: 'clnt-1' (ffff88805606b880): calling ktype release
[  138.690423][ T5626] kobject: 'clnt-1': free name
[  138.690879][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b780): kobject_uevent_env
[  138.690927][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b780): fill_kobj_path: path = '/switch-1/xprt-1-tcp'
[  138.691223][ T5626] kobject: 'switch-1' (ffff88805606b080): kobject_cleanup, parent 0000000000000000
[  138.691259][ T5626] kobject: 'switch-1' (ffff88805606b080): calling ktype release
[  138.691292][ T5626] kobject: 'switch-1': free name
[  138.691319][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b780): kobject_cleanup, parent 0000000000000000
[  138.691353][ T5626] kobject: 'xprt-1-tcp' (ffff88805606b780): calling ktype release
[  138.691386][ T5626] kobject: 'xprt-1-tcp': free name
[  138.700541][ T6300] kcov: kcov_task_exit: t = ffff888036c11f40, kcov->t = ffff888036c11f40
[  138.702842][ T6305] kcov: kcov_task_exit: t = ffff888033790000, kcov->t = ffff888033790000
[  139.172031][    C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[  139.330782][    C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq
[  139.330820][    C0] kcov: kcov_start: t = ffff88801eee9f40, size = 262144, area = ffffc900022d2000
[  139.330865][    C0] kcov: kcov_move_area: ffffc90019513000 1048576 <= ffffc900022d2000 27
[  139.340773][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  139.340798][ T5627] hci1: err 0x6e
[  139.340831][ T5627] hci1 cmd_cnt 1 cmd queued 1
[  139.340856][ T5627] hci1: skb ffff888054195280
[  139.340903][ T5627] hci1 type 1 len 6
[  139.341122][ T5620] send_to_group: group=ffff888029ae6000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807f497c80 data_type=2 dir=0000000000000000 cookie=0
[  139.341182][ T5620] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff888032692ed8 mask=8
[  139.341227][ T5620] fsnotify_insert_event: group=ffff888029ae6000 event=ffff8880289be880
[  139.345928][ T4977] get_one_event: group=ffff888029ae6000 event=ffff8880289be880
[  139.345963][ T4977] fsnotify_remove_first_event: group=ffff888029ae6000 event=ffff8880289be880
[  139.345995][ T4977] inotify_read: group=ffff888029ae6000 kevent=ffff8880289be880
[  139.346026][ T4977] copy_event_to_user: group=ffff888029ae6000 event=ffff8880289be880
[  139.346066][ T4977] inotify_read: group=ffff888029ae6000 kevent=0000000000000000
[  139.347462][ T5618] send_to_group: group=ffff888029ae6000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807efcf580 data_type=2 dir=0000000000000000 cookie=0
[  139.347521][ T5618] inotify_handle_inode_event: group=ffff888029ae6000 mark=ffff888026e47898 mask=8
[  139.347564][ T5618] fsnotify_insert_event: group=ffff888029ae6000 event=ffff8880289be740
[  139.358263][ T6302] RIP: 0010:ucsi_acpi_probe+0x84/0x560
[  139.358330][ T6302] Code: 84 db 74 09 e8 3d b4 08 fa 49 8d 6d f0 e8 34 b4 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea
[  139.358370][ T6302] RSP: 0018:ffffc90006bdfb20 EFLAGS: 00010217
[  139.358402][ T6302] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000ecea000
[  139.358429][ T6302] RDX: 00000000000000dd RSI: ffffffff880359fc RDI: 00000000000006ec
[  139.358456][ T6302] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  139.358481][ T6302] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e709000
[  139.358506][ T6302] R13: 0000000000000000 R14: ffff88801e709430 R15: ffff88801e709070
[  139.358615][ T6302] FS:  00007ff7228636c0(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000
[  139.358653][ T6302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.358681][ T6302] CR2: 00007f8adedef2f8 CR3: 0000000026d5a000 CR4: 0000000000350ef0
[  139.358711][ T6302] Kernel panic - not syncing: Fatal exception
[  139.593779][ T6302] Kernel Offset: disabled
[  139.598100][ T6302] Rebooting in 86400 seconds..