last executing test programs:

3m54.791591986s ago: executing program 0 (id=1115):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000180)={[{@minixdf}, {}, {@i_version}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x9}}, {@nodelalloc}], [{@seclabel}]}, 0x3, 0x52d, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x2002, 0xa)

3m52.995619669s ago: executing program 0 (id=1122):
setpriority(0x0, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getrlimit(0x7, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x10888)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x271}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc96", 0xb6}], 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

3m51.655446771s ago: executing program 0 (id=1123):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = accept$alg(r1, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000100)

3m51.482073465s ago: executing program 0 (id=1126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000180)={{0x60000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0x4000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x4, 0x0, 0x4, 0x14, 0x81, 0x4, 0x13, 0x5, 0x4, 0x91, 0x80}, {0x9000, 0xeeef0000, 0xc, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0xd, 0x9}, {0xa000, 0x50000, 0xa, 0x9, 0xc8, 0x9, 0x7, 0xef, 0x2, 0x6e, 0x2, 0x7}, {0x4000, 0x10000, 0x8, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x9, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0x7c, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x4331, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x2, 0x8000000000000003, 0x3]})

3m51.26244082s ago: executing program 0 (id=1130):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r0=>0x0}, &(0x7f0000000340)=0xc)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000380)=[{r4, 0x3044}], 0x1, 0x0, 0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000640)='./dev/kmsg\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)

3m48.551945056s ago: executing program 0 (id=1146):
r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x6de, &(0x7f0000000200)="$eJzs3cFvHFcdB/DvrNcbbyjBbZO2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYXABQQnJA79AwqSbz0gJO5B4cKl3Hr1sRISl4hDVA6LZnbW3rXXXtuN7QQ+n2g8b+a9efOb37yZ2bWz2gD/t66cTfN+ilw5+9q9cnltda6ztjp3rK7uJCnLjaTZm6W4lRQPkvmyvhiYMjDf4sOly298+nDts95Ss56q9hM7bTfCiLYr9ZSZur+ZkVtO7nYXK3V4eSbJ1Xo+rLXbvoYalkk7U8/hyHW3WNnL5nu5boEnTP/pVPSem1tMJ8eTTG28Dqg0Di/Cg7GnuxwAAAA8pT65fdQRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNOn/v7/op4a9TwzKfrf/9/qr6vLT6D5Xbe8f6BxAAAAAAAAAMDh+PqjPMq9nOgvd4vqb/6nq4WT+bybfCnv5m4Wcyfnci8LWc5y7uRCkumBjlr3FpaX71xY37I0esuLI7e8eFhHDAAAAAAAAAD/k36Z9sbf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ElQJBO9WTWdrOeZTqOZjbqsJP9I0jrqePegGLXy/uHHAQAAAF/I1D62+cqjPMq9nOgvd4vqPf8L1fvlqbybW1nOUpbTyWKu1e+hy3f9jbXVuc7a6tzNciqXh/v9/r/2FEar7mGiWhq155eqFu1cz1K15lyuVsFcS6O37zPJS/14BuIa8EEZU/G92i4ja9ZpLXf2++1+i/BY3C+Tv66xQ8v2RnDJekZm69ga+U9dvVpUv6hJNmdi7NlpDi1NV71Oru/pQhrrv/k5eQA5P17Py+P5zYHmfK/WM9FoVZm4WJ2nKsd5YedMJN/4y8dv3ujcevvG9btnn5xDGmNim/Wbx8Rc/zpM8uJTnYnmHtvPVpk4tb58JT/KT3I2M3k9d7KUn2Yhy1lMt65fqMdz+XN650zNDy29Pi6SVn1eeudsNzHN5IdVaSGnq21PZClFbudaFvNq9e9iLuTbuZRLuTxwhk9tG3d1bNVV39h81ffP9F9HBn/mm3WhvLv9duMuN7/TEW83Oh+X3r2/zOuzA3ntjfqH662eHbgOZgey9Fw/O5MjO9/PvbH51bpQ7uNXY54Th2u6zkR5AfWfEv3onu9lolk9i7aO8z90y+3SudXt3lh4Z5v+VzYtv1LPy2G1+rVxrZN8vJ+j2o9yvDyXqfpOMjw6yrrn1+8yA3XdjbHcqxt+4pbbnarqiqJ/pf44t6sBsPVKbdWv4bb2dLGqe3Fk3VxVV77San65H8vA663cTifXDiuJAOzR399cL07neKv9z/Yn7Y/av27faL829YNj3zn2ciuTf5v8bnN24pXGy8Wf81F+vvH+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L+7773/9kKns3hndKGxfdVQoZ3Na8b1vKlQ1F/os7etxhQm8nj62UdhKsnQmup7jg49jPbmMLYUur9IDj0//S8RHN3md2WhuWVEjSrMD63509YOP9hjhMXurosDLDQOedBOZPQAOMKbEnAozi/ffOf83ffe/9bSzYW3Ft9avDV56dLl2cuXXp07f32pszjb+3nUUQIHYeOhf9SRAAAAAAAAAAAAALs16oMBp58Z96GRXX3Gw/8sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6LK2fTvJ8iF2bPzZbLa6tznXLqlzdaNpM0Gknxs6R4kMynN2V6oLsif3yQ7oj9fLh0+Y1PH659ttFXs9c+adTz7e1cm2SlnjKTZKKeb6s1rrvh/q6O62+s4t/9YygT9nm3253/Qv3BY/LfAAAA//94gvPY")
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000900)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x100)
flistxattr(r1, &(0x7f0000000940)=""/19, 0x13)

3m48.39648265s ago: executing program 32 (id=1146):
r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x6de, &(0x7f0000000200)="$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")
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000900)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x100)
flistxattr(r1, &(0x7f0000000940)=""/19, 0x13)

1m44.019321961s ago: executing program 4 (id=1913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x8b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94)

1m43.786909826s ago: executing program 4 (id=1914):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
sendmsg$inet6(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000840)="e5", 0x1}], 0x1}, 0x4000)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
syz_mount_image$xfs(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x4000002, &(0x7f0000000a80)={[{@pquota}, {}, {@prjquota}, {@gquota}, {@nogrpid}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000007140)="$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")
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c)

1m41.442489043s ago: executing program 4 (id=1933):
setpriority(0x0, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getrlimit(0x7, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x10888)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x271}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c484", 0xb1}], 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

1m38.416963436s ago: executing program 4 (id=1956):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
rename(&(0x7f000000b880)='./file2\x00', &(0x7f000000b8c0)='./file0/file0\x00')
open(&(0x7f000000b900)='./bus\x00', 0x400141042, 0x2a)
syz_mount_image$fuse(0x0, &(0x7f000000b940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f000000b980)='./file0\x00', &(0x7f000000b9c0), 0x0, &(0x7f000000ba00)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f000000ba40), &(0x7f000000ba80)='./file0\x00', 0x40000, &(0x7f000000bac0)=ANY=[], 0x1, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
creat(&(0x7f000000bb00)='./bus\x00', 0x0)

1m37.439951959s ago: executing program 4 (id=1964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002500)=@o_path={&(0x7f0000002540)='./file0\x00', 0x0, 0x4000}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000002640)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000026c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000027c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000002800)='mounts\x00')
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000002940)="04", 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000029c0)=0x237a, 0x3)
recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020)

1m36.295151547s ago: executing program 4 (id=1968):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='+p', 0x2)
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)

1m35.878061607s ago: executing program 33 (id=1968):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='+p', 0x2)
r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)

31.239336077s ago: executing program 5 (id=2323):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/regulator/regulator_summary\x00', 0x802, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020)

31.08273727s ago: executing program 5 (id=2325):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0x603, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRESDEC=r0], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x2406c051)
sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="020000"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0xc084)

30.923881764s ago: executing program 5 (id=2327):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
sendto$packet(r1, &(0x7f0000000800)="003d80", 0x3, 0x20040081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @remote}, 0x14)

28.882515123s ago: executing program 5 (id=2334):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r2}, 0xc)

28.723238497s ago: executing program 5 (id=2337):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

27.285573952s ago: executing program 5 (id=2340):
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
pipe2$9p(0x0, 0x1000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0)
syz_clone3(&(0x7f0000000240)={0x29c0080, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x1d}, &(0x7f0000000380)=""/144, 0x90, &(0x7f0000000440)=""/60, &(0x7f0000000480)=[0x0, 0x0], 0x2, {r0}}, 0x58)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x2000c10, &(0x7f0000000540), 0xff, 0x23f, &(0x7f0000000580)="$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")
r3 = open(&(0x7f00000007c0)='.\x00', 0x8000, 0x112)
getdents(r3, 0x0, 0x0)

12.527483678s ago: executing program 6 (id=2382):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
keyctl$link(0x8, 0x0, 0x0)

12.333936353s ago: executing program 34 (id=2340):
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
pipe2$9p(0x0, 0x1000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0)
syz_clone3(&(0x7f0000000240)={0x29c0080, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x1d}, &(0x7f0000000380)=""/144, 0x90, &(0x7f0000000440)=""/60, &(0x7f0000000480)=[0x0, 0x0], 0x2, {r0}}, 0x58)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x2000c10, &(0x7f0000000540), 0xff, 0x23f, &(0x7f0000000580)="$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")
r3 = open(&(0x7f00000007c0)='.\x00', 0x8000, 0x112)
getdents(r3, 0x0, 0x0)

11.464786904s ago: executing program 6 (id=2394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x8, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x10, &(0x7f0000000340)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.255121419s ago: executing program 6 (id=2395):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_pidfd_open(r0, 0x0)
ptrace$cont(0x1f, r0, 0x5, 0x0)

11.133238582s ago: executing program 6 (id=2397):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000780)=[{&(0x7f0000000b80)}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000cc0)={@multicast2, @loopback, @empty}, 0xc)

10.832424109s ago: executing program 6 (id=2400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1af)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
capset(&(0x7f0000000700)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200004, 0x4, 0x0, 0x800000, 0xfff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd0a, &(0x7f0000000a80)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061746830")

10.655075233s ago: executing program 6 (id=2403):
mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./proc\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f00000016c0)='./proc\x00', &(0x7f0000001700)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0)
write(r0, &(0x7f0000001780)='27', 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
mremap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005d3000/0x3000)=nil)

6.539901153s ago: executing program 1 (id=2407):
r0 = socket(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000100), 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

6.361957746s ago: executing program 3 (id=2408):
chdir(&(0x7f0000001400)='./file0\x00')
r0 = syz_ublk_setup_io_uring(0x277c, 0x0, &(0x7f0000001980), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001a40)=0x4)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001a80)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
syz_mount_image$ext4(&(0x7f0000001ac0)='ext4\x00', &(0x7f0000001b00)='./file1\x00', 0x200000, &(0x7f0000001b40)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001cc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000002240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000022c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000023c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002400), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./file1\x00', 0x141442, 0x40)
listen(0xffffffffffffffff, 0x67)
fallocate(r4, 0x0, 0xfff, 0x9)
write$uinput_user_dev(r4, &(0x7f0000002800)={'syz0\x00', {0x8001, 0x2, 0x9}, 0x26, [0x2, 0x79, 0x2, 0x8, 0x0, 0x4, 0x8, 0x802, 0x2, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0x705, 0xffffffff, 0x1, 0x3, 0x0, 0xe, 0x5, 0x800009, 0x9, 0x1, 0x5dcf10b0, 0xfffff075, 0x1, 0xe16, 0x6, 0xe, 0x7, 0x7fffffff, 0x7c, 0x0, 0x4, 0x9, 0x1d49cc9e, 0x5, 0xffff, 0xa93, 0xc, 0x4, 0xfffffff9, 0x5, 0x0, 0x0, 0x54, 0x100, 0x7, 0x1, 0x4000009, 0x1, 0xf, 0x62c4, 0xffff8001, 0x3, 0x6, 0x1, 0x9, 0x80, 0xc, 0x3ff3, 0x5], [0x5, 0x4, 0x0, 0x5, 0x8000, 0x9, 0x21, 0x8, 0xff, 0x4, 0x100001, 0x1200000, 0x71, 0x3, 0xa, 0xffff, 0xffff, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x6, 0xfffffffb, 0x7, 0x145, 0x8, 0x0, 0x6, 0x3ff, 0x2, 0x7, 0xe366, 0x2000000, 0x1, 0x400, 0x2, 0x0, 0x3, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0x7, 0x0, 0xa4, 0x5, 0xc, 0xfffc, 0x5, 0x1, 0xbf, 0x4, 0x5, 0x6, 0x8, 0x3, 0xfffffff0, 0x5, 0x6, 0x5, 0x4], [0x6, 0x2, 0x2, 0x1000, 0x81, 0x9, 0xa887, 0xf085, 0xa, 0xffffefff, 0x9, 0x897, 0xfffffff9, 0x81, 0x7, 0x8, 0x8, 0x99a, 0x8, 0x3, 0xffff, 0xb6c2, 0x8, 0x8, 0x10001, 0x2, 0x7, 0x3, 0x2, 0x3, 0x6c, 0xd49, 0xf, 0x401, 0x6, 0x0, 0x8, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2, 0x2e3e1caa, 0x3, 0x7, 0x7fff, 0x0, 0x8001, 0x0, 0xee33, 0x3, 0x1, 0xa9e, 0xfffffffb, 0x7, 0xc, 0x0, 0x4, 0x5, 0xa, 0x4, 0x400, 0x1], [0x4, 0x7, 0x7, 0xfffffff6, 0x6, 0x9, 0x8001, 0x6, 0x10001, 0x6, 0x2, 0x44, 0x10, 0x7, 0x8, 0xfe, 0x5e, 0x8, 0xeb, 0x4, 0x1, 0x9, 0xc, 0x3, 0x3, 0x3, 0x5, 0x24, 0x1, 0x6, 0x4, 0x81, 0x288, 0xfffffff8, 0x9, 0xacb, 0x8, 0xff, 0x2, 0xb5, 0x10, 0x11, 0x9, 0x8, 0x9cf, 0x0, 0x1, 0x8, 0xfffffc94, 0x3, 0x1e0d, 0x2a, 0x8, 0x8001, 0x800447d, 0x9, 0x5, 0xa1d1, 0x8, 0x6, 0x7ff, 0xfff, 0x6, 0x3f6]}, 0x45c)
renameat2(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.807163324s ago: executing program 1 (id=2410):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d05, &(0x7f0000000380))

4.698401197s ago: executing program 3 (id=2411):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00')
exit(0xffff)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')

4.678961887s ago: executing program 1 (id=2412):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/244, 0x45}], 0x3}, 0x10009}], 0x1, 0x10000, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="a603418c2122b97d1414260a2a66d7", 0xf}], 0x1}}], 0x2, 0x20e8086)
sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10)

4.358606125s ago: executing program 2 (id=2415):
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x79})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x1000001, 0x0, 0x3, 0x3}, &(0x7f0000000200)={0x1c, 0x800, 0x403, 0x0, 0x5, 0xafe, 0x80000000000000}, 0x0, 0x0, 0x0)

4.261104478s ago: executing program 2 (id=2416):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001b00)='./file7\x00', 0x101042, 0x40)
renameat2(0xffffffffffffff9c, &(0x7f0000001b80)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000001bc0)='./file1\x00', 0x0)

4.067240412s ago: executing program 2 (id=2417):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000580)=0x8, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x2404c854, &(0x7f00000005c0)={0xa, 0x6, 0x2, @loopback, 0x7}, 0x1c)

4.014832644s ago: executing program 2 (id=2418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20040400)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0})
flock(r0, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
flock(0xffffffffffffffff, 0x1)

3.711977081s ago: executing program 3 (id=2419):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
io_setup(0x0, &(0x7f00000001c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_pidfd_open(r0, 0x0)
setns(r3, 0x24020000)
r4 = syz_create_resource$futex(&(0x7f0000000280))
futex(r4, 0xc, 0x1, 0x0, 0x0, 0x1)
r5 = syz_create_resource$futex(&(0x7f0000004680)=0x1)
r6 = syz_create_resource$futex(&(0x7f00000046c0)=0x1)
futex(r6, 0xc, 0x1, 0x0, r5, 0x1)
syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000004700)={0x1, &(0x7f0000004740)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
setns(0xc9, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x46042, 0x179)
preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000300)=""/249, 0xf9}], 0x1, 0x8e1, 0x1, 0x8)
clock_gettime(0x0, &(0x7f0000004600))

3.643060472s ago: executing program 1 (id=2420):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005})
ioctl$TIOCL_PASTESEL(r3, 0x541c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008)
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/kallsyms\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0x2020)
pread64(r5, &(0x7f0000004500)=""/82, 0x52, 0x10001)
ioprio_get$uid(0x3, 0x0)

856.14855ms ago: executing program 2 (id=2421):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000200)={[{@noquota}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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")
chdir(0x0)
r0 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x41009432, &(0x7f0000000000)=@v1={0x0, @aes256, 0x0, @auto="b51ade3aa377949f"})

740.290223ms ago: executing program 1 (id=2422):
setpriority(0x0, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getrlimit(0x7, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x10888)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x25e}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc96", 0xb6}], 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

738.548943ms ago: executing program 3 (id=2423):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=ANY=[], 0x1015, 0x0)
timer_create(0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x3032, 0xffffffffffffffff, 0xd27e4000)
pipe(&(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000266000/0x1000)=nil, 0x1000, &(0x7f0000000380)='%.]\x00')
r0 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f00000004c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='-cpu -pids'], 0xb)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x3)

453.149839ms ago: executing program 2 (id=2424):
r0 = semget$private(0x0, 0x4000000009, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0xc41a, &(0x7f00000001c0)={[], [], 0x2c}, 0x1, 0x477, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000780)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000940)='net/wireless\x00')
execveat$binfmt(r1, 0x0, 0x0, 0x0, 0x100)
read$FUSE(r6, &(0x7f0000000c80)={0x2020}, 0x2020)
syz_mount_image$ext4(&(0x7f0000002cc0)='ext4\x00', &(0x7f0000002d00)='./file1\x00', 0x400, &(0x7f0000002d40), 0x2, 0x790, &(0x7f0000002d80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x80442, 0x67)

450.964819ms ago: executing program 3 (id=2425):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r2}, 0xc)

215.086055ms ago: executing program 3 (id=2426):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_usb_connect(0x3, 0x34, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f00000007c0)=0x2000000, &(0x7f0000000800)=r1}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000880)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
mkdir(&(0x7f0000000940)='./sys_mount\x00', 0x0)
mount(0x0, &(0x7f0000000980)='./sys_mount\x00', &(0x7f00000009c0)='sysfs\x00', 0x10000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0)
timer_create(0x7, &(0x7f0000000a40)={0x0, 0x1b, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000b80))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000001c40)={0x5, 0xfffeffff, 0xff7ffff0, 0x6, 0x26, "5865677990831a243d4f25b9b8489e9a1cebb1"})
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000001c80)={0xffe, 0x80000009, 0x5, 0x2f, 0x40, "9614f403854fe9798da11806ce94cb15ea6264", 0x4, 0x1})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendfile(r5, r5, 0x0, 0x8)
readlink(0x0, &(0x7f00000004c0)=""/83, 0x53)

0s ago: executing program 1 (id=2427):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key(&(0x7f00000015c0)='asymmetric\x00', 0x0, &(0x7f0000002c00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000003180)={r1}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.002707][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  133.071025][ T5201] loop4: detected capacity change from 0 to 128
[  133.222137][ T5201] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  134.355173][ T5217] loop1: detected capacity change from 0 to 2048
[  134.407369][ T5217] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  134.451966][ T2298] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.469332][ T5217] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  134.542870][ T5217] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  134.599688][ T5217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.711923][ T2298] usb 5-1: Using ep0 maxpacket: 32
[  134.872266][ T2298] usb 5-1: unable to get BOS descriptor or descriptor too short
[  135.032427][ T2298] usb 5-1: unable to read config index 0 descriptor/start: -71
[  135.154436][ T2298] usb 5-1: can't read configurations, error -71
[  135.668803][ T5236] loop0: detected capacity change from 0 to 1024
[  135.793856][ T5236] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  136.468618][ T5235] loop4: detected capacity change from 0 to 4096
[  136.715085][ T5235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.868000][ T5242] loop2: detected capacity change from 0 to 128
[  136.915105][ T5242] FAT-fs (loop2): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  138.636142][ T5261] loop2: detected capacity change from 0 to 512
[  138.885825][ T5261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  138.928073][ T5261] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  139.034744][ T5261] loop2: detected capacity change from 0 to 512
[  139.067961][ T5261] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.281: iget: bad extended attribute block 6
[  139.111658][ T5261] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.281: couldn't read orphan inode 15 (err -117)
[  139.175902][ T5261] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000007ffffffd,nombcache,nogrpid,noload,noquota,auto_da_alloc,,errors=continue. Quota mode: none.
[  139.212551][ T1110] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  139.462293][ T1110] usb 2-1: Using ep0 maxpacket: 8
[  139.504940][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.512631][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.753514][ T5275] FAULT_INJECTION: forcing a failure.
[  139.753514][ T5275] name failslab, interval 1, probability 0, space 0, times 1
[  139.777954][ T5275] CPU: 0 PID: 5275 Comm: syz.4.285 Not tainted syzkaller #0
[  139.785307][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  139.795381][ T5275] Call Trace:
[  139.799023][ T5275]  <TASK>
[  139.802073][ T5275]  dump_stack_lvl+0x188/0x250
[  139.806960][ T5275]  ? show_regs_print_info+0x20/0x20
[  139.812181][ T5275]  ? load_image+0x410/0x410
[  139.816738][ T5275]  ? __might_sleep+0xf0/0xf0
[  139.821356][ T5275]  ? __lock_acquire+0x7d40/0x7d40
[  139.826415][ T5275]  should_fail+0x383/0x4b0
[  139.831047][ T5275]  should_failslab+0x5/0x20
[  139.836047][ T5275]  slab_pre_alloc_hook+0x51/0xc0
[  139.841590][ T5275]  ? security_file_alloc+0x30/0x110
[  139.846856][ T5275]  kmem_cache_alloc+0x3d/0x280
[  139.851812][ T5275]  ? rcu_is_watching+0x11/0xa0
[  139.858257][ T5275]  security_file_alloc+0x30/0x110
[  139.864193][ T5275]  __alloc_file+0xc2/0x240
[  139.868839][ T5275]  alloc_empty_file+0x90/0x180
[  139.873676][ T5275]  alloc_file+0x5c/0x510
[  139.878412][ T5275]  ? do_raw_spin_unlock+0x11d/0x230
[  139.884239][ T5275]  alloc_file_pseudo+0x180/0x200
[  139.890134][ T5275]  ? alloc_empty_file_noaccount+0x80/0x80
[  139.896135][ T5275]  ? _raw_spin_unlock+0x24/0x40
[  139.901892][ T5275]  __anon_inode_getfd+0x26b/0x3d0
[  139.907902][ T5275]  ? anon_inode_getfd+0x40/0x40
[  139.912832][ T5275]  ? bpf_lsm_capable+0x5/0x10
[  139.917561][ T5275]  ? security_capable+0x85/0xb0
[  139.922711][ T5275]  __se_sys_fanotify_init+0x68c/0x7b0
[  139.928222][ T5275]  do_syscall_64+0x4c/0xa0
[  139.932660][ T5275]  ? clear_bhb_loop+0x30/0x80
[  139.937355][ T5275]  ? clear_bhb_loop+0x30/0x80
[  139.942056][ T5275]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  139.948080][ T5275] RIP: 0033:0x7f8dc26a4559
[  139.952604][ T5275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.972493][ T5275] RSP: 002b:00007f8dc08fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  139.981025][ T5275] RAX: ffffffffffffffda RBX: 00007f8dc292bfa0 RCX: 00007f8dc26a4559
[  139.989104][ T5275] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010
[  139.997096][ T5275] RBP: 00007f8dc273bab8 R08: 0000000000000000 R09: 0000000000000000
[  140.005696][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.015252][ T5275] R13: 00007f8dc292c038 R14: 00007f8dc292bfa0 R15: 00007ffe4d92b718
[  140.023462][ T5275]  </TASK>
[  140.178553][ T1110] usb 2-1: unable to get BOS descriptor or descriptor too short
[  140.412159][ T1110] usb 2-1: config 5 has an invalid interface number: 218 but max is 0
[  140.421088][ T1110] usb 2-1: config 5 has no interface number 0
[  140.428450][ T1110] usb 2-1: config 5 interface 218 has no altsetting 0
[  140.871502][ T5240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.974662][ T5240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.072142][ T1110] usb 2-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=dc.40
[  141.088202][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.096664][ T1110] usb 2-1: Product: syz
[  141.100957][ T1110] usb 2-1: Manufacturer: syz
[  141.106108][ T1110] usb 2-1: SerialNumber: syz
[  141.453595][ T1110] usb 2-1: USB disconnect, device number 9
[  141.547392][ T5240] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.557725][ T5240] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.568428][ T5240] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.577870][ T5240] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.228404][ T5312] loop1: detected capacity change from 0 to 256
[  142.769482][ T5321] loop1: detected capacity change from 0 to 2048
[  142.997412][ T5321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  143.129235][ T5332] loop0: detected capacity change from 0 to 2048
[  143.568901][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.574641][ T5376] loop0: detected capacity change from 0 to 512
[  145.766429][ T5386] sch_tbf: burst 19871 is lower than device lo mtu (65550) !
[  145.787003][ T5386] netem: change failed
[  145.806331][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'.
[  145.852439][ T5393] loop1: detected capacity change from 0 to 128
[  145.891484][ T5393] FAT-fs (loop1): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  146.074812][ T5401] loop1: detected capacity change from 0 to 1024
[  148.115347][ T5430] loop4: detected capacity change from 0 to 128
[  148.148467][ T5430] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  148.201665][ T5436] loop1: detected capacity change from 0 to 16
[  148.266500][ T5439] loop0: detected capacity change from 0 to 256
[  148.286010][ T5436] erofs: (device loop1): mounted with root inode @ nid 36.
[  148.326166][ T5436] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  148.372633][ T5436] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  148.420929][ T5436] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  148.617165][ T5439] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  150.894573][ T5469] binder: BINDER_SET_CONTEXT_MGR already set
[  150.974756][ T5469] binder: 5468:5469 ioctl 4018620d 200000004a80 returned -16
[  150.998890][ T5473] netlink: 'syz.2.360': attribute type 15 has an invalid length.
[  151.019871][ T5474] loop4: detected capacity change from 0 to 128
[  151.035047][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'.
[  151.111936][ T5476] loop0: detected capacity change from 0 to 512
[  151.135264][ T5474] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  151.146723][ T5478] loop1: detected capacity change from 0 to 256
[  151.193269][ T5476] EXT4-fs (loop0): failed to initialize system zone (-117)
[  151.201294][ T5476] EXT4-fs (loop0): mount failed
[  151.243710][ T5478] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  151.766588][ T5488] loop0: detected capacity change from 0 to 2048
[  152.241043][ T5488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.352852][ T5501] loop4: detected capacity change from 0 to 2048
[  153.438254][ T5501] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  153.556132][ T5501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.531158][ T5521] loop1: detected capacity change from 0 to 256
[  154.693508][ T5523] loop0: detected capacity change from 0 to 128
[  154.784929][ T5521] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  154.836178][ T5523] FAT-fs (loop0): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  155.061460][ T5528] loop4: detected capacity change from 0 to 128
[  155.172656][ T5528] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodioread_nolock,,errors=continue. Quota mode: none.
[  155.195541][ T5532] loop1: detected capacity change from 0 to 1024
[  155.340311][ T5532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.387381][ T5558] loop0: detected capacity change from 0 to 256
[  157.460863][ T5567] loop1: detected capacity change from 0 to 512
[  157.479819][ T5558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  157.869842][ T5567] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.124235][ T5567] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  158.618289][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'.
[  159.277011][ T5594] loop4: detected capacity change from 0 to 128
[  159.392190][ T5593] smpboot: CPU 1 is now offline
[  159.667815][ T5594] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  164.940078][ T5687] device lo entered promiscuous mode
[  164.983022][ T5685] device lo left promiscuous mode
[  165.105369][ T5693] loop0: detected capacity change from 0 to 512
[  165.390927][ T5693] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.864806][ T5693] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.447: bad orphan inode 13
[  166.018407][ T5693] ext4_test_bit(bit=12, block=18) = 1
[  166.031074][ T5693] is_bad_inode(inode)=0
[  166.043060][ T5693] NEXT_ORPHAN(inode)=0
[  166.054702][ T5693] max_ino=32
[  166.063269][ T5693] i_nlink=1
[  166.069713][ T5693] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.672359][ T5707] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  168.816520][ T5758] loop4: detected capacity change from 0 to 256
[  168.912752][ T5758] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  169.401312][ T5758] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.393656][ T5846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[  172.532905][ T5847] loop0: detected capacity change from 0 to 512
[  172.549656][ T5846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[  172.866570][ T5847] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.899174][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[  172.935370][ T5852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[  172.961254][ T5847] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.508: bad orphan inode 13
[  173.021200][ T5847] ext4_test_bit(bit=12, block=18) = 1
[  173.057405][ T5847] is_bad_inode(inode)=0
[  173.085698][ T5847] NEXT_ORPHAN(inode)=0
[  173.110129][ T5847] max_ino=32
[  173.135956][ T5847] i_nlink=1
[  173.155369][ T5847] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.050714][ T5882] loop4: detected capacity change from 0 to 512
[  174.129526][ T5882] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  174.272131][ T5887] netlink: 830 bytes leftover after parsing attributes in process `syz.3.524'.
[  174.281315][ T5859] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  174.346576][ T5882] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.522: bad orphan inode 13
[  174.480885][ T5882] ext4_test_bit(bit=12, block=18) = 1
[  174.521550][ T5882] is_bad_inode(inode)=0
[  174.525823][ T5882] NEXT_ORPHAN(inode)=0
[  174.614681][ T5882] max_ino=32
[  174.638312][ T5882] i_nlink=1
[  174.670446][ T5882] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.650037][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'.
[  177.637933][ T5947] netlink: 15051 bytes leftover after parsing attributes in process `syz.4.546'.
[  180.888275][ T6039] device lo entered promiscuous mode
[  181.206339][ T6036] device lo left promiscuous mode
[  181.539274][ T6049] loop0: detected capacity change from 0 to 256
[  181.578546][ T6049] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.731278][ T6049] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.526668][ T6089] syz.1.587 uses obsolete (PF_INET,SOCK_PACKET)
[  185.721309][ T4524] Bluetooth: hci1: command 0x0406 tx timeout
[  186.294259][ T4280] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  186.318191][ T4524] Bluetooth: hci2: command 0x0406 tx timeout
[  186.442143][ T4524] Bluetooth: hci0: command 0x0406 tx timeout
[  186.459822][ T4530] Bluetooth: hci3: command 0x0406 tx timeout
[  186.471026][ T4530] Bluetooth: hci4: command 0x0406 tx timeout
[  186.732066][ T4280] usb 5-1: not running at top speed; connect to a high speed hub
[  186.844758][ T4280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.006119][ T4280] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  187.040727][ T4280] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  187.079207][ T4280] usb 5-1: Product: syz
[  187.095675][ T4280] usb 5-1: Manufacturer: syz
[  187.156288][ T4280] usb 5-1: Found UVC 1.00 device syz (225a:e1d4)
[  187.301617][ T4280] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  187.622790][ T4280] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  187.665358][ T4280] uvcvideo 5-1:1.1: Failed to initialize the device (-5).
[  188.723853][ T4280] usb 5-1: USB disconnect, device number 8
[  190.421147][ T6155] netlink: 88 bytes leftover after parsing attributes in process `syz.0.609'.
[  190.646176][ T6163] netlink: 76 bytes leftover after parsing attributes in process `syz.0.614'.
[  192.157944][ T6201] loop4: detected capacity change from 0 to 512
[  192.223011][ T6201] EXT4-fs (loop4): invalid inodes per group: 0
[  192.223011][ T6201] 
[  193.181039][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  193.190822][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  193.231439][ T6228] loop4: detected capacity change from 0 to 1024
[  193.286830][ T6228] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  197.876716][ T6289] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  198.038932][ T6289] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  199.444064][ T6315] loop0: detected capacity change from 0 to 1024
[  200.491276][ T6315] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  201.225484][ T6315] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none.
[  202.215866][ T6315] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  202.704820][ T6373] loop4: detected capacity change from 0 to 512
[  202.848921][ T6373] EXT4-fs (loop4): invalid inodes per group: 0
[  202.848921][ T6373] 
[  203.000972][ T6315] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  204.045651][ T6396] device lo entered promiscuous mode
[  204.155763][ T6395] device lo left promiscuous mode
[  208.477334][ T6439] device lo entered promiscuous mode
[  208.528604][ T6440] loop0: detected capacity change from 0 to 512
[  208.537404][ T6438] device lo left promiscuous mode
[  208.988179][ T6440] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  211.926889][ T6460] loop4: detected capacity change from 0 to 128
[  212.046720][ T6460] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  218.669315][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.676834][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.747116][ T6532] device bridge_slave_1 left promiscuous mode
[  218.817214][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.873367][ T6532] device bridge_slave_0 left promiscuous mode
[  218.978596][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.475016][ T6546] loop4: detected capacity change from 0 to 128
[  219.542172][ T6546] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[  220.052146][ T6560] FAULT_INJECTION: forcing a failure.
[  220.052146][ T6560] name failslab, interval 1, probability 0, space 0, times 0
[  220.272219][ T6560] CPU: 0 PID: 6560 Comm: syz.4.769 Not tainted syzkaller #0
[  220.279555][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  220.289969][ T6560] Call Trace:
[  220.293579][ T6560]  <TASK>
[  220.296555][ T6560]  dump_stack_lvl+0x188/0x250
[  220.301566][ T6560]  ? show_regs_print_info+0x20/0x20
[  220.306964][ T6560]  ? load_image+0x410/0x410
[  220.311470][ T6560]  ? __lock_acquire+0x7d40/0x7d40
[  220.316555][ T6560]  should_fail+0x383/0x4b0
[  220.320967][ T6560]  should_failslab+0x5/0x20
[  220.325484][ T6560]  slab_pre_alloc_hook+0x51/0xc0
[  220.330414][ T6560]  ? __alloc_file+0x25/0x240
[  220.335267][ T6560]  kmem_cache_alloc+0x3d/0x280
[  220.340059][ T6560]  __alloc_file+0x25/0x240
[  220.344587][ T6560]  alloc_empty_file+0x90/0x180
[  220.349350][ T6560]  alloc_file+0x5c/0x510
[  220.353589][ T6560]  ? do_raw_spin_unlock+0x11d/0x230
[  220.358994][ T6560]  alloc_file_pseudo+0x180/0x200
[  220.364426][ T6560]  ? alloc_empty_file_noaccount+0x80/0x80
[  220.370364][ T6560]  ? _raw_spin_unlock+0x24/0x40
[  220.375417][ T6560]  __anon_inode_getfd+0x26b/0x3d0
[  220.380617][ T6560]  ? anon_inode_getfd+0x40/0x40
[  220.385477][ T6560]  ? bpf_lsm_capable+0x5/0x10
[  220.391017][ T6560]  ? security_capable+0x85/0xb0
[  220.396465][ T6560]  __se_sys_fanotify_init+0x68c/0x7b0
[  220.401865][ T6560]  do_syscall_64+0x4c/0xa0
[  220.406506][ T6560]  ? clear_bhb_loop+0x30/0x80
[  220.411207][ T6560]  ? clear_bhb_loop+0x30/0x80
[  220.415918][ T6560]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  220.422121][ T6560] RIP: 0033:0x7f8dc26a4559
[  220.426547][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.446468][ T6560] RSP: 002b:00007f8dc08fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  220.455247][ T6560] RAX: ffffffffffffffda RBX: 00007f8dc292bfa0 RCX: 00007f8dc26a4559
[  220.463522][ T6560] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010
[  220.471615][ T6560] RBP: 00007f8dc273bab8 R08: 0000000000000000 R09: 0000000000000000
[  220.480025][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.488139][ T6560] R13: 00007f8dc292c038 R14: 00007f8dc292bfa0 R15: 00007ffe4d92b718
[  220.496521][ T6560]  </TASK>
[  226.641415][ T4280] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  227.170928][ T4280] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  227.225201][ T4280] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024
[  227.270750][ T4280] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.330840][ T4280] usb 5-1: config 0 interface 0 has no altsetting 0
[  227.363882][ T4280] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  227.407816][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.448224][ T4280] usb 5-1: config 0 descriptor??
[  227.481149][ T6675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  228.134850][ T4280] cherry 0003:046A:0027.0002: item fetching failed at offset 16/24
[  228.157575][ T4280] cherry: probe of 0003:046A:0027.0002 failed with error -22
[  228.279918][ T6725] loop0: detected capacity change from 0 to 512
[  228.315282][ T6725] EXT4-fs (loop0): invalid inodes per group: 0
[  228.315282][ T6725] 
[  228.396987][ T4524] usb 5-1: USB disconnect, device number 9
[  228.790009][ T6728] loop0: detected capacity change from 0 to 1024
[  228.872359][ T6728] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  232.216816][ T6771] loop4: detected capacity change from 0 to 128
[  233.538840][ T6776] loop0: detected capacity change from 0 to 512
[  233.595489][ T6771] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value
[  233.704887][ T6776] EXT4-fs (loop0): invalid inodes per group: 0
[  233.704887][ T6776] 
[  234.249096][ T6792] loop0: detected capacity change from 0 to 1024
[  234.347244][ T6792] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  235.946152][ T6811] loop4: detected capacity change from 0 to 512
[  236.018247][ T6818] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  236.098687][ T6811] EXT4-fs (loop4): failed to initialize system zone (-117)
[  236.182423][ T6811] EXT4-fs (loop4): mount failed
[  236.463292][ T6830] loop0: detected capacity change from 0 to 512
[  236.696166][ T6831] loop4: detected capacity change from 0 to 2048
[  236.815134][ T6831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  236.834326][ T6830] EXT4-fs (loop0): invalid inodes per group: 0
[  236.834326][ T6830] 
[  237.392120][ T6839] loop0: detected capacity change from 0 to 1024
[  237.459615][ T6839] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  239.556283][ T6867] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  241.182519][ T6877] loop4: detected capacity change from 0 to 128
[  241.376342][ T6877] EXT4-fs (loop4): Unrecognized mount option "dont_measure" or missing value
[  244.793184][ T6919] rxe_eth0 speed is unknown, defaulting to 1000
[  244.924098][ T6923] loop4: detected capacity change from 0 to 512
[  246.293439][ T6923] EXT4-fs (loop4): invalid inodes per group: 0
[  246.293439][ T6923] 
[  246.556265][ T6936] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  246.797255][ T6938] loop4: detected capacity change from 0 to 1024
[  246.833538][ T6938] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  247.508113][ T6948] loop4: detected capacity change from 0 to 8
[  247.787327][ T6948] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  248.373451][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'.
[  249.958877][ T6963] loop0: detected capacity change from 0 to 2048
[  250.644612][ T6979] FAULT_INJECTION: forcing a failure.
[  250.644612][ T6979] name failslab, interval 1, probability 0, space 0, times 0
[  250.916533][ T6979] CPU: 0 PID: 6979 Comm: syz.0.927 Not tainted syzkaller #0
[  250.924601][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  250.935138][ T6979] Call Trace:
[  250.938527][ T6979]  <TASK>
[  250.941757][ T6979]  dump_stack_lvl+0x188/0x250
[  250.946625][ T6979]  ? show_regs_print_info+0x20/0x20
[  250.951831][ T6979]  ? load_image+0x410/0x410
[  250.956377][ T6979]  ? __lock_acquire+0x7d40/0x7d40
[  250.961422][ T6979]  should_fail+0x383/0x4b0
[  250.965940][ T6979]  should_failslab+0x5/0x20
[  250.970594][ T6979]  slab_pre_alloc_hook+0x51/0xc0
[  250.975708][ T6979]  ? __alloc_file+0x25/0x240
[  250.980566][ T6979]  kmem_cache_alloc+0x3d/0x280
[  250.985521][ T6979]  __alloc_file+0x25/0x240
[  250.990224][ T6979]  alloc_empty_file+0x90/0x180
[  250.995097][ T6979]  alloc_file+0x5c/0x510
[  250.999774][ T6979]  ? do_raw_spin_unlock+0x11d/0x230
[  251.005071][ T6979]  alloc_file_pseudo+0x180/0x200
[  251.010175][ T6979]  ? alloc_empty_file_noaccount+0x80/0x80
[  251.015904][ T6979]  ? _raw_spin_unlock+0x24/0x40
[  251.021035][ T6979]  __anon_inode_getfd+0x26b/0x3d0
[  251.026067][ T6979]  ? anon_inode_getfd+0x40/0x40
[  251.031099][ T6979]  ? bpf_lsm_capable+0x5/0x10
[  251.035893][ T6979]  ? security_capable+0x85/0xb0
[  251.040847][ T6979]  __se_sys_fanotify_init+0x68c/0x7b0
[  251.046485][ T6979]  do_syscall_64+0x4c/0xa0
[  251.051073][ T6979]  ? clear_bhb_loop+0x30/0x80
[  251.055866][ T6979]  ? clear_bhb_loop+0x30/0x80
[  251.060825][ T6979]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  251.067039][ T6979] RIP: 0033:0x7f80b6953559
[  251.071480][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.091184][ T6979] RSP: 002b:00007f80b4bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  251.099809][ T6979] RAX: ffffffffffffffda RBX: 00007f80b6bdafa0 RCX: 00007f80b6953559
[  251.107844][ T6979] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010
[  251.116257][ T6979] RBP: 00007f80b69eaab8 R08: 0000000000000000 R09: 0000000000000000
[  251.124445][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.132728][ T6979] R13: 00007f80b6bdb038 R14: 00007f80b6bdafa0 R15: 00007fffe095cec8
[  251.140710][ T6979]  </TASK>
[  254.812072][ T7020] loop0: detected capacity change from 0 to 512
[  254.895273][ T7020] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  255.037008][ T7020] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.941: bad orphan inode 13
[  255.133549][ T7020] ext4_test_bit(bit=12, block=18) = 1
[  256.406187][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  256.415359][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  256.456373][ T7020] is_bad_inode(inode)=0
[  256.488830][ T7020] NEXT_ORPHAN(inode)=0
[  256.943250][ T7020] max_ino=32
[  256.980031][ T7020] i_nlink=1
[  257.017216][ T7020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  258.716627][ T7030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  269.645763][ T7136] FAULT_INJECTION: forcing a failure.
[  269.645763][ T7136] name failslab, interval 1, probability 0, space 0, times 0
[  270.164871][ T7136] CPU: 0 PID: 7136 Comm: syz.4.981 Not tainted syzkaller #0
[  270.172595][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  270.183510][ T7136] Call Trace:
[  270.186815][ T7136]  <TASK>
[  270.189797][ T7136]  dump_stack_lvl+0x188/0x250
[  270.194502][ T7136]  ? show_regs_print_info+0x20/0x20
[  270.199728][ T7136]  ? load_image+0x410/0x410
[  270.204337][ T7136]  ? __lock_acquire+0x7d40/0x7d40
[  270.209375][ T7136]  should_fail+0x383/0x4b0
[  270.213874][ T7136]  should_failslab+0x5/0x20
[  270.218617][ T7136]  slab_pre_alloc_hook+0x51/0xc0
[  270.223600][ T7136]  ? __alloc_file+0x25/0x240
[  270.228517][ T7136]  kmem_cache_alloc+0x3d/0x280
[  270.233317][ T7136]  __alloc_file+0x25/0x240
[  270.237875][ T7136]  alloc_empty_file+0x90/0x180
[  270.242833][ T7136]  alloc_file+0x5c/0x510
[  270.247327][ T7136]  ? do_raw_spin_unlock+0x11d/0x230
[  270.252538][ T7136]  alloc_file_pseudo+0x180/0x200
[  270.257732][ T7136]  ? alloc_empty_file_noaccount+0x80/0x80
[  270.263479][ T7136]  ? _raw_spin_unlock+0x24/0x40
[  270.268536][ T7136]  __anon_inode_getfd+0x26b/0x3d0
[  270.273583][ T7136]  ? anon_inode_getfd+0x40/0x40
[  270.278447][ T7136]  ? bpf_lsm_capable+0x5/0x10
[  270.283136][ T7136]  ? security_capable+0x85/0xb0
[  270.287989][ T7136]  __se_sys_fanotify_init+0x68c/0x7b0
[  270.293453][ T7136]  do_syscall_64+0x4c/0xa0
[  270.297864][ T7136]  ? clear_bhb_loop+0x30/0x80
[  270.302652][ T7136]  ? clear_bhb_loop+0x30/0x80
[  270.307413][ T7136]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  270.313300][ T7136] RIP: 0033:0x7f8dc26a4559
[  270.317806][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.337858][ T7136] RSP: 002b:00007f8dc08fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  270.346532][ T7136] RAX: ffffffffffffffda RBX: 00007f8dc292bfa0 RCX: 00007f8dc26a4559
[  270.354497][ T7136] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010
[  270.362647][ T7136] RBP: 00007f8dc273bab8 R08: 0000000000000000 R09: 0000000000000000
[  270.370609][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.378676][ T7136] R13: 00007f8dc292c038 R14: 00007f8dc292bfa0 R15: 00007ffe4d92b718
[  270.386851][ T7136]  </TASK>
[  274.119290][ T7179] netlink: 'syz.1.999': attribute type 2 has an invalid length.
[  274.195940][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'.
[  274.368861][ T7184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1001'.
[  274.402532][ T7191] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 !
[  274.447123][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'.
[  275.123724][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1011'.
[  276.442717][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'.
[  276.489176][ T7214] loop0: detected capacity change from 0 to 764
[  276.897602][ T7224] rxe_eth0 speed is unknown, defaulting to 1000
[  277.430980][ T7245] loop4: detected capacity change from 0 to 512
[  277.554680][ T7245] EXT4-fs (loop4): invalid inodes per group: 0
[  277.554680][ T7245] 
[  278.132538][ T7265] loop4: detected capacity change from 0 to 1024
[  278.160275][ T7265] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  283.057221][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'.
[  283.679289][ T7351] device lo entered promiscuous mode
[  284.624359][ T7350] device lo left promiscuous mode
[  284.646504][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'.
[  285.610273][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'.
[  286.764087][ T7398] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  286.886767][ T7402] loop0: detected capacity change from 0 to 512
[  287.015234][ T7402] EXT4-fs (loop0): failed to initialize system zone (-117)
[  287.103602][ T7402] EXT4-fs (loop0): mount failed
[  287.109271][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.116580][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.200334][ T7408] device bridge_slave_1 left promiscuous mode
[  287.369946][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.405197][ T7408] device bridge_slave_0 left promiscuous mode
[  287.421418][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.504861][ T7414] loop0: detected capacity change from 0 to 2048
[  287.584250][ T7414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  288.327939][ T7423] device lo entered promiscuous mode
[  288.365321][ T7422] device lo left promiscuous mode
[  288.869585][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'.
[  289.037826][ T7439] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  289.082354][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'.
[  289.508589][ T7458] loop0: detected capacity change from 0 to 512
[  289.845634][ T7458] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  289.883477][ T7463] device lo entered promiscuous mode
[  289.918701][ T7461] device lo left promiscuous mode
[  289.968436][ T7458] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.1101: bad orphan inode 13
[  290.027722][ T7458] ext4_test_bit(bit=12, block=18) = 1
[  290.054390][ T7458] is_bad_inode(inode)=0
[  290.076419][ T7458] NEXT_ORPHAN(inode)=0
[  290.099200][ T7458] max_ino=32
[  290.109579][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'.
[  290.127627][ T7458] i_nlink=1
[  290.143501][ T7458] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  290.426311][ T7475] fuse: Bad value for 'rootmode'
[  291.400296][ T7475] netlink: 'syz.3.1105': attribute type 23 has an invalid length.
[  291.457240][ T7484] loop0: detected capacity change from 0 to 1024
[  293.975002][ T7504] loop0: detected capacity change from 0 to 512
[  294.048686][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'.
[  294.072900][ T7504] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value
[  295.194948][ T7517] loop4: detected capacity change from 0 to 1024
[  296.638942][ T7517] hfsplus: invalid length 32517 has been corrected to 255
[  296.865881][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'.
[  296.968534][   T26] audit: type=1800 audit(1794315793.882:348): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1119" name="file1" dev="loop4" ino=20 res=0 errno=0
[  297.036481][ T7517] hfsplus: b-tree write err: -5, ino 20
[  297.047075][ T7544] loop0: detected capacity change from 0 to 512
[  297.119290][ T7544] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  297.197383][ T7544] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.1130: bad orphan inode 13
[  297.260103][ T7544] ext4_test_bit(bit=12, block=18) = 1
[  297.592220][ T7544] is_bad_inode(inode)=0
[  297.617619][ T7544] NEXT_ORPHAN(inode)=0
[  297.645748][ T7544] max_ino=32
[  297.657486][ T7544] i_nlink=1
[  297.669940][ T7544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  299.067610][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'.
[  299.477910][ T7571] device veth0_to_bond left promiscuous mode
[  299.505992][ T7571] bridge0: port 3(veth0_to_bond) entered disabled state
[  299.529187][ T7571] device bridge_slave_1 left promiscuous mode
[  299.555536][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.578047][ T7571] device bridge_slave_0 left promiscuous mode
[  299.586950][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.781205][    T7] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  300.120987][    T7] usb 5-1: not running at top speed; connect to a high speed hub
[  300.230796][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.475733][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  301.488432][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  301.568955][ T7613] rxe_eth0 speed is unknown, defaulting to 1000
[  301.577997][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  301.623371][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.736213][    T7] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  302.705470][    T7] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -32 (exp. 1).
[  302.755457][ T7578] loop4: detected capacity change from 0 to 128
[  303.117053][ T7578] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  303.470881][    T7] usb 5-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  303.500245][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'.
[  303.550551][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  303.558471][    T7] usb 5-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  303.630480][    T7] usb 5-1: No streaming interface found for terminal 2.
[  303.674273][ T7613] chnl_net:caif_netlink_parms(): no params data found
[  303.716082][    T7] usb 5-1: USB disconnect, device number 10
[  305.132609][ T1245] device hsr_slave_0 left promiscuous mode
[  305.162138][ T1245] device hsr_slave_1 left promiscuous mode
[  305.196863][ T1245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.226153][ T1245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.289614][ T1245] device bridge_slave_1 left promiscuous mode
[  305.310905][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.347261][ T7675] loop4: detected capacity change from 0 to 512
[  305.355874][ T1245] device bridge_slave_0 left promiscuous mode
[  305.374286][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.429282][ T7675] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  305.537157][ T7675] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1169: bad orphan inode 13
[  305.630469][ T4530] Bluetooth: hci0: command 0x041b tx timeout
[  305.662435][ T7675] ext4_test_bit(bit=12, block=18) = 1
[  305.700101][ T7675] is_bad_inode(inode)=0
[  305.710214][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'.
[  305.727723][ T1245] team0 (unregistering): Port device team_slave_1 removed
[  305.753202][ T7675] NEXT_ORPHAN(inode)=0
[  305.772930][ T1245] team0 (unregistering): Port device team_slave_0 removed
[  305.794264][ T7675] max_ino=32
[  305.823559][ T7675] i_nlink=1
[  305.828034][ T1245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.856224][ T7675] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  305.896969][ T1245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.109157][ T1245] bond0 (unregistering): Released all slaves
[  307.254101][ T7700] device lo entered promiscuous mode
[  307.313124][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.394931][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'.
[  307.407593][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.443783][ T7613] device bridge_slave_0 entered promiscuous mode
[  307.501133][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.544788][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.598796][ T7613] device bridge_slave_1 entered promiscuous mode
[  307.673616][   T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  307.736104][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.750617][    T7] Bluetooth: hci0: command 0x040f tx timeout
[  307.828496][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.987014][ T7613] team0: Port device team_slave_0 added
[  307.994621][   T13] usb 5-1: Using ep0 maxpacket: 32
[  308.057795][ T7613] team0: Port device team_slave_1 added
[  308.110946][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[  308.122414][ T7698] device lo left promiscuous mode
[  308.156784][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  308.300425][   T13] usb 5-1: unable to read config index 0 descriptor/start: -71
[  308.308300][   T13] usb 5-1: can't read configurations, error -71
[  309.682599][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.740117][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.790397][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[  309.887089][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.968851][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.016492][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.189783][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.380956][ T7613] device hsr_slave_0 entered promiscuous mode
[  310.408523][ T7769] loop4: detected capacity change from 0 to 2048
[  310.446753][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  310.459411][ T7613] device hsr_slave_1 entered promiscuous mode
[  310.553054][ T7613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.603875][ T7613] Cannot create hsr debugfs directory
[  310.763696][ T7769] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  311.716129][ T7769] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  311.882974][ T7613] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  311.985698][ T7613] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  312.115048][ T7613] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  312.171355][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'.
[  312.231109][ T7613] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  312.571564][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.657240][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.710929][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.764921][ T7837] ip_tables: iptables: counters copy to user failed while replacing table
[  312.779934][ T7613] 8021q: adding VLAN 0 to HW filter on device team0
[  312.841814][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  312.893827][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  312.944074][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.951427][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.063591][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  313.104644][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.164428][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.264452][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.271798][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.385397][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  313.413761][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'.
[  313.461180][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  313.520552][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  313.608675][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  313.666882][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.824424][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  314.793356][ T7613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  314.890512][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  314.955670][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  315.227572][ T7876] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1235'.
[  315.262713][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  315.314499][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  315.364282][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  315.412647][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  315.477032][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  317.264354][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'.
[  317.316617][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  317.324535][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  317.357846][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.440939][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.498132][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.104349][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  319.167713][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  319.258490][ T7613] device veth0_vlan entered promiscuous mode
[  319.314845][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  319.355061][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  319.394799][ T7936] device lo entered promiscuous mode
[  319.428091][ T7613] device veth1_vlan entered promiscuous mode
[  319.456590][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  319.476887][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  319.507402][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  319.532785][ T7935] device lo left promiscuous mode
[  319.579031][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  319.612772][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  319.652541][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  319.703889][ T7613] device veth0_macvtap entered promiscuous mode
[  319.733665][ T7613] device veth1_macvtap entered promiscuous mode
[  319.810006][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.854494][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.945655][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.996500][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.034908][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'.
[  320.064869][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.109190][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.156898][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.209929][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  320.260985][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  320.310794][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  320.366207][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  320.442467][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.633418][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.694693][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.753938][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.800308][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.853413][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.902304][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.964861][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  321.009624][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  321.058316][ T7613] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.120352][ T7613] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.164743][ T7613] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.224062][ T7613] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.564726][ T4446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.625312][ T4446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.713682][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  321.747304][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.798741][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.878550][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.244218][ T8004] device lo entered promiscuous mode
[  322.307284][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  322.670806][   T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  322.952843][   T13] usb 6-1: Using ep0 maxpacket: 32
[  323.100411][   T13] usb 6-1: unable to get BOS descriptor or descriptor too short
[  323.128512][ T8001] device lo left promiscuous mode
[  323.180364][   T13] usb 6-1: unable to read config index 0 descriptor/start: -71
[  323.200306][   T13] usb 6-1: can't read configurations, error -71
[  323.426963][ T8037] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  323.791358][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'.
[  324.759784][ T8076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  326.245907][ T8093] loop5: detected capacity change from 0 to 512
[  326.320913][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  326.597548][ T8093] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  326.726962][ T8093] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.834697][ T8093] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  326.912616][ T8093] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  327.074075][ T8093] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1289: Failed to acquire dquot type 0
[  327.414457][ T8124] loop5: detected capacity change from 0 to 256
[  327.523857][ T8124] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  327.998361][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'.
[  329.785473][ T8159] loop4: detected capacity change from 0 to 256
[  329.950822][ T8159] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  330.186727][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  331.192350][ T8198] loop4: detected capacity change from 0 to 512
[  331.320413][ T8198] EXT4-fs (loop4): failed to initialize system zone (-117)
[  331.672768][ T8198] EXT4-fs (loop4): mount failed
[  334.180531][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1342'.
[  334.582098][ T8255] loop4: detected capacity change from 0 to 2048
[  334.949702][ T8255] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  335.645860][ T8279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  340.739916][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.749058][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.758211][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.767586][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.776729][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.786142][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.795528][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.804967][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.814240][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  340.823872][ T8401] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1384'.
[  341.158096][ T8416] device lo entered promiscuous mode
[  341.523289][ T8413] device lo left promiscuous mode
[  341.677651][ T8435] netlink: 'syz.5.1395': attribute type 4 has an invalid length.
[  342.144700][ T8437] netlink: 'syz.5.1395': attribute type 4 has an invalid length.
[  342.222488][ T8438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.839986][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.847605][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.217530][ T8510] device bridge_slave_1 left promiscuous mode
[  345.255833][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.299756][ T8510] device bridge_slave_0 left promiscuous mode
[  345.333890][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.676609][ T8538] fuse: Unknown parameter 'fd0x0000000000000003'
[  346.600155][ T1107] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  346.694475][ T8573] device lo entered promiscuous mode
[  346.743882][ T8571] device lo left promiscuous mode
[  346.882503][ T1107] usb 5-1: Using ep0 maxpacket: 32
[  347.023473][ T1107] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  347.073535][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.142735][ T1107] usb 5-1: config 0 has no interface number 0
[  347.179554][ T1107] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16
[  347.237600][ T1107] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.330016][ T1107] usb 5-1: config 0 interface 196 has no altsetting 0
[  347.532312][ T1107] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  347.591826][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.650853][ T1107] usb 5-1: Product: syz
[  347.655053][ T1107] usb 5-1: Manufacturer: syz
[  347.812964][ T1107] usb 5-1: SerialNumber: syz
[  348.078485][ T1107] usb 5-1: config 0 descriptor??
[  348.223928][ T8558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  348.830779][ T1107] ipheth 5-1:0.196: Unable to find endpoints
[  348.882729][ T1107] usb 5-1: USB disconnect, device number 13
[  350.098623][ T8675] netlink: 'syz.4.1462': attribute type 4 has an invalid length.
[  351.871388][ T8708] __nla_validate_parse: 47 callbacks suppressed
[  351.871424][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'.
[  351.961178][ T8708] bond0: (slave bond_slave_0): Releasing backup interface
[  351.969142][ T8714] loop4: detected capacity change from 0 to 2048
[  353.460569][ T8714] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  353.700159][ T8714] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  354.212641][ T8753] device lo entered promiscuous mode
[  354.273508][ T8749] device lo left promiscuous mode
[  355.673103][ T8764] netlink: 'syz.4.1496': attribute type 4 has an invalid length.
[  356.553380][ T8794] loop4: detected capacity change from 0 to 2048
[  356.629946][ T8794] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  357.454923][ T8840] device lo entered promiscuous mode
[  357.770916][ T8838] device lo left promiscuous mode
[  358.484700][ T8864] loop4: detected capacity change from 0 to 512
[  358.639416][ T8864] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  358.733502][ T8864] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback.
[  358.813514][ T8880] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  358.856028][ T8864] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.960588][ T8904] netlink: 'syz.3.1552': attribute type 4 has an invalid length.
[  360.225998][ T8905] netlink: 'syz.3.1552': attribute type 4 has an invalid length.
[  361.683853][ T8946] loop4: detected capacity change from 0 to 512
[  361.791624][ T8946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  362.193861][ T8946] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.912740][ T8990] device lo entered promiscuous mode
[  362.973798][ T8988] device lo left promiscuous mode
[  363.359758][ T8999] syz.3.1591 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  363.372128][ T8999] CPU: 0 PID: 8999 Comm: syz.3.1591 Not tainted syzkaller #0
[  363.380079][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  363.391476][ T8999] Call Trace:
[  363.395138][ T8999]  <TASK>
[  363.398218][ T8999]  dump_stack_lvl+0x188/0x250
[  363.403165][ T8999]  ? show_regs_print_info+0x20/0x20
[  363.408453][ T8999]  ? load_image+0x410/0x410
[  363.412978][ T8999]  ? local_lock_release+0x170/0x170
[  363.418312][ T8999]  ? __rwlock_init+0x140/0x140
[  363.423118][ T8999]  dump_header+0xd9/0x780
[  363.427464][ T8999]  oom_kill_process+0x20e/0x3d0
[  363.432461][ T8999]  out_of_memory+0xdb2/0x1190
[  363.437379][ T8999]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  363.443397][ T8999]  ? mutex_lock_io_nested+0x60/0x60
[  363.448764][ T8999]  ? unregister_oom_notifier+0x20/0x20
[  363.454737][ T8999]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  363.460313][ T8999]  ? mem_cgroup_oom_trylock+0x210/0x210
[  363.466167][ T8999]  ? do_raw_spin_unlock+0x11d/0x230
[  363.471795][ T8999]  try_charge_memcg+0x1075/0x15b0
[  363.476968][ T8999]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  363.482952][ T8999]  ? rcu_lock_acquire+0x30/0x30
[  363.488043][ T8999]  charge_memcg+0x100/0x300
[  363.492859][ T8999]  ? __mem_cgroup_charge+0x80/0x80
[  363.498550][ T8999]  __mem_cgroup_charge+0x21/0x80
[  363.504466][ T8999]  shmem_add_to_page_cache+0xa8a/0x14d0
[  363.510489][ T8999]  ? put_page+0x200/0x200
[  363.515606][ T8999]  ? mark_lock+0x94/0x320
[  363.520303][ T8999]  ? verify_lock_unused+0x140/0x140
[  363.526312][ T8999]  ? __lock_acquire+0x13b3/0x7d40
[  363.531515][ T8999]  shmem_getpage_gfp+0x1735/0x2c10
[  363.536973][ T8999]  shmem_fault+0x1ac/0x550
[  363.541547][ T8999]  ? shmem_fallocate+0xec0/0xec0
[  363.546528][ T8999]  ? filemap_read_page+0x4b0/0x4b0
[  363.552018][ T8999]  ? count_memcg_event_mm+0x324/0x370
[  363.557552][ T8999]  __do_fault+0x141/0x330
[  363.561994][ T8999]  handle_mm_fault+0x2982/0x4440
[  363.567126][ T8999]  ? get_page+0xe0/0xe0
[  363.571322][ T8999]  ? follow_page_mask+0xa51/0x12b0
[  363.576903][ T8999]  __get_user_pages+0x952/0x11e0
[  363.581867][ T8999]  ? populate_vma_page_range+0x290/0x290
[  363.587512][ T8999]  ? read_lock_is_recursive+0x10/0x10
[  363.593420][ T8999]  populate_vma_page_range+0x213/0x290
[  363.598925][ T8999]  __mm_populate+0x275/0x3b0
[  363.603567][ T8999]  ? check_vma_flags+0x470/0x470
[  363.608614][ T8999]  ? up_write+0x1b6/0x410
[  363.613071][ T8999]  vm_mmap_pgoff+0x212/0x2d0
[  363.617676][ T8999]  ? account_locked_vm+0xe0/0xe0
[  363.622604][ T8999]  ? __context_tracking_exit+0x4c/0x80
[  363.628177][ T8999]  ? __lock_acquire+0x7d40/0x7d40
[  363.633468][ T8999]  ksys_mmap_pgoff+0x140/0x790
[  363.638256][ T8999]  ? mmap_region+0x1730/0x1730
[  363.643027][ T8999]  ? lockdep_hardirqs_on+0x94/0x140
[  363.648250][ T8999]  do_syscall_64+0x4c/0xa0
[  363.652945][ T8999]  ? clear_bhb_loop+0x30/0x80
[  363.657752][ T8999]  ? clear_bhb_loop+0x30/0x80
[  363.662433][ T8999]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.668345][ T8999] RIP: 0033:0x7fb40ae1d559
[  363.672770][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.692606][ T8999] RSP: 002b:00007fb409075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  363.701614][ T8999] RAX: ffffffffffffffda RBX: 00007fb40b0a4fa0 RCX: 00007fb40ae1d559
[  363.709676][ T8999] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  363.718272][ T8999] RBP: 00007fb40aeb4ab8 R08: ffffffffffffffff R09: 0000000000000000
[  363.726512][ T8999] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  363.734556][ T8999] R13: 00007fb40b0a5038 R14: 00007fb40b0a4fa0 R15: 00007ffdd1ffe798
[  363.743311][ T8999]  </TASK>
[  363.746442][    C0] vkms_vblank_simulate: vblank timer overrun
[  363.755351][ T8999] memory: usage 307200kB, limit 307200kB, failcnt 11224
[  363.763142][ T8999] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0
[  363.771871][ T8999] kmem: usage 5656kB, limit 9007199254740988kB, failcnt 0
[  363.779101][ T8999] Memory cgroup stats for /syz3:
[  363.779831][ T8999] anon 479232
[  363.779831][ T8999] file 308289536
[  363.779831][ T8999] kernel_stack 196608
[  363.779831][ T8999] pagetables 937984
[  363.779831][ T8999] percpu 72
[  363.779831][ T8999] sock 0
[  363.779831][ T8999] shmem 308195328
[  363.779831][ T8999] file_mapped 222855168
[  363.779831][ T8999] file_dirty 94208
[  363.779831][ T8999] file_writeback 0
[  363.779831][ T8999] swapcached 127995904
[  363.779831][ T8999] anon_thp 0
[  363.779831][ T8999] file_thp 0
[  363.779831][ T8999] shmem_thp 0
[  363.779831][ T8999] inactive_anon 308600832
[  363.779831][ T8999] active_anon 69632
[  363.779831][ T8999] inactive_file 49152
[  363.779831][ T8999] active_file 53248
[  363.779831][ T8999] unevictable 0
[  363.779831][ T8999] slab_reclaimable 1870248
[  363.779831][ T8999] slab_unreclaimable 2287752
[  363.779831][ T8999] slab 4158000
[  363.779831][ T8999] workingset_refault_anon 0
[  363.779831][ T8999] workingset_refault_file 0
[  363.779831][ T8999] workingset_activate_anon 0
[  363.878283][    C0] vkms_vblank_simulate: vblank timer overrun
[  363.885166][ T8999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1170,pid=7673,uid=0
[  363.901396][ T8999] Memory cgroup out of memory: Killed process 7673 (syz.3.1170) total-vm:200568kB, anon-rss:1396kB, file-rss:20608kB, shmem-rss:107312kB, UID:0 pgtables:312kB oom_score_adj:0
[  366.826096][   T28] oom_reaper: reaped process 7673 (syz.3.1170), now anon-rss:0kB, file-rss:20480kB, shmem-rss:107312kB
[  370.868721][ T8999] syz.3.1591 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  370.878988][ T8999] CPU: 0 PID: 8999 Comm: syz.3.1591 Not tainted syzkaller #0
[  370.886920][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  370.897565][ T8999] Call Trace:
[  370.900859][ T8999]  <TASK>
[  370.903876][ T8999]  dump_stack_lvl+0x188/0x250
[  370.908551][ T8999]  ? show_regs_print_info+0x20/0x20
[  370.913830][ T8999]  ? load_image+0x410/0x410
[  370.918327][ T8999]  ? local_lock_release+0x170/0x170
[  370.923514][ T8999]  ? __rwlock_init+0x140/0x140
[  370.928282][ T8999]  dump_header+0xd9/0x780
[  370.932692][ T8999]  oom_kill_process+0x20e/0x3d0
[  370.937767][ T8999]  out_of_memory+0xdb2/0x1190
[  370.942567][ T8999]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  370.948486][ T8999]  ? mutex_lock_io_nested+0x60/0x60
[  370.953799][ T8999]  ? unregister_oom_notifier+0x20/0x20
[  370.959617][ T8999]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  370.965417][ T8999]  ? mem_cgroup_oom_trylock+0x210/0x210
[  370.971817][ T8999]  ? do_raw_spin_unlock+0x11d/0x230
[  370.977047][ T8999]  try_charge_memcg+0x1075/0x15b0
[  370.982096][ T8999]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  370.988093][ T8999]  ? rcu_lock_acquire+0x30/0x30
[  370.993041][ T8999]  charge_memcg+0x100/0x300
[  370.997632][ T8999]  ? __mem_cgroup_charge+0x80/0x80
[  371.003470][ T8999]  __mem_cgroup_charge+0x21/0x80
[  371.009172][ T8999]  shmem_add_to_page_cache+0xa8a/0x14d0
[  371.015432][ T8999]  ? put_page+0x200/0x200
[  371.020047][ T8999]  ? mark_lock+0x94/0x320
[  371.024668][ T8999]  ? verify_lock_unused+0x140/0x140
[  371.030480][ T8999]  ? __lock_acquire+0x13b3/0x7d40
[  371.035631][ T8999]  shmem_getpage_gfp+0x1735/0x2c10
[  371.041178][ T8999]  shmem_fault+0x1ac/0x550
[  371.045607][ T8999]  ? shmem_fallocate+0xec0/0xec0
[  371.050560][ T8999]  ? filemap_read_page+0x4b0/0x4b0
[  371.055664][ T8999]  ? count_memcg_event_mm+0x324/0x370
[  371.061042][ T8999]  __do_fault+0x141/0x330
[  371.065373][ T8999]  handle_mm_fault+0x2982/0x4440
[  371.070330][ T8999]  ? get_page+0xe0/0xe0
[  371.074573][ T8999]  ? follow_page_mask+0xa51/0x12b0
[  371.079706][ T8999]  __get_user_pages+0x952/0x11e0
[  371.084654][ T8999]  ? populate_vma_page_range+0x290/0x290
[  371.090303][ T8999]  ? read_lock_is_recursive+0x10/0x10
[  371.095686][ T8999]  populate_vma_page_range+0x213/0x290
[  371.101260][ T8999]  __mm_populate+0x275/0x3b0
[  371.106068][ T8999]  ? check_vma_flags+0x470/0x470
[  371.111203][ T8999]  ? up_write+0x1b6/0x410
[  371.115548][ T8999]  vm_mmap_pgoff+0x212/0x2d0
[  371.120158][ T8999]  ? account_locked_vm+0xe0/0xe0
[  371.125232][ T8999]  ? __context_tracking_exit+0x4c/0x80
[  371.131021][ T8999]  ? __lock_acquire+0x7d40/0x7d40
[  371.136338][ T8999]  ksys_mmap_pgoff+0x140/0x790
[  371.141117][ T8999]  ? mmap_region+0x1730/0x1730
[  371.146035][ T8999]  ? lockdep_hardirqs_on+0x94/0x140
[  371.152679][ T8999]  do_syscall_64+0x4c/0xa0
[  371.157559][ T8999]  ? clear_bhb_loop+0x30/0x80
[  371.162814][ T8999]  ? clear_bhb_loop+0x30/0x80
[  371.168006][ T8999]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  371.174434][ T8999] RIP: 0033:0x7fb40ae1d559
[  371.179578][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.199899][ T8999] RSP: 002b:00007fb409075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  371.208335][ T8999] RAX: ffffffffffffffda RBX: 00007fb40b0a4fa0 RCX: 00007fb40ae1d559
[  371.216311][ T8999] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  371.224603][ T8999] RBP: 00007fb40aeb4ab8 R08: ffffffffffffffff R09: 0000000000000000
[  371.232663][ T8999] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  371.241441][ T8999] R13: 00007fb40b0a5038 R14: 00007fb40b0a4fa0 R15: 00007ffdd1ffe798
[  371.249560][ T8999]  </TASK>
[  371.254320][ T8999] memory: usage 307200kB, limit 307200kB, failcnt 23558
[  371.261867][ T8999] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  371.270130][ T8999] kmem: usage 5524kB, limit 9007199254740988kB, failcnt 0
[  371.277427][ T8999] Memory cgroup stats for /syz3:
[  371.277612][ T8999] anon 348160
[  371.277612][ T8999] file 308559872
[  371.277612][ T8999] kernel_stack 196608
[  371.277612][ T8999] pagetables 942080
[  371.277612][ T8999] percpu 72
[  371.277612][ T8999] sock 0
[  371.277612][ T8999] shmem 308555776
[  371.277612][ T8999] file_mapped 223313920
[  371.277612][ T8999] file_dirty 0
[  371.277612][ T8999] file_writeback 0
[  371.277612][ T8999] swapcached 128147456
[  371.277612][ T8999] anon_thp 0
[  371.277612][ T8999] file_thp 0
[  371.277612][ T8999] shmem_thp 0
[  371.277612][ T8999] inactive_anon 308686848
[  371.277612][ T8999] active_anon 217088
[  371.277612][ T8999] inactive_file 8192
[  371.277612][ T8999] active_file 4096
[  371.277612][ T8999] unevictable 0
[  371.277612][ T8999] slab_reclaimable 1850376
[  371.277612][ T8999] slab_unreclaimable 2170464
[  371.277612][ T8999] slab 4020840
[  371.277612][ T8999] workingset_refault_anon 0
[  371.277612][ T8999] workingset_refault_file 8
[  371.277612][ T8999] workingset_activate_anon 0
[  371.381613][ T8999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1181,pid=7710,uid=0
[  371.400517][ T8999] Memory cgroup out of memory: Killed process 7710 (syz.3.1181) total-vm:200568kB, anon-rss:1396kB, file-rss:20608kB, shmem-rss:100184kB, UID:0 pgtables:300kB oom_score_adj:0
[  373.842162][   T28] oom_reaper: reaped process 7710 (syz.3.1181), now anon-rss:0kB, file-rss:20480kB, shmem-rss:100184kB
[  375.128108][ T9031] syz.3.1602 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  375.142536][ T9031] CPU: 0 PID: 9031 Comm: syz.3.1602 Not tainted syzkaller #0
[  375.150972][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  375.163853][ T9031] Call Trace:
[  375.167502][ T9031]  <TASK>
[  375.170466][ T9031]  dump_stack_lvl+0x188/0x250
[  375.175156][ T9031]  ? show_regs_print_info+0x20/0x20
[  375.180544][ T9031]  ? load_image+0x410/0x410
[  375.185222][ T9031]  ? local_lock_release+0x170/0x170
[  375.190706][ T9031]  ? __rwlock_init+0x140/0x140
[  375.195961][ T9031]  dump_header+0xd9/0x780
[  375.200502][ T9031]  oom_kill_process+0x20e/0x3d0
[  375.205513][ T9031]  out_of_memory+0xdb2/0x1190
[  375.210221][ T9031]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  375.215982][ T9031]  ? mutex_lock_io_nested+0x60/0x60
[  375.221224][ T9031]  ? unregister_oom_notifier+0x20/0x20
[  375.226686][ T9031]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  375.232237][ T9031]  ? mem_cgroup_oom_trylock+0x210/0x210
[  375.238008][ T9031]  ? do_raw_spin_unlock+0x11d/0x230
[  375.243273][ T9031]  try_charge_memcg+0x1075/0x15b0
[  375.248403][ T9031]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  375.254411][ T9031]  ? rcu_lock_acquire+0x30/0x30
[  375.259382][ T9031]  charge_memcg+0x100/0x300
[  375.264248][ T9031]  ? __mem_cgroup_charge+0x80/0x80
[  375.269377][ T9031]  __mem_cgroup_charge+0x21/0x80
[  375.274310][ T9031]  shmem_add_to_page_cache+0xa8a/0x14d0
[  375.279871][ T9031]  ? put_page+0x200/0x200
[  375.284389][ T9031]  ? mark_lock+0x94/0x320
[  375.288984][ T9031]  ? verify_lock_unused+0x140/0x140
[  375.294188][ T9031]  ? __lock_acquire+0x13b3/0x7d40
[  375.299383][ T9031]  shmem_getpage_gfp+0x1735/0x2c10
[  375.304608][ T9031]  shmem_fault+0x1ac/0x550
[  375.309029][ T9031]  ? shmem_fallocate+0xec0/0xec0
[  375.314080][ T9031]  ? filemap_read_page+0x4b0/0x4b0
[  375.319214][ T9031]  ? count_memcg_event_mm+0x324/0x370
[  375.324857][ T9031]  __do_fault+0x141/0x330
[  375.329194][ T9031]  handle_mm_fault+0x2982/0x4440
[  375.334323][ T9031]  ? get_page+0xe0/0xe0
[  375.338772][ T9031]  ? follow_page_mask+0xa51/0x12b0
[  375.344001][ T9031]  __get_user_pages+0x952/0x11e0
[  375.349123][ T9031]  ? populate_vma_page_range+0x290/0x290
[  375.354891][ T9031]  ? read_lock_is_recursive+0x10/0x10
[  375.360548][ T9031]  populate_vma_page_range+0x213/0x290
[  375.366260][ T9031]  __mm_populate+0x275/0x3b0
[  375.371545][ T9031]  ? check_vma_flags+0x470/0x470
[  375.376506][ T9031]  ? up_write+0x1b6/0x410
[  375.381767][ T9031]  vm_mmap_pgoff+0x212/0x2d0
[  375.386845][ T9031]  ? account_locked_vm+0xe0/0xe0
[  375.393384][ T9031]  ? __context_tracking_exit+0x4c/0x80
[  375.399674][ T9031]  ? __lock_acquire+0x7d40/0x7d40
[  375.405564][ T9031]  ksys_mmap_pgoff+0x140/0x790
[  375.410738][ T9031]  ? mmap_region+0x1730/0x1730
[  375.418592][ T9031]  ? lockdep_hardirqs_on+0x94/0x140
[  375.424294][ T9031]  do_syscall_64+0x4c/0xa0
[  375.429078][ T9031]  ? clear_bhb_loop+0x30/0x80
[  375.434007][ T9031]  ? clear_bhb_loop+0x30/0x80
[  375.438734][ T9031]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  375.444641][ T9031] RIP: 0033:0x7fb40ae1d559
[  375.449170][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.470070][ T9031] RSP: 002b:00007fb409075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  375.478952][ T9031] RAX: ffffffffffffffda RBX: 00007fb40b0a4fa0 RCX: 00007fb40ae1d559
[  375.487310][ T9031] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000
[  375.495336][ T9031] RBP: 00007fb40aeb4ab8 R08: ffffffffffffffff R09: 0000000000000000
[  375.503506][ T9031] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  375.511673][ T9031] R13: 00007fb40b0a5038 R14: 00007fb40b0a4fa0 R15: 00007ffdd1ffe798
[  375.519743][ T9031]  </TASK>
[  375.523925][ T9031] memory: usage 307200kB, limit 307200kB, failcnt 33299
[  375.530931][ T9031] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  375.539272][ T9031] kmem: usage 5628kB, limit 9007199254740988kB, failcnt 0
[  375.546536][ T9031] Memory cgroup stats for /syz3:
[  375.547048][ T9031] anon 217088
[  375.547048][ T9031] file 308584448
[  375.547048][ T9031] kernel_stack 196608
[  375.547048][ T9031] pagetables 942080
[  375.547048][ T9031] percpu 72
[  375.547048][ T9031] sock 0
[  375.547048][ T9031] shmem 308584448
[  375.547048][ T9031] file_mapped 192602112
[  375.547048][ T9031] file_dirty 0
[  375.547048][ T9031] file_writeback 0
[  375.547048][ T9031] swapcached 128315392
[  375.547048][ T9031] anon_thp 0
[  375.547048][ T9031] file_thp 0
[  375.547048][ T9031] shmem_thp 0
[  375.547048][ T9031] inactive_anon 308555776
[  375.547048][ T9031] active_anon 245760
[  375.547048][ T9031] inactive_file 4096
[  375.547048][ T9031] active_file 4096
[  375.547048][ T9031] unevictable 0
[  375.547048][ T9031] slab_reclaimable 1886824
[  375.547048][ T9031] slab_unreclaimable 2239624
[  375.547048][ T9031] slab 4126448
[  375.547048][ T9031] workingset_refault_anon 0
[  375.547048][ T9031] workingset_refault_file 15
[  375.547048][ T9031] workingset_activate_anon 0
[  375.649601][ T9031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1602,pid=9030,uid=0
[  375.665514][ T9031] Memory cgroup out of memory: Killed process 9030 (syz.3.1602) total-vm:200568kB, anon-rss:1424kB, file-rss:20936kB, shmem-rss:10292kB, UID:0 pgtables:152kB oom_score_adj:0
[  375.815741][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'.
[  378.234646][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'.
[  378.415749][ T9063] loop4: detected capacity change from 0 to 512
[  378.456150][ T9065] overlayfs: failed to clone upperpath
[  378.523290][ T9071] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1616'.
[  378.541829][ T9063] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  379.825993][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  379.840177][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  381.344640][ T9098] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1625'.
[  381.491287][ T9101] batman_adv: batadv0: Adding interface: syz_tun
[  381.565165][ T9101] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.762879][ T9101] batman_adv: batadv0: Interface activated: syz_tun
[  381.803881][ T9107] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1628'.
[  381.933306][ T9119] netlink: 'syz.4.1630': attribute type 4 has an invalid length.
[  382.123740][ T9128] rxe_eth0 speed is unknown, defaulting to 1000
[  383.024938][ T9132] netlink: 'syz.5.1635': attribute type 7 has an invalid length.
[  383.180005][ T9132] netlink: 'syz.5.1635': attribute type 5 has an invalid length.
[  383.295572][ T9132] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1635'.
[  383.353753][ T9145] netlink: 'syz.2.1642': attribute type 4 has an invalid length.
[  383.423931][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1641'.
[  383.572442][ T9156] device lo entered promiscuous mode
[  383.649882][ T9153] device lo left promiscuous mode
[  383.688857][ T9161] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1647'.
[  384.671704][ T9177] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  384.779026][ T9179] netlink: 'syz.1.1653': attribute type 4 has an invalid length.
[  384.809456][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  384.941424][ T9192] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1661'.
[  385.044544][ T9198] device lo entered promiscuous mode
[  385.083907][ T9195] loop4: detected capacity change from 0 to 512
[  385.110839][ T9196] device lo left promiscuous mode
[  385.183017][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.1662: missing EA_INODE flag
[  385.217504][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'.
[  385.291961][ T9215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1669'.
[  385.325956][ T9195] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1662: error while reading EA inode 2 err=-117
[  385.467966][ T9195] EXT4-fs (loop4): 1 orphan inode deleted
[  385.518847][ T9223] netlink: 'syz.3.1673': attribute type 4 has an invalid length.
[  385.527258][ T9195] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  385.597596][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[  385.649244][ T9224] netlink: 'syz.3.1673': attribute type 4 has an invalid length.
[  385.828197][ T9235] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  385.933625][ T9238] CIFS: Attempting to mount \\127.0.0.1\share
[  386.023627][ T9238] CIFS: VFS: No username specified
[  386.155705][ T9235] CIFS: Attempting to mount \\::1\share
[  386.220911][ T9235] CIFS: VFS: No username specified
[  386.416947][ T9254] device lo entered promiscuous mode
[  386.453183][ T9252] rxe_eth0 speed is unknown, defaulting to 1000
[  386.483955][ T9253] device lo left promiscuous mode
[  386.494028][ T9257] __nla_validate_parse: 2 callbacks suppressed
[  386.494040][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  386.717574][ T9261] loop4: detected capacity change from 0 to 512
[  386.870105][ T9261] EXT4-fs (loop4): failed to initialize system zone (-117)
[  386.930107][ T9261] EXT4-fs (loop4): mount failed
[  387.321356][ T9266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1690'.
[  387.623289][ T9268] loop4: detected capacity change from 0 to 2048
[  387.709198][ T9268] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  388.329571][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'.
[  388.471800][ T9283] CIFS: bad ip= option (127.0.0.š�
[  388.471800][ T9283] RjHÛB,*zÓñ})
[  388.577382][ T9284] CIFS: Attempting to mount \\127.0.0.1\share
[  388.617327][ T9284] CIFS: VFS: No username specified
[  388.810321][ T9290] FAULT_INJECTION: forcing a failure.
[  388.810321][ T9290] name failslab, interval 1, probability 0, space 0, times 0
[  388.947440][ T9290] CPU: 0 PID: 9290 Comm: syz.4.1698 Not tainted syzkaller #0
[  388.954966][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  388.965119][ T9290] Call Trace:
[  388.968408][ T9290]  <TASK>
[  388.971353][ T9290]  dump_stack_lvl+0x188/0x250
[  388.976254][ T9290]  ? show_regs_print_info+0x20/0x20
[  388.981648][ T9290]  ? load_image+0x410/0x410
[  388.986248][ T9290]  ? __might_sleep+0xf0/0xf0
[  388.990978][ T9290]  ? __lock_acquire+0x7d40/0x7d40
[  388.996004][ T9290]  should_fail+0x383/0x4b0
[  389.000496][ T9290]  should_failslab+0x5/0x20
[  389.005253][ T9290]  slab_pre_alloc_hook+0x51/0xc0
[  389.010573][ T9290]  kmem_cache_alloc_trace+0x47/0x290
[  389.016121][ T9290]  ? snd_card_file_add+0x54/0x240
[  389.021623][ T9290]  snd_card_file_add+0x54/0x240
[  389.026479][ T9290]  snd_pcm_oss_open+0x160/0x1e60
[  389.031543][ T9290]  ? snd_pcm_oss_mmap+0x440/0x440
[  389.036572][ T9290]  ? soundcore_open+0x270/0x4b0
[  389.041683][ T9290]  ? __lock_acquire+0x7d40/0x7d40
[  389.046703][ T9290]  ? do_raw_spin_unlock+0x11d/0x230
[  389.052026][ T9290]  chrdev_open+0x585/0x5f0
[  389.056503][ T9290]  ? cd_forget+0x160/0x160
[  389.060998][ T9290]  ? fsnotify_perm+0x3a7/0x560
[  389.065901][ T9290]  ? cd_forget+0x160/0x160
[  389.070308][ T9290]  do_dentry_open+0x7f7/0xf90
[  389.074997][ T9290]  ? vfs_open+0x2b/0x80
[  389.079160][ T9290]  path_openat+0x2718/0x2fb0
[  389.083769][ T9290]  ? __kasan_slab_alloc+0xa9/0xc0
[  389.088889][ T9290]  ? do_filp_open+0x400/0x400
[  389.093571][ T9290]  do_filp_open+0x1df/0x400
[  389.098821][ T9290]  ? vfs_tmpfile+0x300/0x300
[  389.103720][ T9290]  ? _raw_spin_unlock+0x24/0x40
[  389.108584][ T9290]  ? alloc_fd+0x59e/0x650
[  389.113012][ T9290]  do_sys_openat2+0x14b/0x500
[  389.117913][ T9290]  ? __lock_acquire+0x7d40/0x7d40
[  389.123076][ T9290]  ? do_sys_open+0xe0/0xe0
[  389.127644][ T9290]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  389.133647][ T9290]  ? lock_chain_count+0x20/0x20
[  389.138729][ T9290]  __x64_sys_openat+0x135/0x160
[  389.143701][ T9290]  do_syscall_64+0x4c/0xa0
[  389.148377][ T9290]  ? clear_bhb_loop+0x30/0x80
[  389.153091][ T9290]  ? clear_bhb_loop+0x30/0x80
[  389.157990][ T9290]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  389.164101][ T9290] RIP: 0033:0x7f8dc26a4559
[  389.168702][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.189283][ T9290] RSP: 002b:00007f8dc08fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  389.199031][ T9290] RAX: ffffffffffffffda RBX: 00007f8dc292bfa0 RCX: 00007f8dc26a4559
[  389.207251][ T9290] RDX: 00000000000a0201 RSI: 00002000000003c0 RDI: ffffffffffffff9c
[  389.215259][ T9290] RBP: 00007f8dc273bab8 R08: 0000000000000000 R09: 0000000000000000
[  389.223270][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.231395][ T9290] R13: 00007f8dc292c038 R14: 00007f8dc292bfa0 R15: 00007ffe4d92b718
[  389.239680][ T9290]  </TASK>
[  389.258159][ T7710] syz.3.1181 (7710) used greatest stack depth: 18800 bytes left
[  389.356754][ T9298] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1701'.
[  389.443969][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  389.515551][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  389.550377][ T7673] syz.3.1170 (7673) used greatest stack depth: 18784 bytes left
[  389.585255][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  390.285053][ T9318] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744071562067969)
[  390.362342][ T9318] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  390.829788][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1716'.
[  392.454428][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'.
[  393.512760][ T9368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1732'.
[  395.049726][ T9390] netem: change failed
[  395.098086][ T9389] loop4: detected capacity change from 0 to 512
[  395.208623][ T9389] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  395.222322][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'.
[  395.314849][ T9389] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1737: bad orphan inode 13
[  395.407649][ T9389] ext4_test_bit(bit=12, block=18) = 1
[  395.465848][ T9389] is_bad_inode(inode)=0
[  395.497578][ T9389] NEXT_ORPHAN(inode)=0
[  395.532067][ T9389] max_ino=32
[  395.553026][ T9389] i_nlink=1
[  395.577712][ T9389] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  397.683275][ T9422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.694711][ T9420] device syzkaller0 entered promiscuous mode
[  397.736322][ T9424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.504039][ T9437] ip_tables: iptables: counters copy to user failed while replacing table
[  398.563568][ T9438] ip_tables: iptables: counters copy to user failed while replacing table
[  400.800504][ T9461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.185280][ T9435] loop4: detected capacity change from 0 to 32768
[  402.099757][ T9477] CIFS: Attempting to mount \\127.0.0.1\share
[  402.157407][ T9477] CIFS: VFS: Error connecting to socket. Aborting operation.
[  402.207655][ T9477] CIFS: VFS: cifs_mount failed w/return code = -101
[  402.355376][ T9479] loop4: detected capacity change from 0 to 4096
[  402.406843][ T9479] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  402.731334][ T9455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.805735][ T9455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.704205][ T9455] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.714851][  T154] net_ratelimit: 13 callbacks suppressed
[  403.725762][ T9455] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.735272][ T9455] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.748024][ T9455] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.516382][ T9530] loop4: detected capacity change from 0 to 4096
[  406.717200][ T9530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  406.853369][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.861611][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.047082][ T9547] device bridge_slave_1 left promiscuous mode
[  407.086897][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.790870][ T9547] device bridge_slave_0 left promiscuous mode
[  407.890053][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.907679][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'.
[  408.749853][    C0] net_ratelimit: 25 callbacks suppressed
[  409.940489][ T9586] netlink: 'syz.4.1803': attribute type 4 has an invalid length.
[  410.015268][ T9590] netlink: 'syz.4.1803': attribute type 4 has an invalid length.
[  411.930138][ T9612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: syz_tun
[  412.036511][ T9612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.977238][ T9602] loop4: detected capacity change from 0 to 32768
[  413.101160][ T9602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1809 (9602)
[  413.392664][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'.
[  413.495376][ T9602] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  413.606955][ T9602] BTRFS info (device loop4): disabling tree log
[  413.695185][ T9602] BTRFS info (device loop4): using free space tree
[  413.777292][ T9602] BTRFS info (device loop4): has skinny extents
[  413.949899][    C0] net_ratelimit: 33 callbacks suppressed
[  414.092276][ T9602] BTRFS info (device loop4): enabling ssd optimizations
[  414.480373][ T9716] netlink: 'syz.5.1844': attribute type 4 has an invalid length.
[  415.472188][ T9743] netlink: 'syz.5.1857': attribute type 4 has an invalid length.
[  415.970361][ T9698] device ip6_vti0 entered promiscuous mode
[  416.303840][ T9770] overlayfs: failed to clone upperpath
[  416.360836][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'.
[  418.420048][ T9793] netlink: 'syz.1.1868': attribute type 4 has an invalid length.
[  418.648255][ T9760] loop4: detected capacity change from 0 to 32768
[  418.924081][ T9760] JBD2: Ignoring recovery information on journal
[  419.175747][ T9760] JBD2: recovery failed
[  419.225373][ T9760] (syz.4.1846,9760,0):ocfs2_journal_load:1106 ERROR: Failed to load journal!
[  419.267784][ T9820] netlink: 'syz.2.1880': attribute type 4 has an invalid length.
[  419.309881][    C0] net_ratelimit: 27 callbacks suppressed
[  419.338911][ T9760] (syz.4.1846,9760,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5
[  419.440798][ T9760] (syz.4.1846,9760,0):ocfs2_check_volume:2491 ERROR: status = -5
[  419.515104][ T9760] (syz.4.1846,9760,0):ocfs2_mount_volume:1824 ERROR: status = -5
[  419.655934][ T9760] (syz.4.1846,9760,0):ocfs2_fill_super:1177 ERROR: status = -5
[  419.893010][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: syz_tun
[  420.014140][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.096334][ T9848] netlink: 'syz.1.1893': attribute type 4 has an invalid length.
[  420.311392][ T9856] loop4: detected capacity change from 0 to 1024
[  420.509729][   T26] audit: type=1800 audit(1794315917.412:349): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1892" name="bus" dev="loop4" ino=25 res=0 errno=0
[  420.720643][   T26] audit: type=1800 audit(1794315917.452:350): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1892" name="bus" dev="loop4" ino=25 res=0 errno=0
[  421.098606][ T9872] 8021q: adding VLAN 0 to HW filter on device bond1
[  421.262180][ T9880] netlink: 'syz.4.1907': attribute type 4 has an invalid length.
[  421.436635][ T9883] device lo entered promiscuous mode
[  421.749913][ T9758] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  422.019897][ T9758] usb 5-1: Using ep0 maxpacket: 32
[  422.095865][ T9882] device lo left promiscuous mode
[  422.150070][ T9758] usb 5-1: unable to get BOS descriptor or descriptor too short
[  422.270101][ T9758] usb 5-1: unable to read config index 0 descriptor/start: -71
[  422.326181][ T9758] usb 5-1: can't read configurations, error -71
[  422.386332][ T9872] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  422.462290][ T9872] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  422.553416][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  422.599881][ T6012] bond1: (slave macvlan2): link status up again after 0 ms
[  422.650085][ T9876] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  422.680409][ T6012] bond1: (slave macvlan2): link status up again after 0 ms
[  422.741590][ T9888] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1904'.
[  422.778119][ T9892] loop4: detected capacity change from 0 to 1024
[  422.785035][ T6012] bond1: (slave macvlan2): link status up again after 0 ms
[  422.848723][ T9888] bond1: (slave macvlan2): Removing an active aggregator
[  422.895149][ T9892] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  422.938168][ T9888] bond1: (slave macvlan2): Releasing backup interface
[  423.026999][ T9888] bond1: (slave macvlan2): the permanent HWaddr of slave - 2e:49:38:36:41:eb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  423.060262][ T9892] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[  423.240147][ T9888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.410444][ T9888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.174318][   T26] audit: type=1800 audit(1794315921.032:351): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1912" name="file1" dev="loop4" ino=15 res=0 errno=0
[  424.349811][    C0] net_ratelimit: 67 callbacks suppressed
[  424.397028][ T9888] bond0 (unregistering): Released all slaves
[  425.951565][ T9902] loop4: detected capacity change from 0 to 32768
[  426.115188][ T9902] XFS (loop4): Mounting V5 Filesystem
[  426.249703][ T9902] XFS (loop4): Ending clean mount
[  426.375146][ T9902] XFS (loop4): Quotacheck needed: Please wait.
[  426.550781][ T9902] XFS (loop4): Quotacheck: Done.
[  426.848535][ T4186] XFS (loop4): Unmounting Filesystem
[  426.910008][ T9758] Bluetooth: hci0: command 0x0406 tx timeout
[  429.887124][T10013] loop4: detected capacity change from 0 to 128
[  429.950072][    C0] net_ratelimit: 26 callbacks suppressed
[  430.028483][T10013] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  430.282904][T10024] overlayfs: upper fs needs to support d_type.
[  430.457457][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'.
[  430.471623][T10024] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  430.551330][T10024] overlayfs: failed to set xattr on upper
[  430.636082][T10024] overlayfs: ...falling back to index=off,metacopy=off.
[  430.917841][ T4186] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  431.139242][ T4186] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  432.101009][ T6012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.305264][ T6012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.423915][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200'
[  432.439891][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:7 Not tainted syzkaller #0
[  432.447983][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  432.458421][ T4200] Workqueue: hci4 hci_rx_work
[  432.463223][ T4200] Call Trace:
[  432.466535][ T4200]  <TASK>
[  432.469568][ T4200]  dump_stack_lvl+0x188/0x250
[  432.474352][ T4200]  ? show_regs_print_info+0x20/0x20
[  432.479650][ T4200]  ? load_image+0x410/0x410
[  432.484158][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  432.489341][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  432.494017][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  432.499319][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  432.504533][ T4200]  kobject_add+0x160/0x230
[  432.508941][ T4200]  ? kobject_init+0x1c0/0x1c0
[  432.513613][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  432.518909][ T4200]  ? get_device_parent+0x121/0x3e0
[  432.524074][ T4200]  device_add+0x470/0x1050
[  432.528570][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  432.533624][ T4200]  hci_sync_conn_complete_evt+0x647/0x9d0
[  432.539477][ T4200]  ? __rwlock_init+0x140/0x140
[  432.544471][ T4200]  hci_event_packet+0x8cf/0x1310
[  432.549638][ T4200]  ? _raw_spin_unlock+0x40/0x40
[  432.554627][ T4200]  ? rcu_lock_release+0x20/0x20
[  432.559510][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  432.564932][ T4200]  hci_rx_work+0x255/0xa10
[  432.569364][ T4200]  process_one_work+0x867/0xff0
[  432.574299][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  432.580039][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  432.585329][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  432.590447][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  432.595992][ T4200]  ? wq_worker_running+0x97/0x170
[  432.601009][ T4200]  worker_thread+0xad7/0x12a0
[  432.605771][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  432.611759][ T4200]  kthread+0x42e/0x520
[  432.615850][ T4200]  ? rcu_lock_release+0x20/0x20
[  432.620897][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  432.625536][ T4200]  ret_from_fork+0x1f/0x30
[  432.630045][ T4200]  </TASK>
[  432.633642][ T4200] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  432.646995][ T4200] Bluetooth: hci4: failed to register connection device
[  432.758850][ T6012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.005217][ T6012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.456937][T10052] rxe_eth0 speed is unknown, defaulting to 1000
[  433.880360][T10065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.343284][T10077] crypto_alloc_aead failed rc=-2
[  435.070290][    C0] net_ratelimit: 29 callbacks suppressed
[  435.568809][ T1107] Bluetooth: hci4: command 0x0409 tx timeout
[  435.664398][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  435.866227][T10107] kAFS: No cell specified
[  437.829508][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1991'.
[  437.869758][ T4524] Bluetooth: hci2: command 0x041b tx timeout
[  438.268031][T10052] chnl_net:caif_netlink_parms(): no params data found
[  438.476667][T10149] netlink: 'syz.1.1995': attribute type 4 has an invalid length.
[  439.082744][T10168] netlink: 'syz.2.1999': attribute type 32 has an invalid length.
[  439.231564][T10052] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.329756][T10052] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.411581][T10052] device bridge_slave_0 entered promiscuous mode
[  439.531280][ T6012] device hsr_slave_0 left promiscuous mode
[  439.657581][ T6012] device hsr_slave_1 left promiscuous mode
[  439.734592][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.833826][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.922185][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.949805][ T4524] Bluetooth: hci2: command 0x040f tx timeout
[  440.005296][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.154277][ T6012] device veth1_macvtap left promiscuous mode
[  440.192182][    C0] net_ratelimit: 17 callbacks suppressed
[  440.198676][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  440.206013][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  440.237343][ T6012] device veth0_macvtap left promiscuous mode
[  440.309185][ T6012] device veth1_vlan left promiscuous mode
[  440.353280][ T6012] device veth0_vlan left promiscuous mode
[  441.324966][ T6012] team0 (unregistering): Port device team_slave_1 removed
[  441.385030][ T6012] team0 (unregistering): Port device team_slave_0 removed
[  441.439155][ T6012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.515437][ T6012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.878858][ T6012] bond0 (unregistering): Released all slaves
[  441.963288][T10052] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.987474][T10052] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.027900][T10052] device bridge_slave_1 entered promiscuous mode
[  442.039101][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  442.089017][T10200] netlink: 'syz.1.2006': attribute type 4 has an invalid length.
[  442.142405][T10205] netlink: 'syz.2.2009': attribute type 32 has an invalid length.
[  442.408659][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.496728][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.942777][T10052] team0: Port device team_slave_0 added
[  443.051976][T10052] team0: Port device team_slave_1 added
[  443.332966][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.412941][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.655621][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.878520][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.946174][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.194335][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.281490][T10252] device lo entered promiscuous mode
[  444.370213][T10251] device lo left promiscuous mode
[  444.598884][T10052] device hsr_slave_0 entered promiscuous mode
[  444.679796][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  444.734388][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  444.745444][T10052] device hsr_slave_1 entered promiscuous mode
[  444.793667][T10052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  444.809970][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  444.851150][T10052] Cannot create hsr debugfs directory
[  445.277792][T10275] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2029'.
[  445.449280][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.468229][T10239] overlayfs: failed to clone upperpath
[  445.882906][T10298] device lo entered promiscuous mode
[  445.931732][T10296] device lo left promiscuous mode
[  445.949684][    C0] net_ratelimit: 34 callbacks suppressed
[  446.560123][T10052] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  446.648039][T10052] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  446.753219][T10052] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  446.983709][T10052] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  447.108683][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'.
[  447.174569][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'.
[  447.236578][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'.
[  447.604845][T10052] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.390479][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  448.442475][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2046'.
[  448.454854][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  448.565953][T10052] 8021q: adding VLAN 0 to HW filter on device team0
[  448.680534][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  448.753651][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  448.869279][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.876671][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.059981][T10341] device lo entered promiscuous mode
[  449.088813][T10349] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2050'.
[  449.171678][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  449.238327][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  449.351976][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'.
[  449.376181][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  449.548549][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.555682][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.679501][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  449.749049][T10340] device lo left promiscuous mode
[  449.787759][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  449.862521][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  449.949816][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  450.086241][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  450.138991][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  450.221112][ T9757] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  450.290960][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  450.545506][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  450.556852][ T9757] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[  450.817025][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  450.987355][T10052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.088341][T10052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  451.150567][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  451.209577][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  451.226416][   T13] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX)
[  451.285570][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2060'.
[  451.389671][    C0] net_ratelimit: 20 callbacks suppressed
[  451.470006][T10369] ceph: No mds server is up or the cluster is laggy
[  452.022405][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  452.080033][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  452.138152][T10052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.325181][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2070'.
[  453.716060][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  453.764247][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  453.873922][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  453.933301][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  454.018280][T10052] device veth0_vlan entered promiscuous mode
[  454.057302][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  454.121176][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  454.301387][T10052] device veth1_vlan entered promiscuous mode
[  454.465338][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  454.552171][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  454.615873][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2088'.
[  454.654663][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  454.736279][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  454.821244][T10052] device veth0_macvtap entered promiscuous mode
[  454.833286][   T26] audit: type=1326 audit(1794315951.742:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544aec9559 code=0x7ffc0000
[  454.890453][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  454.989593][T10052] device veth1_macvtap entered promiscuous mode
[  455.068259][   T26] audit: type=1326 audit(1794315951.772:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544aec9559 code=0x7ffc0000
[  455.101819][T10502] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2093'.
[  455.259091][T10052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.318161][T10052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.356602][   T26] audit: type=1326 audit(1794315951.772:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544aec9559 code=0x7ffc0000
[  455.428544][T10052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.494563][T10052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.569530][   T26] audit: type=1326 audit(1794315951.772:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f544aec9559 code=0x7ffc0000
[  455.610946][T10052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.684440][T10494] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2093'.
[  455.738437][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  455.797198][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  455.836560][   T26] audit: type=1326 audit(1794315951.772:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f544aec92c2 code=0x7ffc0000
[  455.941825][T10052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.043278][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2101'.
[  456.071357][T10052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.142194][T10052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.155700][   T26] audit: type=1326 audit(1794315951.782:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f544ae89d8e code=0x7ffc0000
[  456.348330][T10052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.413249][    C0] net_ratelimit: 16 callbacks suppressed
[  456.428587][T10052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.452586][   T26] audit: type=1326 audit(1794315951.792:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f544aec9387 code=0x7ffc0000
[  456.505182][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  456.564591][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  456.631661][T10052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.703596][   T26] audit: type=1326 audit(1794315951.792:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f544ae89d8e code=0x7ffc0000
[  456.787759][T10052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.863008][T10052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.936100][T10052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.962188][   T26] audit: type=1326 audit(1794315951.792:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f544aec91eb code=0x7ffc0000
[  457.370727][   T26] audit: type=1326 audit(1794315951.832:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.2092" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f544ae89d8e code=0x7ffc0000
[  457.520670][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.574995][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.628565][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  457.798798][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.864180][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.949195][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  461.264607][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2140'.
[  461.549672][    C0] net_ratelimit: 69 callbacks suppressed
[  463.052381][T10671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2151'.
[  463.149060][T10674] netlink: 'syz.1.2152': attribute type 4 has an invalid length.
[  463.225679][T10661] loop6: detected capacity change from 0 to 40427
[  463.378290][T10661] F2FS-fs (loop6): invalid crc value
[  463.467540][T10661] F2FS-fs (loop6): Found nat_bits in checkpoint
[  463.748829][T10661] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  463.867340][T10661] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  464.440788][T10661] overlayfs: failed to resolve './file0': -2
[  464.642219][T10052] attempt to access beyond end of device
[  464.642219][T10052] loop6: rw=2049, want=45120, limit=40427
[  464.888747][T10706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2163'.
[  465.153892][T10710] netlink: 'syz.1.2165': attribute type 4 has an invalid length.
[  465.400890][T10689] netlink: 'syz.2.2157': attribute type 4 has an invalid length.
[  465.489186][T10689] netlink: 'syz.2.2157': attribute type 10 has an invalid length.
[  466.683200][    C0] net_ratelimit: 25 callbacks suppressed
[  466.828137][T10689] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2157'.
[  466.947284][T10730] netlink: 'syz.5.2170': attribute type 5 has an invalid length.
[  467.311752][T10740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2174'.
[  467.813174][T10746] netlink: 'syz.5.2176': attribute type 4 has an invalid length.
[  467.864504][T10749] loop6: detected capacity change from 0 to 512
[  468.005462][T10749] EXT4-fs (loop6): failed to initialize system zone (-117)
[  468.434860][T10749] EXT4-fs (loop6): mount failed
[  470.034776][T10764] loop6: detected capacity change from 0 to 2048
[  470.260585][T10764] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  470.449513][T10775] netlink: 'syz.3.2183': attribute type 4 has an invalid length.
[  471.188189][T10792] netlink: 'syz.3.2187': attribute type 4 has an invalid length.
[  472.939788][    C0] net_ratelimit: 30 callbacks suppressed
[  473.365716][T10825] netlink: 'syz.5.2199': attribute type 4 has an invalid length.
[  475.696129][T10868] netlink: 'syz.5.2212': attribute type 4 has an invalid length.
[  475.934465][T10877] device bridge0 entered promiscuous mode
[  477.771692][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2224'.
[  477.783308][T10904] netlink: 'syz.2.2226': attribute type 4 has an invalid length.
[  479.199410][    C0] net_ratelimit: 24 callbacks suppressed
[  479.599360][T10936] device lo entered promiscuous mode
[  479.662299][T10935] device lo left promiscuous mode
[  479.998424][T10949] netlink: 'syz.2.2239': attribute type 4 has an invalid length.
[  482.200516][T10986] netlink: 'syz.2.2250': attribute type 4 has an invalid length.
[  484.891322][    C0] net_ratelimit: 32 callbacks suppressed
[  484.965902][T11020] netlink: 'syz.2.2262': attribute type 4 has an invalid length.
[  489.261588][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'.
[  489.700337][T11086] device lo entered promiscuous mode
[  489.790025][T11084] device lo left promiscuous mode
[  490.109736][    C0] net_ratelimit: 33 callbacks suppressed
[  491.879543][ T9758] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  492.339791][ T9758] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  492.398868][ T9758] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  492.574056][T11137] device lo entered promiscuous mode
[  492.643302][T11136] device lo left promiscuous mode
[  492.689791][ T9758] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  493.931794][ T9758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.026481][ T9758] usb 7-1: Product: syz
[  494.056285][ T9758] usb 7-1: Manufacturer: syz
[  494.114577][ T9758] usb 7-1: SerialNumber: syz
[  494.212851][ T9758] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[  494.339271][ T9758] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  494.339271][ T9758]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  495.082276][ T9758] ums-sddr09: probe of 7-1:1.0 failed with error -5
[  495.136253][ T9758] usb 7-1: USB disconnect, device number 2
[  495.229520][    C0] net_ratelimit: 28 callbacks suppressed
[  496.676215][T11152] overlayfs: failed to clone upperpath
[  496.820427][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  496.820438][   T26] audit: type=1804 audit(1794315993.723:366): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2319" name="bus" dev="ramfs" ino=51213 res=1 errno=0
[  497.145242][   T26] audit: type=1804 audit(1794315993.793:367): pid=11199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2319" name="bus" dev="ramfs" ino=51213 res=1 errno=0
[  497.908933][T11225] netlink: 'syz.1.2330': attribute type 4 has an invalid length.
[  500.813106][T11251] loop6: detected capacity change from 0 to 512
[  500.822834][    C0] net_ratelimit: 19 callbacks suppressed
[  500.968287][T11251] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  501.184772][T11251] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=ignore,discard,,errors=continue. Quota mode: writeback.
[  501.200126][T11251] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  501.222096][T11251] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present
[  501.234058][T11251] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  501.243756][T11251] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2336: Failed to acquire dquot type 1
[  501.631772][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  501.640339][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  502.242368][T11280] netlink: 'syz.6.2345': attribute type 4 has an invalid length.
[  505.898616][    C0] net_ratelimit: 27 callbacks suppressed
[  506.131315][T11314] tipc: Can't bind to reserved service type 1
[  506.338215][T11317] loop6: detected capacity change from 0 to 1024
[  507.635683][T11317] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.816428][T11317] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[  507.853164][T11325] netlink: 'syz.2.2356': attribute type 4 has an invalid length.
[  511.064406][    C0] net_ratelimit: 20 callbacks suppressed
[  511.266262][T11359] netlink: 'syz.6.2368': attribute type 4 has an invalid length.
[  511.455847][T11369] loop6: detected capacity change from 0 to 1024
[  511.585383][T11369] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  511.757532][T11369] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[  515.784084][T11391] netlink: 'syz.3.2383': attribute type 4 has an invalid length.
[  516.269387][    C0] net_ratelimit: 22 callbacks suppressed
[  517.122855][T11418] rxe_eth0 speed is unknown, defaulting to 1000
[  517.175733][T11428] netlink: 'syz.6.2397': attribute type 4 has an invalid length.
[  519.224904][T11443] FAULT_INJECTION: forcing a failure.
[  519.224904][T11443] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  519.239650][T11443] CPU: 0 PID: 11443 Comm: syz.6.2403 Not tainted syzkaller #0
[  519.247211][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  519.257786][T11443] Call Trace:
[  519.261072][T11443]  <TASK>
[  519.264008][T11443]  dump_stack_lvl+0x188/0x250
[  519.268704][T11443]  ? show_regs_print_info+0x20/0x20
[  519.273920][T11443]  ? load_image+0x410/0x410
[  519.278517][T11443]  ? uncharge_page+0x490/0x490
[  519.283279][T11443]  should_fail+0x383/0x4b0
[  519.287907][T11443]  prepare_alloc_pages+0x1e3/0x5b0
[  519.293019][T11443]  __alloc_pages+0x11b/0x480
[  519.298053][T11443]  ? zone_statistics+0x170/0x170
[  519.303036][T11443]  ? rcu_lock_acquire+0x30/0x30
[  519.307899][T11443]  ? alloc_pages+0x452/0x560
[  519.312489][T11443]  __get_free_pages+0x8/0x30
[  519.317074][T11443]  __tlb_remove_page_size+0x1f2/0x3f0
[  519.322637][T11443]  unmap_page_range+0xfcf/0x2410
[  519.327585][T11443]  unmap_vmas+0x131/0x250
[  519.331905][T11443]  ? unmap_page_range+0x2410/0x2410
[  519.337321][T11443]  ? __mutex_lock_common+0x435/0x2400
[  519.342907][T11443]  ? exit_mm_release+0x16/0x30
[  519.347783][T11443]  exit_mmap+0x3b9/0x640
[  519.352471][T11443]  ? vm_brk+0x20/0x20
[  519.356632][T11443]  ? uprobe_clear_state+0x2f6/0x460
[  519.361842][T11443]  __mmput+0x115/0x390
[  519.365965][T11443]  exit_mm+0x632/0x7b0
[  519.370408][T11443]  ? perf_pmu_migrate_context+0xb70/0xb70
[  519.376183][T11443]  ? do_exit+0x2110/0x2110
[  519.380967][T11443]  ? __ia32_sys_timer_delete+0x40/0x40
[  519.386767][T11443]  ? hrtimer_try_to_cancel+0x3d6/0x420
[  519.393048][T11443]  ? tty_audit_exit+0x149/0x1f0
[  519.398044][T11443]  do_exit+0x5b8/0x2110
[  519.402365][T11443]  ? put_task_struct+0x80/0x80
[  519.407155][T11443]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  519.413276][T11443]  ? _raw_spin_lock_irq+0xb7/0xf0
[  519.418438][T11443]  do_group_exit+0x12c/0x2f0
[  519.423741][T11443]  ? lockdep_hardirqs_on+0x94/0x140
[  519.429166][T11443]  get_signal+0x7eb/0x12e0
[  519.433605][T11443]  arch_do_signal_or_restart+0xe6/0x12a0
[  519.439265][T11443]  ? userfaultfd_unmap_prep+0x4a0/0x4a0
[  519.444906][T11443]  ? futex_exit_release+0x1c0/0x1c0
[  519.450119][T11443]  ? get_sigframe_size+0x10/0x10
[  519.455146][T11443]  ? __context_tracking_exit+0x4c/0x80
[  519.461226][T11443]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  519.467230][T11443]  ? exit_to_user_mode_loop+0x3b/0x130
[  519.472684][T11443]  exit_to_user_mode_loop+0x9e/0x130
[  519.477964][T11443]  exit_to_user_mode_prepare+0xee/0x180
[  519.483511][T11443]  syscall_exit_to_user_mode+0x16/0x40
[  519.488965][T11443]  do_syscall_64+0x58/0xa0
[  519.493379][T11443]  ? clear_bhb_loop+0x30/0x80
[  519.498459][T11443]  ? clear_bhb_loop+0x30/0x80
[  519.503167][T11443]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  519.509070][T11443] RIP: 0033:0x7fd2b1532559
[  519.513482][T11443] Code: Unable to access opcode bytes at RIP 0x7fd2b153252f.
[  519.520850][T11443] RSP: 002b:00007fd2af78a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  519.529255][T11443] RAX: fffffffffffffe00 RBX: 00007fd2b17b9fa8 RCX: 00007fd2b1532559
[  519.537302][T11443] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd2b17b9fa8
[  519.545560][T11443] RBP: 00007fd2b17b9fa0 R08: 0000000000000000 R09: 0000000000000000
[  519.553536][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.561502][T11443] R13: 00007fd2b17ba038 R14: 00007fffa4b2cd90 R15: 00007fffa4b2ce78
[  519.569563][T11443]  </TASK>
[  521.596240][ T9757] Bluetooth: hci5: command 0x0409 tx timeout
[  521.662274][T11452] netlink: 'syz.3.2406': attribute type 3 has an invalid length.
[  521.724043][ T1107] net_ratelimit: 14 callbacks suppressed
[  521.771460][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  523.445811][T11462] netlink: 'syz.2.2409': attribute type 4 has an invalid length.
[  523.725213][ T9757] Bluetooth: hci5: command 0x041b tx timeout
[  524.004925][T11418] chnl_net:caif_netlink_parms(): no params data found
[  526.239712][ T9758] Bluetooth: hci5: command 0x040f tx timeout
[  527.194994][    C0] net_ratelimit: 12 callbacks suppressed
[  527.228305][T11497] rxe_eth0 speed is unknown, defaulting to 1000
[  527.330283][T11418] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.519386][T11418] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.682905][T11418] device bridge_slave_0 entered promiscuous mode
[  527.780980][T11418] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.947508][T11418] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.025515][T11418] device bridge_slave_1 entered promiscuous mode
[  528.280872][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.308832][T11518] ------------[ cut here ]------------
[  528.338659][T11518] kernel BUG at include/linux/scatterlist.h:143!
[  528.363708][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.387869][T11518] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  528.394040][T11518] CPU: 0 PID: 11518 Comm: syz.1.2427 Not tainted syzkaller #0
[  528.401498][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  528.411628][T11518] RIP: 0010:sg_init_one+0x14a/0x160
[  528.416917][T11518] Code: 80 c1 03 38 c1 7c cf e8 54 cd d7 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 3d cd d7 fd eb c8 e8 d6 87 92 fd <0f> 0b e8 cf 87 92 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  528.436850][T11518] RSP: 0018:ffffc9000359f928 EFLAGS: 00010283
[  528.443004][T11518] RAX: ffffffff83e69b8a RBX: ffffc9000359fc40 RCX: 0000000000080000
[  528.450993][T11518] RDX: ffffc90005681000 RSI: 0000000000004961 RDI: 0000000000004962
[  528.458970][T11518] RBP: 0000000000000000 R08: ffffc9000359fa9f R09: ffffc9000359fa88
[  528.466953][T11518] R10: dffffc0000000000 R11: fffff520006b3f54 R12: 1ffff920006b3f50
[  528.475361][T11518] R13: dffffc0000000000 R14: ffffc9000359fa80 R15: 0000000000000010
[  528.483404][T11518] FS:  00007fa455e846c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  528.492540][T11518] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  528.499383][T11518] CR2: 0000200000cb9030 CR3: 000000002da36000 CR4: 00000000003506f0
[  528.507355][T11518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  528.515501][T11518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  528.523752][T11518] Call Trace:
[  528.527031][T11518]  <TASK>
[  528.530095][T11518]  software_key_eds_op+0x4f6/0xb30
[  528.535463][T11518]  ? software_key_query+0x830/0x830
[  528.540676][T11518]  ? asymmetric_key_eds_op+0xe9/0x130
[  528.546041][T11518]  keyctl_pkey_e_d_s+0x208/0x300
[  528.550978][T11518]  ? keyctl_pkey_params_get+0x4c0/0x4c0
[  528.556528][T11518]  ? do_futex+0xd83/0x12b0
[  528.560957][T11518]  __se_sys_keyctl+0x6c6/0xa20
[  528.565984][T11518]  ? __x64_sys_keyctl+0xc0/0xc0
[  528.570869][T11518]  ? __context_tracking_exit+0x4c/0x80
[  528.576481][T11518]  ? __lock_acquire+0x7d40/0x7d40
[  528.581516][T11518]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  528.587776][T11518]  ? lock_chain_count+0x20/0x20
[  528.592744][T11518]  ? lockdep_hardirqs_on+0x94/0x140
[  528.597979][T11518]  ? __x64_sys_keyctl+0x1c/0xc0
[  528.602851][T11518]  do_syscall_64+0x4c/0xa0
[  528.607405][T11518]  ? clear_bhb_loop+0x30/0x80
[  528.612091][T11518]  ? clear_bhb_loop+0x30/0x80
[  528.616795][T11518]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  528.622704][T11518] RIP: 0033:0x7fa457c2c559
[  528.627116][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.646721][T11518] RSP: 002b:00007fa455e84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  528.655139][T11518] RAX: ffffffffffffffda RBX: 00007fa457eb3fa0 RCX: 00007fa457c2c559
[  528.663106][T11518] RDX: 0000000000000000 RSI: 0000200000003180 RDI: 0000000000000019
[  528.671257][T11518] RBP: 00007fa457cc3ab8 R08: 0000000000000000 R09: 0000000000000000
[  528.679234][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.687295][T11518] R13: 00007fa457eb4038 R14: 00007fa457eb3fa0 R15: 00007fff04697e58
[  528.695279][T11518]  </TASK>
[  528.698417][T11518] Modules linked in:
[  528.702387][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  528.709870][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  528.717307][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  528.724259][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  528.731449][    C0] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0)
[  528.739836][    C0] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0)
[  528.748577][T11510] ping_close(sk=ffff88801ff68680,sk->num=0)
[  528.754688][    C0] No more buffers in queue
[  528.754717][    C0] Receiving skb proto 0x0800 len 52 type 0
[  528.754738][    C0] Receiving skb proto 0x0800 len 52 type 0
[  528.754747][    C0] No more buffers in queue
[  528.754774][    C0] tcp_in_window: START
[  528.754779][    C0] tcp_in_window: 
[  528.754784][    C0] seq=3855635884 ack=2214224852+(0) sack=2214224852+(0) win=24567 end=3855635885
[  528.754797][    C0] tcp_in_window: sender end=3855635884 maxend=3858779692 maxwin=3144576 scale=7 receiver end=2214224852 maxend=2217369428 maxwin=3144832 scale=7
[  528.754813][    C0] tcp_in_window: 
[  528.754817][    C0] seq=3855635884 ack=2214224852+(0) sack=2214224852+(0) win=24567 end=3855635885
[  528.754830][    C0] tcp_in_window: sender end=3855635884 maxend=3858779692 maxwin=3144576 scale=7 receiver end=2214224852 maxend=2217369428 maxwin=3144832 scale=7
[  528.754844][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  528.754853][    C0] tcp_in_window: res=1 sender end=3855635885 maxend=3858779692 maxwin=3144576 receiver end=2214224852 maxend=2217369428 maxwin=3144832
[  528.754866][    C0] tcp_conntracks: 
[  528.754871][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  528.754884][    C0] tcp_in_window: START
[  528.754889][    C0] tcp_in_window: 
[  528.754893][    C0] seq=3855635884 ack=2214224852+(0) sack=2214224852+(0) win=24567 end=3855635885
[  528.754905][    C0] tcp_in_window: sender end=3855635885 maxend=3858779692 maxwin=3144576 scale=7 receiver end=2214224852 maxend=2217369428 maxwin=3144832 scale=7
[  528.754919][    C0] tcp_in_window: 
[  528.754923][    C0] seq=3855635884 ack=2214224852+(0) sack=2214224852+(0) win=24567 end=3855635885
[  528.754935][    C0] tcp_in_window: sender end=3855635885 maxend=3858779692 maxwin=3144576 scale=7 receiver end=2214224852 maxend=2217369428 maxwin=3144832 scale=7
[  528.754949][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  528.754957][    C0] tcp_in_window: res=1 sender end=3855635885 maxend=3858779692 maxwin=3144576 receiver end=2214224852 maxend=2217369428 maxwin=3144832
[  528.754970][    C0] tcp_conntracks: 
[  528.754974][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[  528.755077][    C0] nf_conntrack: normal packet for ffff88807a25c300
[  528.755088][    C0] tcp_in_window: START
[  528.755092][    C0] tcp_in_window: 
[  528.755096][    C0] seq=2214224852 ack=3855635885+(0) sack=3855635885+(0) win=24569 end=2214224852
[  528.755108][    C0] tcp_in_window: sender end=2214224852 maxend=2217369428 maxwin=3144832 scale=7 receiver end=3855635885 maxend=3858779692 maxwin=3144576 scale=7
[  528.755122][    C0] tcp_in_window: 
[  528.755126][    C0] seq=2214224852 ack=3855635885+(0) sack=3855635885+(0) win=24569 end=2214224852
[  528.755139][    C0] tcp_in_window: sender end=2214224852 maxend=2217369428 maxwin=3144832 scale=7 receiver end=3855635885 maxend=3858779692 maxwin=3144576 scale=7
[  528.755152][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  528.755161][    C0] tcp_in_window: res=1 sender end=2214224852 maxend=2217369428 maxwin=3144832 receiver end=3855635885 maxend=3858780717 maxwin=3144576
[  528.755174][    C0] tcp_conntracks: 
[  528.755178][    C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[  528.755226][    C0] No more buffers in queue
[  528.755232][    C0] eth0: xmit ffff88802d8df140 42:01:0a:80:00:01
[  528.755245][    C0] Added buffer head 3 to ffff888022f77900
[  528.755285][    C0] virtqueue callback for ffff888022f77900 (ffffffff854980c0)
[  528.755325][    C0] Sent skb ffff88802d8df140
[  528.755340][    C0] No more buffers in queue
[  529.083159][T11510] isk->refcnt = 1
[  529.086951][T11510] ping_unhash(isk=ffff88801ff68680,isk->num=0)
[  529.093235][T11510] ping_close(sk=ffff888058460000,sk->num=0)
[  529.099318][T11510] isk->refcnt = 1
[  529.102950][T11510] ping_unhash(isk=ffff888058460000,isk->num=0)
[  529.109765][T11512] kcov: kcov_task_exit: t = ffff88807a6f9dc0, kcov->t = ffff88807a6f9dc0
[  529.118595][T11515] kcov: kcov_task_exit: t = ffff888021ec9dc0, kcov->t = ffff888021ec9dc0
[  529.166567][ T1107] Added buffer head 0 to ffff88801edafa00
[  529.174758][ T4171] tcp_in_window: START
[  529.179504][ T4171] tcp_in_window: 
[  529.179517][ T4171] seq=1149098685 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098809
[  529.193300][ T4171] tcp_in_window: sender end=1149098685 maxend=1149162813 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  529.208545][ T4171] tcp_in_window: 
[  529.208559][ T4171] seq=1149098685 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098809
[  529.221722][ T4171] tcp_in_window: sender end=1149098685 maxend=1149162813 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  529.236947][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1
[  529.242497][ T4171] tcp_in_window: res=1 sender end=1149098809 maxend=1149162813 maxwin=64768 receiver end=1673383271 maxend=1673447399 maxwin=65408
[  529.256704][ T4171] tcp_conntracks: 
[  529.256718][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  529.283934][ T4172] nf_conntrack: normal packet for ffff88807a25c300
[  529.297203][   T13] nf_conntrack: new packet for ffff88802b1ab680
[  529.303510][   T13] nf_nat: Already setup manip DST for ct ffff88802b1ab680 (status bits 0x188)
[  529.312371][   T13] nf_nat: Already setup manip SRC for ct ffff88802b1ab680 (status bits 0x188)
[  529.321429][ T9758] nf_conntrack: new packet for ffff88802b1abb00
[  529.327665][ T9758] nf_nat: Already setup manip DST for ct ffff88802b1abb00 (status bits 0x188)
[  529.336884][ T9758] nf_nat: Already setup manip SRC for ct ffff88802b1abb00 (status bits 0x188)
[  529.346435][ T9757] nf_conntrack: new packet for ffff88802b1ab380
[  529.353079][ T9757] nf_conntrack: Confirming conntrack ffff88802b1ab380
[  529.360079][ T4530] Bluetooth: hci5: command 0x0419 tx timeout
[  529.366100][ T4200] hci5 cmd_cnt 1 cmd queued 0
[  529.384461][ T4295] kobject: 'ip6gre0' (ffff888060a52608): kobject_cleanup, parent 0000000000000000
[  529.394461][ T4446] bond_slave_1: bond_netdev_event received NETDEV_BONDING_INFO
[  529.405429][ T4530] nf_conntrack: normal packet for ffff88807a25ca80
[  529.417909][ T4172] tcp_in_window: START
[  529.422215][ T4172] tcp_in_window: 
[  529.422225][ T4172] seq=2214224852 ack=3855635885+(0) sack=3855635885+(0) win=24569 end=2214224853
[  529.435262][ T4172] tcp_in_window: sender end=2214224852 maxend=2217369428 maxwin=3144832 scale=7 receiver end=3855635885 maxend=3858780717 maxwin=3144576 scale=7
[  529.450057][ T4172] tcp_in_window: 
[  529.450069][ T4172] seq=2214224852 ack=3855635885+(0) sack=3855635885+(0) win=24569 end=2214224853
[  529.463081][ T4172] tcp_in_window: sender end=2214224852 maxend=2217369428 maxwin=3144832 scale=7 receiver end=3855635885 maxend=3858780717 maxwin=3144576 scale=7
[  529.477995][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  529.483291][ T4172] tcp_in_window: res=1 sender end=2214224853 maxend=2217369428 maxwin=3144832 receiver end=3855635885 maxend=3858780717 maxwin=3144576
[  529.497091][ T4172] tcp_conntracks: 
[  529.497099][ T4172] syn=0 ack=1 fin=1 rst=0 old=7 new=7
[  529.516635][ T4446] bond0: (slave bond_slave_1): bond_slave_netdev_event called
[  529.529876][ T4295] kobject: 'ip6gre0' (ffff888060a52608): calling ktype release
[  529.550727][ T4446] net bond_slave_1: siw: event 25
[  529.555963][T11418] veth0_to_team (uninitialized): bond_netdev_event received NETDEV_POST_INIT
[  529.573131][ T4295] kobject: 'ip6gre0': free name
[  529.592692][T11418]  (null): siw: event 17
[  529.597073][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  529.597114][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  529.597121][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  529.618663][ T9757] Added buffer head 0 to ffff88801edafa00
[  529.624767][T11516] kcov: kcov_task_exit: t = ffff888018793b80, kcov->t = ffff888018793b80
[  529.633511][T11519] kcov: kcov_task_exit: t = ffff888021ecbb80, kcov->t = ffff888021ecbb80
[  529.715526][T11418] device: 'veth0_to_team': device_add
[  529.742345][T11418] kobject: 'veth0_to_team' (ffff888079bee608): kobject_add_internal: parent: 'net', set: 'devices'
[  529.783484][T11418] net veth0_to_team: No ACPI support
[  529.789447][ T9757] nf_conntrack: new packet for ffff88802b1aa300
[  529.795796][ T9757] nf_nat: Already setup manip DST for ct ffff88802b1aa300 (status bits 0x188)
[  529.804685][ T9757] nf_nat: Already setup manip SRC for ct ffff88802b1aa300 (status bits 0x188)
[  529.832297][T11418] PM: Adding info for No Bus:veth0_to_team
[  529.857386][T11418] kobject: 'veth0_to_team' (ffff888079bee608): kobject_uevent_env
[  529.890363][T11418] kobject: 'veth0_to_team' (ffff888079bee608): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team'
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  529.930809][ T4171] No more buffers in queue
[  529.935255][ T4171] eth0: xmit ffff88802d154868 42:01:0a:80:00:01
[  529.941527][ T4171] Added buffer head 34 to ffff888023063c00
[  529.947335][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  529.947355][    C0] virtqueue callback for ffff888023063c00 (ffffffff854980c0)
[  529.963388][    C0] Sent skb ffff88802d154868
[  529.967996][    C0] No more buffers in queue
[  529.972466][    C0] Receiving skb proto 0x0800 len 52 type 0
[  529.978272][    C0] No more buffers in queue
[  529.982793][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  529.989639][    C0] tcp_in_window: START
[  529.993698][    C0] tcp_in_window: 
[  529.993705][    C0] seq=1673383271 ack=1149098809+(0) sack=1149098809+(0) win=501 end=1673383271
[  530.006358][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098809 maxend=1149162813 maxwin=64768 scale=7
[  530.020690][    C0] tcp_in_window: 
[  530.020697][    C0] seq=1673383271 ack=1149098809+(0) sack=1149098809+(0) win=501 end=1673383271
[  530.033346][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098809 maxend=1149162813 maxwin=64768 scale=7
[  530.047664][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  530.052963][    C0] tcp_in_window: res=1 sender end=1673383271 maxend=1673447399 maxwin=65408 receiver end=1149098809 maxend=1149162937 maxwin=64768
[  530.066584][    C0] tcp_conntracks: 
[  530.066592][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  530.076683][    C0] No more buffers in queue
[  530.089388][T11418] kobject: 'queues' (ffff88802360e050): kobject_add_internal: parent: 'veth0_to_team', set: '<NULL>'
[  530.109406][ T4172] No more buffers in queue
[  530.113870][ T4172] eth0: xmit ffff88802d1540e8 42:01:0a:80:00:01
[  530.120172][ T4172] Added buffer head 3 to ffff888022f77900
[  530.125974][    C0] virtqueue callback for ffff888022f77900 (ffffffff854980c0)
[  530.125994][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  530.141376][    C0] Sent skb ffff88802d1540e8
[  530.145981][    C0] No more buffers in queue
[  530.150420][    C0] No more buffers in queue
[  530.154851][    C0] Receiving skb proto 0x0800 len 52 type 0
[  530.160850][    C0] No more buffers in queue
[  530.165385][    C0] tcp_in_window: START
[  530.169475][    C0] tcp_in_window: 
[  530.169483][    C0] seq=3855635885 ack=2214224853+(0) sack=2214224853+(0) win=24567 end=3855635885
[  530.182512][    C0] tcp_in_window: sender end=3855635885 maxend=3858780717 maxwin=3144576 scale=7 receiver end=2214224853 maxend=2217369428 maxwin=3144832 scale=7
[  530.197187][    C0] tcp_in_window: 
[  530.197195][    C0] seq=3855635885 ack=2214224853+(0) sack=2214224853+(0) win=24567 end=3855635885
[  530.209922][    C0] tcp_in_window: sender end=3855635885 maxend=3858780717 maxwin=3144576 scale=7 receiver end=2214224853 maxend=2217369428 maxwin=3144832 scale=7
[  530.224769][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  530.230054][    C0] tcp_in_window: res=1 sender end=3855635885 maxend=3858780717 maxwin=3144576 receiver end=2214224853 maxend=2217369429 maxwin=3144832
[  530.243861][    C0] tcp_conntracks: 
[  530.243868][    C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[  530.257150][T11256] kcov: kcov_task_exit: t = ffff88802131d940, kcov->t = ffff88802131d940
[  530.266227][T11418] kobject: 'queues' (ffff88802360e050): kobject_uevent_env
[  530.274824][T11418] kobject: 'queues' (ffff88802360e050): kobject_uevent_env: filter function caused the event to drop!
[  530.299333][T11418] kobject: 'rx-0' (ffff88802fce8450): kobject_add_internal: parent: 'queues', set: 'queues'
[  530.320012][ T4185] ffff8880634a0000 name hci1 bus 0
[  530.326488][ T7480] ffff888079fd0000 name hci4 bus 0
[  530.335820][T11424] ffff8880673b4000 name hci2 bus 0
[  530.342136][ T4171] tcp_in_window: START
[  530.346314][ T4171] tcp_in_window: 
[  530.346321][ T4171] seq=1149098809 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098845
[  530.359239][ T4171] tcp_in_window: sender end=1149098809 maxend=1149162937 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  530.373643][ T4171] tcp_in_window: 
[  530.373656][ T4171] seq=1149098809 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098845
[  530.386209][ T4171] tcp_in_window: sender end=1149098809 maxend=1149162937 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  530.400667][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1
[  530.406050][ T4171] tcp_in_window: res=1 sender end=1149098845 maxend=1149162937 maxwin=64768 receiver end=1673383271 maxend=1673447399 maxwin=65408
[  530.419518][ T4171] tcp_conntracks: 
[  530.419528][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  530.432860][ T4524] nf_conntrack: new packet for ffff88802b1abb00
[  530.439228][ T4524] nf_nat: Already setup manip DST for ct ffff88802b1abb00 (status bits 0x188)
[  530.448141][ T4524] nf_nat: Already setup manip SRC for ct ffff88802b1abb00 (status bits 0x188)
[  530.457651][ T9757] nf_conntrack: new packet for ffff88802b1aa180
[  530.464106][ T9757] nf_nat: Already setup manip DST for ct ffff88802b1aa180 (status bits 0x188)
[  530.472963][ T9757] nf_nat: Already setup manip SRC for ct ffff88802b1aa180 (status bits 0x188)
[  530.481925][ T9758] nf_conntrack: new packet for ffff88802b1ab680
[  530.488192][ T9758] nf_nat: Already setup manip DST for ct ffff88802b1ab680 (status bits 0x188)
[  530.497104][ T9758] nf_nat: Already setup manip SRC for ct ffff88802b1ab680 (status bits 0x188)
[  530.506081][   T13] nf_conntrack: new packet for ffff88802b1aac00
[  530.512345][   T13] nf_nat: Already setup manip DST for ct ffff88802b1aac00 (status bits 0x188)
[  530.521549][   T13] nf_nat: Already setup manip SRC for ct ffff88802b1aac00 (status bits 0x188)
[  530.530568][ T4530] nf_conntrack: new packet for ffff88802b1ab080
[  530.536822][ T4530] nf_nat: Already setup manip DST for ct ffff88802b1ab080 (status bits 0x188)
[  530.545730][ T4530] nf_nat: Already setup manip SRC for ct ffff88802b1ab080 (status bits 0x188)
[  530.554738][ T1107] nf_conntrack: normal packet for ffff88807a25ca80
[  530.561302][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  530.568848][ T4280] nf_conntrack: normal packet for ffff88807a25d980
[  530.576094][    C0] No more buffers in queue
[  530.580634][    C0] Receiving skb proto 0x0806 len 28 type 1
[  530.586514][    C0] No more buffers in queue
[  530.591040][    C0] No more buffers in queue
[  530.595448][    C0] eth0: xmit ffff888076913a00 42:01:0a:80:00:01
[  530.601729][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  530.601762][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  530.601770][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  530.623205][    C0] Added buffer head 34 to ffff888023063c00
[  530.629201][    C0] virtqueue callback for ffff888023063c00 (ffffffff854980c0)
[  530.636885][    C0] Sent skb ffff888076913a00
[  530.641501][    C0] No more buffers in queue
[  530.647301][ T4522] Added buffer head 0 to ffff88801edafa00
[  530.657349][ T4180] kcov: kcov_task_exit: t = ffff88807a6fbb80, kcov->t = ffff88807a6fbb80
[  530.665858][ T4181] kcov: kcov_task_exit: t = ffff88807a6fd940, kcov->t = ffff88807a6fd940
[  530.674679][ T4182] kcov: kcov_task_exit: t = ffff88807a000000, kcov->t = ffff88807a000000
[  530.683355][T10049] kcov: kcov_task_exit: t = ffff88802c441dc0, kcov->t = ffff88802c441dc0
[  530.692141][T11400] kcov: kcov_task_exit: t = ffff8880261ebb80, kcov->t = ffff8880261ebb80
[  530.707053][T11418] kobject: 'rx-0' (ffff88802fce8450): kobject_uevent_env
[  530.714527][ T4185] hci1 ffff8880634a0000
[  530.718932][ T4185] hci1: err 0x13
[  530.723136][ T7480] hci4 ffff888079fd0000
[  530.727571][T11424] hci2 ffff8880673b4000
[  530.783705][ T7480] hci4: err 0x13
[  530.787291][ T7480] hci4: cancelling interleave scan
[  530.792620][T11424] hci2: err 0x13
[  530.796198][T11424] hci2: cancelling interleave scan
[  530.801765][T11418] kobject: 'rx-0' (ffff88802fce8450): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/rx-0'
[  530.813691][ T4185] hci1: cancelling interleave scan
[  530.818824][ T4185] hci1 state 0 -> 0
[  530.822832][ T7480] hci4 state 0 -> 0
[  530.826634][ T7480] All LE pending actions cleared
[  530.859324][T11424] hci2 state 0 -> 0
[  530.863159][T11424] All LE pending actions cleared
[  530.868078][T11424] hdev hci2
[  530.871488][ T4185] All LE pending actions cleared
[  530.876524][ T4185] hdev hci1
[  530.880510][T11418] kobject: 'rx-1' (ffff88802fce8510): kobject_add_internal: parent: 'queues', set: 'queues'
[  530.899835][ T7480] hdev hci4
[  530.903014][ T7480] hcon ffff888078df2000 reason 22
[  530.908354][ T7480] hcon ffff888078df2000 conn ffff88806088ee00, err 103
[  530.939409][T11418] kobject: 'rx-1' (ffff88802fce8510): kobject_uevent_env
[  530.946463][T11418] kobject: 'rx-1' (ffff88802fce8510): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/rx-1'
[  530.973522][ T4185] hcon ffff888079dc4000 reason 22
[  530.978654][ T4185] hcon ffff888079dc4000 conn ffff888079da6000, err 103
[  530.985813][ T7480] hci4 hcon ffff888078df2000 handle 200
[  530.992586][ T7480] hcon ffff888078df2000
[  530.996961][ T4185] hci1 hcon ffff888079dc4000 chan ffff8880258c3f00
[  531.003932][T11418] kobject: 'tx-0' (ffff8880238db018): kobject_add_internal: parent: 'queues', set: 'queues'
[  531.018567][T11418] kobject: 'tx-0' (ffff8880238db018): kobject_uevent_env
[  531.025945][T11418] kobject: 'tx-0' (ffff8880238db018): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/tx-0'
[  531.039171][T11418] kobject: 'tx-1' (ffff8880238db198): kobject_add_internal: parent: 'queues', set: 'queues'
[  531.050495][ T4171] No more buffers in queue
[  531.054917][ T4171] eth0: xmit ffff88802d1554e8 42:01:0a:80:00:01
[  531.061190][ T4171] Added buffer head 34 to ffff888023063c00
[  531.066992][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  531.067012][    C0] virtqueue callback for ffff888023063c00 (ffffffff854980c0)
[  531.081851][    C0] Sent skb ffff88802d1554e8
[  531.086351][    C0] No more buffers in queue
[  531.090794][    C0] Receiving skb proto 0x0800 len 52 type 0
[  531.096598][    C0] No more buffers in queue
[  531.101024][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  531.107687][    C0] tcp_in_window: START
[  531.111759][    C0] tcp_in_window: 
[  531.111767][    C0] seq=1673383271 ack=1149098845+(0) sack=1149098845+(0) win=501 end=1673383271
[  531.124467][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098845 maxend=1149162937 maxwin=64768 scale=7
[  531.139258][    C0] tcp_in_window: 
[  531.139286][    C0] seq=1673383271 ack=1149098845+(0) sack=1149098845+(0) win=501 end=1673383271
[  531.151961][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098845 maxend=1149162937 maxwin=64768 scale=7
[  531.166487][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  531.171923][    C0] tcp_in_window: res=1 sender end=1673383271 maxend=1673447399 maxwin=65408 receiver end=1149098845 maxend=1149162973 maxwin=64768
[  531.185782][    C0] tcp_conntracks: 
[  531.185796][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  531.196499][    C0] No more buffers in queue
[  531.203065][T11418] kobject: 'tx-1' (ffff8880238db198): kobject_uevent_env
[  531.211290][T11418] kobject: 'tx-1' (ffff8880238db198): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/tx-1'
[  531.223277][T11418] Registering net sysctl (net ffff88801a18cf80): net/ipv4/neigh/veth0_to_team
[  531.233368][T11418]   procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e354
[  531.250464][ T7480] hci4: conn ffff888078df2000
[  531.255159][ T7480] kobject: 'hci4:200' (ffff888078df2420): kobject_cleanup, parent 0000000000000000
[  531.264704][ T4185] hci1 hcon ffff888079dc4000 handle 201
[  531.271089][T11424] hcon ffff88805ae84000 reason 22
[  531.276223][T11424] hcon ffff88805ae84000 conn ffff88807aee9000, err 103
[  531.285376][ T4171] tcp_in_window: START
[  531.289502][ T4171] tcp_in_window: 
[  531.289513][ T4171] seq=1149098845 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098933
[  531.302893][ T4171] tcp_in_window: sender end=1149098845 maxend=1149162973 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  531.317349][ T4171] tcp_in_window: 
[  531.317359][ T4171] seq=1149098845 ack=1673383271+(0) sack=1673383271+(0) win=501 end=1149098933
[  531.330221][ T4171] tcp_in_window: sender end=1149098845 maxend=1149162973 maxwin=64768 scale=7 receiver end=1673383271 maxend=1673447399 maxwin=65408 scale=7
[  531.344720][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1
[  531.350027][ T4171] tcp_in_window: res=1 sender end=1149098933 maxend=1149162973 maxwin=64768 receiver end=1673383271 maxend=1673447399 maxwin=65408
[  531.363521][ T4171] tcp_conntracks: 
[  531.363531][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  531.379323][ T4185] hcon ffff888079dc4000
[  531.390784][T11424] hci2 hcon ffff88805ae84000 chan ffff88807c845e00
[  531.397510][T11418]   procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e358
[  531.419314][ T7480] kobject: 'hci4:200' (ffff888078df2420): calling ktype release
[  531.426987][ T7480] kobject: 'hci4:200': free name
[  531.436528][T11256] ffff8880661cc000 name hci0 bus 0
[  531.441729][T11418]   procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e35c
[  531.454298][ T7480] hci4 orig refcnt 13
[  531.470556][T11418]   procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e360
[  531.484508][T11256] hci0 ffff8880661cc000
[  531.488687][T11256] hci0: err 0x13
[  531.494784][ T4524] nf_conntrack: new packet for ffff88802b1abb00
[  531.501814][ T4524] nf_nat: Already setup manip DST for ct ffff88802b1abb00 (status bits 0x188)
[  531.510804][ T4524] nf_nat: Already setup manip SRC for ct ffff88802b1abb00 (status bits 0x188)
[  531.521353][T11256] hci0: cancelling interleave scan
[  531.526675][T11256] hci0 state 0 -> 0
[  531.530780][T11418]   procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802360e364
[  531.543763][T11256] All LE pending actions cleared
[  531.550452][   T13] nf_conntrack: new packet for ffff88802b1ab680
[  531.557487][   T13] nf_nat: Already setup manip DST for ct ffff88802b1ab680 (status bits 0x188)
[  531.566423][   T13] nf_nat: Already setup manip SRC for ct ffff88802b1ab680 (status bits 0x188)
[  531.577535][T11418]   procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88802360e368
[  531.592350][T11256] hdev hci0
[  531.595773][T11418]   procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88802360e36c
[  531.607277][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  531.607320][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  531.607327][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  531.629349][ T4524] Added buffer head 0 to ffff88801edafa00
[  531.636130][T11518] ---[ end trace 3ca672208dc5cb29 ]---
[  531.641759][ T9757] nf_conntrack: normal packet for ffff88807a25ca80
[  531.648971][T11518] RIP: 0010:sg_init_one+0x14a/0x160
[  531.655602][T11518] Code: 80 c1 03 38 c1 7c cf e8 54 cd d7 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 3d cd d7 fd eb c8 e8 d6 87 92 fd <0f> 0b e8 cf 87 92 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  531.676943][ T4171] No more buffers in queue
[  531.681477][ T4171] eth0: xmit ffff88802d155268 42:01:0a:80:00:01
[  531.687808][ T4171] Added buffer head 34 to ffff888023063c00
[  531.693749][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  531.693772][    C0] virtqueue callback for ffff888023063c00 (ffffffff854980c0)
[  531.708768][    C0] Sent skb ffff88802d155268
[  531.713477][    C0] No more buffers in queue
[  531.717980][    C0] Receiving skb proto 0x0800 len 52 type 0
[  531.723905][    C0] Receiving skb proto 0x0800 len 88 type 0
[  531.730072][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  531.737582][    C0] Receiving skb proto 0x0800 len 112 type 0
[  531.743888][    C0] Receiving skb proto 0x0800 len 52 type 0
[  531.749799][    C0] Receiving skb proto 0x0800 len 52 type 0
[  531.755705][    C0] No more buffers in queue
[  531.760255][    C0] Added buffer head 845 to ffff888023063b00
[  531.766223][    C0] Added buffer head 844 to ffff888023063b00
[  531.772340][    C0] Added buffer head 843 to ffff888023063b00
[  531.778271][    C0] Added buffer head 842 to ffff888023063b00
[  531.784277][    C0] Added buffer head 841 to ffff888023063b00
[  531.790174][    C0] Added buffer head 840 to ffff888023063b00
[  531.796052][    C0] Added buffer head 839 to ffff888023063b00
[  531.802030][    C0] Added buffer head 838 to ffff888023063b00
[  531.807908][    C0] Added buffer head 680 to ffff888023063b00
[  531.813820][    C0] Added buffer head 679 to ffff888023063b00
[  531.819712][    C0] Added buffer head 678 to ffff888023063b00
[  531.825590][    C0] Added buffer head 677 to ffff888023063b00
[  531.831532][    C0] Added buffer head 676 to ffff888023063b00
[  531.837432][    C0] Added buffer head 675 to ffff888023063b00
[  531.843338][    C0] Added buffer head 674 to ffff888023063b00
[  531.849218][    C0] Added buffer head 748 to ffff888023063b00
[  531.855137][    C0] Added buffer head 747 to ffff888023063b00
[  531.861273][    C0] Added buffer head 746 to ffff888023063b00
[  531.867377][    C0] Added buffer head 745 to ffff888023063b00
[  531.873297][    C0] Added buffer head 744 to ffff888023063b00
[  531.879362][    C0] Added buffer head 743 to ffff888023063b00
[  531.885391][    C0] Added buffer head 817 to ffff888023063b00
[  531.891639][    C0] Added buffer head 816 to ffff888023063b00
[  531.897685][    C0] Added buffer head 815 to ffff888023063b00
[  531.903717][    C0] Added buffer head 814 to ffff888023063b00
[  531.909651][    C0] Added buffer head 813 to ffff888023063b00
[  531.915847][    C0] Added buffer head 812 to ffff888023063b00
[  531.921774][    C0] Added buffer head 811 to ffff888023063b00
[  531.927768][    C0] Added buffer head 810 to ffff888023063b00
[  531.933879][    C0] Added buffer head 809 to ffff888023063b00
[  531.940040][    C0] Added buffer head 808 to ffff888023063b00
[  531.946112][    C0] Added buffer head 807 to ffff888023063b00
[  531.952028][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  531.959464][    C0] Added buffer head 806 to ffff888023063b00
[  531.965457][    C0] Added buffer head 805 to ffff888023063b00
[  531.971453][    C0] Added buffer head 804 to ffff888023063b00
[  531.977450][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  531.983961][    C0] tcp_in_window: START
[  531.988029][    C0] tcp_in_window: 
[  531.988036][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383271
[  532.000699][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149162973 maxwin=64768 scale=7
[  532.015468][    C0] tcp_in_window: 
[  532.015476][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383271
[  532.028741][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149162973 maxwin=64768 scale=7
[  532.043522][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.048798][    C0] tcp_in_window: res=1 sender end=1673383271 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.063275][    C0] tcp_conntracks: 
[  532.063289][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  532.072587][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.079415][    C0] tcp_in_window: START
[  532.083485][    C0] tcp_in_window: 
[  532.083496][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383307
[  532.096266][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.110724][    C0] tcp_in_window: 
[  532.110734][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383307
[  532.123989][    C0] tcp_in_window: sender end=1673383271 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.138470][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.143973][    C0] tcp_in_window: res=1 sender end=1673383307 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.158389][    C0] tcp_conntracks: 
[  532.158403][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  532.170265][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.177063][    C0] tcp_in_window: START
[  532.181483][    C0] tcp_in_window: 
[  532.181498][    C0] seq=1673383307 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383367
[  532.194449][    C0] tcp_in_window: sender end=1673383307 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.208870][    C0] tcp_in_window: 
[  532.208877][    C0] seq=1673383307 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383367
[  532.221663][    C0] tcp_in_window: sender end=1673383307 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.237112][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.242906][    C0] tcp_in_window: res=1 sender end=1673383367 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.257343][    C0] tcp_conntracks: 
[  532.257358][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  532.266692][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.273240][    C0] tcp_in_window: START
[  532.277327][    C0] tcp_in_window: 
[  532.277340][    C0] seq=1673383367 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.290633][    C0] tcp_in_window: sender end=1673383367 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.305967][    C0] tcp_in_window: 
[  532.305978][    C0] seq=1673383367 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.319013][    C0] tcp_in_window: sender end=1673383367 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.333506][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.339075][    C0] tcp_in_window: res=1 sender end=1673383368 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.352573][    C0] tcp_conntracks: 
[  532.352587][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  532.361720][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.368220][    C0] tcp_in_window: START
[  532.372304][    C0] tcp_in_window: 
[  532.372311][    C0] seq=1673383367 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.384969][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.399512][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  532.407212][    C0] tcp_in_window: 
[  532.407233][    C0] seq=1673383367 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.420236][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.434881][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.440794][    C0] tcp_in_window: res=1 sender end=1673383368 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.454657][    C0] tcp_conntracks: 
[  532.454673][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[  532.465202][    C0] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 13)
[  532.477366][    C0] No more buffers in queue
[  532.481903][    C0] No more buffers in queue
[  532.486417][    C0] Receiving skb proto 0x0800 len 148 type 0
[  532.492506][    C0] Receiving skb proto 0x0800 len 148 type 0
[  532.498572][    C0] No more buffers in queue
[  532.503012][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.509522][    C0] tcp_in_window: START
[  532.513609][    C0] tcp_in_window: 
[  532.513616][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.526683][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.541363][    C0] tcp_in_window: 
[  532.541377][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.554219][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.569149][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.574490][    C0] tcp_in_window: res=1 sender end=1673383368 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.588265][    C0] tcp_conntracks: 
[  532.588279][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[  532.597618][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  532.597665][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  532.597672][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  532.619028][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  532.625658][    C0] tcp_in_window: START
[  532.629821][    C0] tcp_in_window: 
[  532.629829][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.642844][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.657206][    C0] tcp_in_window: 
[  532.657214][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  532.669781][    C0] tcp_in_window: sender end=1673383368 maxend=1673447399 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  532.684109][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  532.689511][    C0] tcp_in_window: res=1 sender end=1673383368 maxend=1673447399 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  532.703061][    C0] tcp_conntracks: 
[  532.703069][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[  532.712358][ T6012] net_ratelimit: 18 callbacks suppressed
[  532.712370][ T6012] wireguard: wg2: Sending handshake initiation to peer 36 (127.0.0.1:20002)
[  532.728320][ T9757] Added buffer head 0 to ffff88801edafa00
[  532.735486][    C0] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0)
[  532.744380][    C0] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0)
[  532.752795][    C0] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0)
[  532.762121][ T1091] sd 0:0:1:0: cmd ffff888023ea4528 CDB: 0x2a
[  532.768517][ T1091] Added buffer head 184 to ffff888147d5ba00
[  532.780140][ T1091] sd 0:0:1:0: cmd ffff888023ea4928 CDB: 0x2a
[  532.786338][ T1091] Added buffer head 24 to ffff888147d5ba00
[  532.792420][ T1091] sd 0:0:1:0: cmd ffff888023ea4d28 CDB: 0x2a
[  532.798418][ T1091] Added buffer head 45 to ffff888147d5ba00
[  532.804452][ T1091] sd 0:0:1:0: cmd ffff888023ea5128 CDB: 0x2a
[  532.810486][ T1091] Added buffer head 208 to ffff888147d5ba00
[  532.816419][ T1091] sd 0:0:1:0: cmd ffff888023ea5528 CDB: 0x2a
[  532.822449][ T1091] Added buffer head 202 to ffff888147d5ba00
[  532.828397][ T1091] sd 0:0:1:0: cmd ffff888023ea5928 CDB: 0x2a
[  532.834431][ T1091] Added buffer head 211 to ffff888147d5ba00
[  532.840394][ T1091] sd 0:0:1:0: cmd ffff888023ea5d28 CDB: 0x2a
[  532.846373][ T1091] Added buffer head 49 to ffff888147d5ba00
[  532.852712][ T1091] sd 0:0:1:0: cmd ffff888023ea6128 CDB: 0x2a
[  532.858691][ T1091] Added buffer head 180 to ffff888147d5ba00
[  532.866466][    C0] virtqueue callback for ffff888147d5ba00 (ffffffff8506e140)
[  532.873841][    C0] sd 0:0:1:0: cmd ffff888023ea5128 response 0 status 0x0 sense_len 0
[  532.881904][    C0] sd 0:0:1:0: cmd ffff888023ea4928 response 0 status 0x0 sense_len 0
[  532.890518][    C0] sd 0:0:1:0: cmd ffff888023ea6128 response 0 status 0x0 sense_len 0
[  532.898783][    C0] sd 0:0:1:0: cmd ffff888023ea5928 response 0 status 0x0 sense_len 0
[  532.907111][    C0] sd 0:0:1:0: cmd ffff888023ea4528 response 0 status 0x0 sense_len 0
[  532.915273][    C0] sd 0:0:1:0: cmd ffff888023ea5528 response 0 status 0x0 sense_len 0
[  532.923470][    C0] sd 0:0:1:0: cmd ffff888023ea5d28 response 0 status 0x0 sense_len 0
[  532.931745][    C0] sd 0:0:1:0: cmd ffff888023ea4d28 response 0 status 0x0 sense_len 0
[  532.940156][    C0] No more buffers in queue
[  532.947776][T11418]   procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff88802360e370
[  532.963352][   T13] nf_conntrack: new packet for ffff88802b1ab680
[  532.969629][   T13] nf_nat: Already setup manip DST for ct ffff88802b1ab680 (status bits 0x188)
[  532.978474][   T13] nf_nat: Already setup manip SRC for ct ffff88802b1ab680 (status bits 0x188)
[  532.987533][ T4524] nf_conntrack: normal packet for ffff88807a25ca80
[  532.994186][ T4530] nf_conntrack: new packet for ffff88802b1abb00
[  533.000446][ T4530] nf_nat: Already setup manip DST for ct ffff88802b1abb00 (status bits 0x188)
[  533.009304][ T4530] nf_nat: Already setup manip SRC for ct ffff88802b1abb00 (status bits 0x188)
[  533.018788][T11418]   procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e374
[  533.030385][T11518] RSP: 0018:ffffc9000359f928 EFLAGS: 00010283
[  533.036542][T11518] RAX: ffffffff83e69b8a RBX: ffffc9000359fc40 RCX: 0000000000080000
[  533.044895][ T6012] nf_conntrack: normal packet for ffff88807a25db00
[  533.051558][T11418]   procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff88802360e378
[  533.062676][    C0] wireguard: wg1: Sending keepalive packet to peer 40 (127.0.0.1:20003)
[  533.071231][    C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12)
[  533.083631][ T6012] wireguard: wg1: Sending handshake initiation to peer 34 (127.0.0.1:20003)
[  533.093942][ T4446] sd 0:0:1:0: cmd ffff888023ea6528 CDB: 0x2a
[  533.099976][ T4446] Added buffer head 45 to ffff888147d5ba00
[  533.105813][ T4446] sd 0:0:1:0: cmd ffff888023ea6928 CDB: 0x2a
[  533.111822][ T4446] Added buffer head 49 to ffff888147d5ba00
[  533.117717][ T4446] sd 0:0:1:0: cmd ffff888023ea6d28 CDB: 0x2a
[  533.123740][ T4446] Added buffer head 202 to ffff888147d5ba00
[  533.129669][ T4446] sd 0:0:1:0: cmd ffff888023ea7128 CDB: 0x2a
[  533.135656][ T4446] Added buffer head 184 to ffff888147d5ba00
[  533.141571][ T4446] sd 0:0:1:0: cmd ffff888023ea7528 CDB: 0x2a
[  533.147783][ T4446] Added buffer head 211 to ffff888147d5ba00
[  533.154019][ T4446] sd 0:0:1:0: cmd ffff888023ea7928 CDB: 0x2a
[  533.160039][ T4446] Added buffer head 180 to ffff888147d5ba00
[  533.166051][ T4446] sd 0:0:1:0: cmd ffff888023ea7d28 CDB: 0x2a
[  533.172090][ T4446] Added buffer head 24 to ffff888147d5ba00
[  533.177920][ T4446] sd 0:0:1:0: cmd ffff888023ea8128 CDB: 0x2a
[  533.183920][ T4446] Added buffer head 208 to ffff888147d5ba00
[  533.189823][ T4446] sd 0:0:1:0: cmd ffff888023ea8528 CDB: 0x2a
[  533.195878][ T4446] Added buffer head 186 to ffff888147d5ba00
[  533.203867][    C0] virtqueue callback for ffff888147d5ba00 (ffffffff8506e140)
[  533.211508][    C0] sd 0:0:1:0: cmd ffff888023ea7528 response 0 status 0x0 sense_len 0
[  533.219567][    C0] sd 0:0:1:0: cmd ffff888023ea7928 response 0 status 0x0 sense_len 0
[  533.227640][    C0] sd 0:0:1:0: cmd ffff888023ea6528 response 0 status 0x0 sense_len 0
[  533.235691][    C0] sd 0:0:1:0: cmd ffff888023ea6d28 response 0 status 0x0 sense_len 0
[  533.243740][    C0] sd 0:0:1:0: cmd ffff888023ea7128 response 0 status 0x0 sense_len 0
[  533.251897][    C0] sd 0:0:1:0: cmd ffff888023ea6928 response 0 status 0x0 sense_len 0
[  533.260362][    C0] sd 0:0:1:0: cmd ffff888023ea7d28 response 0 status 0x0 sense_len 0
[  533.268434][    C0] sd 0:0:1:0: cmd ffff888023ea8128 response 0 status 0x0 sense_len 0
[  533.276609][    C0] sd 0:0:1:0: cmd ffff888023ea8528 response 0 status 0x0 sense_len 0
[  533.285284][    C0] No more buffers in queue
[  533.290206][ T4524] wireguard: wg1: No route to 127.0.0.1:20003, error -101
[  533.297520][    C0] virtqueue callback for ffff888023063b00 (ffffffff85497fd0)
[  533.306259][T11518] RDX: ffffc90005681000 RSI: 0000000000004961 RDI: 0000000000004962
[  533.314562][ T4185] hci1: conn ffff888079dc4000
[  533.319247][ T4185] device: 'hci1:201': device_unregister
[  533.319472][T11424] hci2 hcon ffff88805ae84000 handle 201
[  533.330619][ T7480] hcon ffff88807c7f2000 reason 22
[  533.335883][ T7480] hcon ffff88807c7f2000 conn ffff888077958800, err 103
[  533.343754][ T4171] tcp_in_window: START
[  533.347860][ T4171] tcp_in_window: 
[  533.347868][ T4171] seq=1149098933 ack=1673383368+(0) sack=1673383368+(0) win=501 end=1149098933
[  533.360915][ T4171] tcp_in_window: sender end=1149098933 maxend=1149163061 maxwin=64768 scale=7 receiver end=1673383368 maxend=1673447399 maxwin=65408 scale=7
[  533.375356][ T4171] tcp_in_window: 
[  533.375367][ T4171] seq=1149098933 ack=1673383368+(0) sack=1673383368+(0) win=501 end=1149098933
[  533.388122][ T4171] tcp_in_window: sender end=1149098933 maxend=1149163061 maxwin=64768 scale=7 receiver end=1673383368 maxend=1673447399 maxwin=65408 scale=7
[  533.402574][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1
[  533.407875][ T4171] tcp_in_window: res=1 sender end=1149098933 maxend=1149163061 maxwin=64768 receiver end=1673383368 maxend=1673447496 maxwin=65408
[  533.421368][ T4171] tcp_conntracks: 
[  533.421379][ T4171] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[  533.431000][ T4185] kernfs runtime_status: removing
[  533.436093][ T4185] kernfs control: removing
[  533.441025][T11518] RBP: 0000000000000000 R08: ffffc9000359fa9f R09: ffffc9000359fa88
[  533.449532][T11418]   procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802360e37c
[  533.461108][T11424] hcon ffff88805ae84000
[  533.465297][ T7480] hci4 hcon ffff88807c7f2000 chan ffff88801ecb6200
[  533.472002][ T4185] kernfs runtime_suspended_time: removing
[  533.477770][ T4185] kernfs runtime_active_time: removing
[  533.483608][T11518] R10: dffffc0000000000 R11: fffff520006b3f54 R12: 1ffff920006b3f50
[  533.492183][    C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0)
[  533.500703][    C0] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0)
[  533.509806][    C0] No more buffers in queue
[  533.514272][    C0] Receiving skb proto 0x0800 len 148 type 0
[  533.520398][    C0] No more buffers in queue
[  533.524954][    C0] nf_conntrack: normal packet for ffff8880791f8180
[  533.531491][    C0] tcp_in_window: START
[  533.535661][    C0] tcp_in_window: 
[  533.535674][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  533.548457][    C0] tcp_in_window: sender end=1673383368 maxend=1673447496 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  533.562918][    C0] tcp_in_window: 
[  533.562928][    C0] seq=1673383271 ack=1149098933+(0) sack=1149098933+(0) win=501 end=1673383368
[  533.575481][    C0] tcp_in_window: sender end=1673383368 maxend=1673447496 maxwin=65408 scale=7 receiver end=1149098933 maxend=1149163061 maxwin=64768 scale=7
[  533.590020][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  533.595321][    C0] tcp_in_window: res=1 sender end=1673383368 maxend=1673447496 maxwin=65408 receiver end=1149098933 maxend=1149163061 maxwin=64768
[  533.608825][    C0] virtqueue callback for ffff88801edafa00 (ffffffff84450960)
[  533.608866][    C0] virtqueue interrupt with no work for ffff88801edaf900
[  533.608873][    C0] virtqueue interrupt with no work for ffff88801edaf800
[  533.630237][    C0] tcp_conntracks: 
[  533.630249][    C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7
[  533.639993][    C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0)
[  533.650544][   T13] Added buffer head 0 to ffff88801edafa00
[  533.656500][ T4530] nf_conntrack: normal packet for ffff88807a25d980
[  533.663940][ T3519] sd 0:0:1:0: cmd ffff888023ea8928 CDB: 0x2a
[  533.669966][ T3519] Added buffer head 186 to ffff888147d5ba00
[  533.677407][ T9757] nf_conntrack: new packet for ffff88802b1aa180
[  533.683892][    C0] virtqueue callback for ffff888147d5ba00 (ffffffff8506e140)
[  533.683914][    C0] sd 0:0:1:0: cmd ffff888023ea8928 response 0 status 0x0 sense_len 0
[  533.683931][    C0] No more buffers in queue
[  533.704200][ T9757] nf_nat: Already setup manip DST for ct ffff88802b1aa180 (status bits 0x188)
[  533.713288][ T9757] nf_nat: Already setup manip SRC for ct ffff88802b1aa180 (status bits 0x188)
[  533.722603][T11418]   procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802360e380
[  533.734097][ T4522] nf_conntrack: new packet for ffff88802b1aac00
[  533.740534][ T4522] nf_nat: Already setup manip DST for ct ffff88802b1aac00 (status bits 0x188)
[  533.749655][ T4522] nf_nat: Already setup manip SRC for ct ffff88802b1aac00 (status bits 0x188)
[  533.759117][ T4185] kernfs autosuspend_delay_ms: removing
[  533.765076][T11518] R13: dffffc0000000000 R14: ffffc9000359fa80 R15: 0000000000000010
[  533.773640][ T4185] kernfs power: removing
[  533.777909][ T4185] kernfs device: removing
[  533.782447][T11418]   procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff88802360e384
[  533.793754][T11518] FS:  00007fa455e846c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  533.803309][ T4185] kernfs subsystem: removing
[  533.807909][ T4185] kernfs hci1:201: removing
[  533.812687][T11418]   procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=ffff88802360e374
[  533.823742][T11518] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  533.830683][ T4185] kernfs uevent: removing
[  533.835034][ T4185] PM: Removing info for No Bus:hci1:201
[  533.840922][T11518] CR2: 00007fbddd0bee40 CR3: 000000002da36000 CR4: 00000000003506f0
[  533.848908][T11518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  533.857059][T11418]   procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=ffff88802360e364
[  533.868291][ T4185] kobject: 'hci1:201' (ffff888079dc4420): kobject_uevent_env
[  533.875821][T11418]   procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff88802360e368
[  533.887679][T11518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  533.896140][ T4185] kobject: 'hci1:201' (ffff888079dc4420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201'
[  533.907703][T11518] Kernel panic - not syncing: Fatal exception
[  533.914102][T11518] Kernel Offset: disabled
[  533.918434][T11518] Rebooting in 86400 seconds..