last executing test programs:

8m37.22623893s ago: executing program 0 (id=385):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

8m34.865648776s ago: executing program 0 (id=387):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='0fc', 0x3)
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x5, 0x3, 0x0, 'queue1\x00', 0x2})
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
write$cgroup_pid(r3, &(0x7f0000000100)=r4, 0x12)

8m33.111204812s ago: executing program 0 (id=396):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r3, 0x0)
close(0x3)
bind$inet(r0, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
write$sndseq(r4, &(0x7f00000001c0)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10041, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x30000000})
ioctl$TCSBRKP(r5, 0x5425, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
r7 = syz_open_dev$cec(&(0x7f00000007c0), 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffeff17c64881ffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]})
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)

8m31.970767236s ago: executing program 0 (id=398):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ftruncate(r1, 0x100)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@can_newroute={0x1c, 0x18, 0x2, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
listen(0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r6, r6, 0x0, 0xf106)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x400, 0xc0000000, 0x3, 0x32, 0x3, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}})
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)

8m29.907464763s ago: executing program 0 (id=404):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r3, 0x0)
close(0x3)
bind$inet(r0, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
write$sndseq(r4, &(0x7f00000001c0)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c)
sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x10041, 0x0)
unshare(0x22020600)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x30000000})
ioctl$TCSBRKP(r5, 0x5425, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
r6 = syz_open_dev$cec(&(0x7f00000007c0), 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffeff17c64881ffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]})
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)

8m26.079219069s ago: executing program 0 (id=415):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"})
unshare(0x22020400)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800)
msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0a"}, 0xb3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"])

8m25.646164494s ago: executing program 32 (id=415):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"})
unshare(0x22020400)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800)
msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0a"}, 0xb3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"])

6.054033236s ago: executing program 5 (id=2521):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)

4.839172355s ago: executing program 1 (id=2534):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2)
r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e9240e859ab1d16da4a6836139ddab7f483f87563a5f060467b0153673f08af5bb4c6d5d0fb79e3e3aa3b229d4aabd5b2c601933c13ba9d009b6c1d4a756a7047533b6b4ea0c12be66d324d99e0bcfe18d5ec27bcf3d7a6a098bc7f53264afa6f049fe78da5d942dddd968db42e689d33eb1a7f33e3dcb86f49b32389d1b00208c04d5efb523faf65469a6c8e9e669374465f09662f8adf6ea4bc22dff735f89ecf05900a8aebd65c71f185fd342fa5ed2969bbe2eebe64198dbb3b4a880c15856e4a5db83377832799adfc7fd413368e6d7d89fe09a4a72b226f47a0484d44a7cd3b469a495522080"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
ioctl$FE_DISEQC_SEND_MASTER_CMD(r3, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6})
r5 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r0, &(0x7f0000000000)='3', 0x4e)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

4.586160825s ago: executing program 1 (id=2538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x496})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0xffffffff, 0x4, 0x1, 0x5}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140))

3.797047151s ago: executing program 1 (id=2541):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

3.637642882s ago: executing program 1 (id=2544):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
ioctl$FE_DISEQC_SEND_MASTER_CMD(r3, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6})
r5 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r0, &(0x7f0000000000)='3', 0x4e)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

3.481239973s ago: executing program 3 (id=2546):
recvmmsg(0xffffffffffffffff, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/19, 0x13}, 0x8819520}], 0x1, 0x45833af92e4a38bf, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

3.435041742s ago: executing program 4 (id=2548):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2)
r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e9240e859ab1d16da4a6836139ddab7f483f87563a5f060467b0153673f08af5bb4c6d5d0fb79e3e3aa3b229d4aabd5b2c601933c13ba9d009b6c1d4a756a7047533b6b4ea0c12be66d324d99e0bcfe18d5ec27bcf3d7a6a098bc7f53264afa6f049fe78da5d942dddd968db42e689d33eb1a7f33e3dcb86f49b32389d1b00208c04d5efb523faf65469a6c8e9e669374465f09662f8adf6ea4bc22dff735f89ecf05900a8aebd65c71f185fd342fa5ed2969bbe2eebe64198dbb3b4a880c15856e4a5db83377832799adfc7fd413368e6d7d89fe09a4a72b226f47a0484d44a7cd3b469a495522080"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
ioctl$FE_DISEQC_SEND_MASTER_CMD(r3, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6})
r5 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r0, &(0x7f0000000000)='3', 0x4e)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

3.402249918s ago: executing program 1 (id=2549):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}})

3.311251296s ago: executing program 5 (id=2550):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')

3.305117497s ago: executing program 2 (id=2551):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

3.096397179s ago: executing program 4 (id=2552):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

2.999072328s ago: executing program 5 (id=2553):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

2.914295135s ago: executing program 3 (id=2554):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x102b, &(0x7f00000067c0)=ANY=[], 0x0)

2.155498744s ago: executing program 2 (id=2555):
setns(0xc9, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

2.057362504s ago: executing program 5 (id=2556):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

2.053779035s ago: executing program 4 (id=2557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, r1, 0x805, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048011}, 0x40)

1.847227935s ago: executing program 3 (id=2558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x60df}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @opaque="15ca988a61a3180b"}}}}}}, 0x3e)

1.674627239s ago: executing program 2 (id=2559):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x80000002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
ioctl$FE_DISEQC_SEND_MASTER_CMD(r3, 0x40076f3f, &(0x7f0000000040)={"824ca06c4e58", 0x6})
r5 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800)
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
futex(&(0x7f0000000500), 0x20a, 0x2, 0x0, &(0x7f0000000580)=0x1, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r0, &(0x7f0000000000)='3', 0x4e)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

1.674496429s ago: executing program 4 (id=2560):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c009ff44819"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmJgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//8JWYxg==")
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7ff, 0x400)
read$snddsp(r0, &(0x7f0000000500)=""/217, 0xd9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="4a0000000100000020"], 0x80002)

1.430433187s ago: executing program 2 (id=2561):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012141, 0x0)

1.373987668s ago: executing program 4 (id=2562):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
bind(r0, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc)

1.373787998s ago: executing program 3 (id=2563):
pipe(&(0x7f0000000440))
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000240)=0x3)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0xe, 0x6, 0x101, 0x0, 0x5, 0x0})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0)

1.287152855s ago: executing program 2 (id=2564):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.220643519s ago: executing program 4 (id=2565):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

1.037415984s ago: executing program 3 (id=2566):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

1.035608775s ago: executing program 5 (id=2567):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
fspick(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}]})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0xcf0be2279761c16b)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7)
getdents64(r0, &(0x7f0000000280)=""/230, 0xe6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0x59, 0x120, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0xfffc, 0x7f, 0xfff8, "5812ea7e24acbbdf9434acb8d4313f3239e0b8d559c63bcd82e0670fdc0ec3bf1f96e8c581780505317771fbc15d046ec6b9a1678de56cf61d856ae9e80488205c22e2276c3c6971fe4b335d2d85857ef55d3d6758642669a944694056b4f0ac3a9670c2cbac735e9081815330289538795fb0a14cc9aac526d78ac1d062e82e"})
r6 = semget$private(0x0, 0x0, 0x204)
semtimedop(r6, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
unshare(0x300)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000400)={0x20080522, r1}, &(0x7f0000000200)={0x200002, 0x1fffff, 0x7fe, 0x100b, 0x7})
unshare(0x26020480)

815.114868ms ago: executing program 2 (id=2568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021"], 0x84}}, 0x200088c2)

3.941339ms ago: executing program 5 (id=2569):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000002c0)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x440, 0x4)
write$binfmt_script(r0, &(0x7f00000000c0), 0x28)

3.807419ms ago: executing program 1 (id=2570):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
close(r1)

0s ago: executing program 3 (id=2571):
syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
read$eventfd(r0, &(0x7f0000000040), 0x8)

kernel console output (not intermixed with test programs):

type_store
[  515.968639][ T9846] input: syz0 as /devices/virtual/input/input43
[  516.018215][ T9847] input: syz0 as /devices/virtual/input/input44
[  516.482792][ T4235] gspca_sq930x: ucbus_write failed -71
[  516.744951][ T4235] gspca_sq930x: Sensor ov9630 not yet treated
[  516.755564][ T4235] sq930x: probe of 3-1:0.0 failed with error -22
[  516.815574][ T9861] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  516.836150][ T4235] usb 3-1: USB disconnect, device number 9
[  517.849140][ T4275] net_ratelimit: 53 callbacks suppressed
[  518.343453][ T9887] 9pnet: Insufficient options for proto=fd
[  518.533944][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.572957][ T9884] input: syz0 as /devices/virtual/input/input45
[  518.839587][ T9897] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  518.981418][ T9902] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  519.136599][ T9907] md: personality for level  is not loaded!
[  519.509137][ T9914] nvme_fcloop: unknown parameter or missing value 'ww'
[  519.920051][ T9915] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  520.324609][ T9922] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  520.771133][ T9927] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  521.337540][ T9934] loop4: detected capacity change from 0 to 164
[  521.464389][ T9934] rock: directory entry would overflow storage
[  521.532531][ T9934] rock: sig=0x66, size=4, remaining=3
[  521.599702][ T9934] rock: directory entry would overflow storage
[  521.665429][ T9934] rock: sig=0x66, size=4, remaining=3
[  522.085135][   T25] audit: type=1800 audit(522.061:37): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.1483" name="UDC" dev="configfs" ino=61452 res=0 errno=0
[  522.116166][ T9943] configfs-gadget gadget: uvc: uvc_function_bind()
[  522.153139][ T9943] configfs-gadget gadget: uvc: Unable to allocate streaming EP
[  522.171545][ T9943] udc dummy_udc.0: failed to start g1: -22
[  522.487667][ T9954] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  523.102599][    C1] net_ratelimit: 64 callbacks suppressed
[  523.111781][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.439020][ T9962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  524.327453][ T9981] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  524.997356][ T9985] input: syz0 as /devices/virtual/input/input46
[  525.266458][ T9989] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1506'.
[  525.330543][ T9992] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  526.204033][ T9999] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  527.989650][T10024] input: syz0 as /devices/virtual/input/input47
[  528.212532][    C0] net_ratelimit: 57 callbacks suppressed
[  528.213098][T10034] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  530.733619][T10053] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  531.052935][T10078] input: syz0 as /devices/virtual/input/input48
[  531.652738][   T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  532.016491][T10104] i2c i2c-0: delete_device: Can't parse I2C address
[  532.242896][   T26] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  532.251959][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.335178][T10113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  532.488375][   T26] usb 5-1: Product: syz
[  532.626742][   T26] usb 5-1: Manufacturer: syz
[  532.712295][   T26] usb 5-1: SerialNumber: syz
[  532.768200][   T26] usb 5-1: config 0 descriptor??
[  533.223940][T10090] udc-core: couldn't find an available UDC or it's busy
[  533.231089][    C0] net_ratelimit: 62 callbacks suppressed
[  533.244889][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.329354][T10090] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  533.370284][T10118] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  533.745943][T10119] input: syz0 as /devices/virtual/input/input49
[  533.767385][ T1112] usb 5-1: USB disconnect, device number 12
[  535.222588][ T1112] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  535.366948][T10146] loop4: detected capacity change from 0 to 256
[  535.415940][T10146] FAT-fs (loop4): Directory bread(block 1285) failed
[  535.433760][T10146] FAT-fs (loop4): Directory bread(block 1286) failed
[  535.452980][T10146] FAT-fs (loop4): Directory bread(block 1287) failed
[  535.459838][T10146] FAT-fs (loop4): Directory bread(block 1288) failed
[  535.507640][T10146] FAT-fs (loop4): Directory bread(block 1285) failed
[  535.527219][T10146] FAT-fs (loop4): Directory bread(block 1286) failed
[  535.554974][T10146] FAT-fs (loop4): Directory bread(block 1287) failed
[  535.585292][T10146] FAT-fs (loop4): Directory bread(block 1288) failed
[  535.664508][T10152] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  536.288222][T10158] input: syz0 as /devices/virtual/input/input50
[  536.972843][ T1112] usb 2-1: unable to get BOS descriptor or descriptor too short
[  537.052785][ T1112] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[  537.061201][ T1112] usb 2-1: config 129 has an invalid interface number: 5 but max is 0
[  537.061221][ T1112] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  537.061240][ T1112] usb 2-1: config 129 has no interface number 0
[  537.061255][ T1112] usb 2-1: config 129 has no interface number 1
[  537.229693][ T1112] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  537.343072][T10175] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  537.363083][ T1112] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  537.392576][ T1112] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  537.417900][ T1112] usb 2-1: config 129 interface 135 has no altsetting 0
[  537.466742][ T1112] usb 2-1: config 129 interface 5 has no altsetting 0
[  537.732870][ T1112] usb 2-1: string descriptor 0 read error: -22
[  537.740149][ T1112] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  537.808372][ T1112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.985957][ T1112] usb 2-1: can't set config #129, error -71
[  538.035871][ T1112] usb 2-1: USB disconnect, device number 19
[  538.283248][ T4237] net_ratelimit: 67 callbacks suppressed
[  538.283259][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.384149][T10203] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  538.609108][T10210] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  540.420639][   T25] audit: type=1800 audit(540.391:38): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.1593" name="c_srate" dev="configfs" ino=63107 res=0 errno=0
[  540.688899][T10253] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  542.211169][T10260] input: syz0 as /devices/virtual/input/input51
[  542.533619][T10249] loop4: detected capacity change from 0 to 40427
[  542.736844][T10249] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  542.994886][T10249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  543.342503][    C1] net_ratelimit: 65 callbacks suppressed
[  543.451710][ T9436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.493719][T10282] input: syz0 as /devices/virtual/input/input52
[  543.505924][T10249] F2FS-fs (loop4): invalid crc value
[  543.533316][T10249] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  543.674326][T10295] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  544.721857][T10307] input: syz0 as /devices/virtual/input/input53
[  545.942391][T10324] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.537072][T10339] loop4: detected capacity change from 0 to 256
[  548.622526][    C1] net_ratelimit: 51 callbacks suppressed
[  548.801500][T10339] FAT-fs (loop4): Directory bread(block 1285) failed
[  548.819183][T10339] FAT-fs (loop4): Directory bread(block 1286) failed
[  548.832573][T10339] FAT-fs (loop4): Directory bread(block 1287) failed
[  548.874456][T10363] program syz.5.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  548.881467][T10339] FAT-fs (loop4): Directory bread(block 1288) failed
[  548.914287][T10339] FAT-fs (loop4): Directory bread(block 1285) failed
[  548.922592][T10339] FAT-fs (loop4): Directory bread(block 1286) failed
[  548.929309][T10339] FAT-fs (loop4): Directory bread(block 1287) failed
[  548.993249][T10339] FAT-fs (loop4): Directory bread(block 1288) failed
[  549.027419][T10371] FAT-fs (loop4): Directory bread(block 1285) failed
[  549.053724][T10371] FAT-fs (loop4): Directory bread(block 1286) failed
[  549.384403][T10381] "syz.3.1633" (10381) uses obsolete ecb(arc4) skcipher
[  549.752907][T10388] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1636'.
[  551.477746][T10413] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  552.018487][T10421] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  552.474944][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'.
[  552.535048][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1649'.
[  553.797707][ T4237] net_ratelimit: 53 callbacks suppressed
[  555.810001][T10470] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  556.310686][T10480] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  558.779594][T10509] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  558.805461][    C1] net_ratelimit: 68 callbacks suppressed
[  558.855473][ T9436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.938189][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  559.008498][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1672'.
[  559.068707][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'.
[  559.465251][T10544] loop4: detected capacity change from 0 to 256
[  559.492284][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'.
[  560.465691][T10544] FAT-fs (loop4): Directory bread(block 1285) failed
[  560.518622][T10544] FAT-fs (loop4): Directory bread(block 1286) failed
[  560.564145][T10544] FAT-fs (loop4): Directory bread(block 1287) failed
[  560.596138][T10544] FAT-fs (loop4): Directory bread(block 1288) failed
[  560.610755][T10544] FAT-fs (loop4): Directory bread(block 1285) failed
[  560.622066][T10544] FAT-fs (loop4): Directory bread(block 1286) failed
[  560.714623][T10567] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  561.106658][T10544] FAT-fs (loop4): Directory bread(block 1287) failed
[  561.106714][T10544] FAT-fs (loop4): Directory bread(block 1288) failed
[  562.171602][T10589] syz.4.1692 uses obsolete (PF_INET,SOCK_PACKET)
[  562.458346][T10604] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  562.789280][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  562.796054][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  563.627881][T10606] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  564.062486][    C1] net_ratelimit: 68 callbacks suppressed
[  564.169097][   T25] audit: type=1800 audit(564.141:39): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1702" name="c_srate" dev="configfs" ino=65912 res=0 errno=0
[  565.305677][T10643] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  566.361279][T10650] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  567.301372][T10679] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  568.541101][T10695] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  569.073886][T10705] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  569.182479][    C1] net_ratelimit: 48 callbacks suppressed
[  570.459061][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.620929][T10721] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  572.497263][T10741] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  572.903156][ T9437] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  572.903201][ T4295] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  572.948017][T10759] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  573.324037][ T4295] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  573.362073][ T4295] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  573.532972][ T4295] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  573.580086][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  573.648539][ T4295] usb 6-1: SerialNumber: syz
[  573.723305][ T9437] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  573.741461][ T9437] usb 5-1: config 0 has no interface number 0
[  573.790659][ T9437] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11
[  573.892881][ T9437] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024
[  573.985638][ T4295] usb 6-1: 0:2 : does not exist
[  573.998989][ T9437] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  574.084216][ T4295] usb 6-1: USB disconnect, device number 11
[  574.118883][ T9437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.210321][ T9437] usb 5-1: config 0 descriptor??
[  574.266363][T10753] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  574.307498][ T9437] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input54
[  574.322618][ T6840] udevd[6840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.431816][    C1] net_ratelimit: 47 callbacks suppressed
[  574.601726][ T4237] usb 5-1: USB disconnect, device number 13
[  574.608105][    C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19
[  574.724562][T10769] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  574.823350][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.703364][T10774] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  577.095946][T10792] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  578.310180][T10816] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  579.083812][T10819] tun0: tun_chr_ioctl cmd 1074025681
[  579.492471][    C1] net_ratelimit: 52 callbacks suppressed
[  579.526148][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.817732][T10855] input: syz0 as /devices/virtual/input/input56
[  580.825520][T10854] input: syz0 as /devices/virtual/input/input55
[  581.184557][ T4235] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  581.303167][   T26] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  581.467642][ T4235] usb 2-1: Using ep0 maxpacket: 8
[  581.607132][ T4235] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  581.622693][ T4235] usb 2-1: config 179 has no interface number 0
[  581.645255][ T4235] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  581.733634][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.761235][T10891] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  581.784504][ T4235] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  581.838476][   T26] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  581.939542][ T4235] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  582.030678][   T26] usb 6-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[  582.128443][ T4235] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  582.148626][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.180661][ T4235] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  582.229217][ T4235] usb 2-1: config 179 interface 65 has no altsetting 0
[  582.249373][ T4235] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  582.263723][   T26] usb 6-1: config 0 descriptor??
[  582.290524][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.318415][   T26] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  582.453673][ T4235] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input57
[  582.595816][   T26] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  582.643679][   T26] Bluetooth: hci4: Injecting HCI hardware error event
[  582.751945][ T4203] Bluetooth: hci4: hardware error 0x00
[  582.764402][ T4235] usb 6-1: USB disconnect, device number 12
[  582.938777][ T9437] usb 2-1: USB disconnect, device number 20
[  582.945482][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  582.946096][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  583.243864][T10905] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  583.343024][ T9437] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  583.555880][T10906] input: syz0 as /devices/virtual/input/input58
[  584.862491][    C1] net_ratelimit: 46 callbacks suppressed
[  585.354910][T10939] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  585.927937][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.280378][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'.
[  586.296165][T10950] serial 00:04: in use; can't configure
[  586.315954][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'.
[  586.325589][T10947] netlink: 'syz.2.1800': attribute type 18 has an invalid length.
[  586.379055][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'.
[  586.410689][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'.
[  586.420368][T10952] netlink: 'syz.2.1800': attribute type 18 has an invalid length.
[  586.522576][ T4267] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  586.812715][T10964] input: syz0 as /devices/virtual/input/input59
[  587.361166][T10980] kAFS: bad VL server IP address
[  587.413320][ T9437] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  587.499060][T10982] md: personality for level  is not loaded!
[  587.702556][ T9437] usb 3-1: Using ep0 maxpacket: 8
[  587.837150][ T9437] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  587.851449][ T9437] usb 3-1: config 179 has no interface number 0
[  587.863207][ T9437] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  587.891612][ T9437] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  587.907751][ T9437] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  587.921554][ T9437] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  587.935345][T10993] jffs2: notice: (10993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  587.956033][ T9437] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  587.969974][   T26] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  587.977653][ T4235] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  587.990345][ T9437] usb 3-1: config 179 interface 65 has no altsetting 0
[  587.997901][ T9437] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  588.012570][ T9437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.052715][ T4267] usb 2-1: unable to get BOS descriptor or descriptor too short
[  588.078242][ T9437] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input60
[  588.243085][ T4235] usb 4-1: Using ep0 maxpacket: 16
[  588.374584][   T26] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.404298][ T4235] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  588.544512][   T26] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  588.564317][ T4235] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 4
[  588.638576][   T26] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  588.714146][   T26] usb 6-1: config 0 interface 0 has no altsetting 0
[  588.720834][   T26] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  588.774853][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.787872][ T4235] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa
[  588.803758][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.842049][   T26] usb 6-1: config 0 descriptor??
[  588.852900][ T4235] usb 4-1: Product: syz
[  588.865218][ T4235] usb 4-1: Manufacturer: syz
[  588.883923][ T4235] usb 4-1: SerialNumber: syz
[  588.892848][T10987] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  588.975261][ T9437] usb 3-1: USB disconnect, device number 10
[  588.982611][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  589.020691][ T9437] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  589.042851][ T4267] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[  589.051196][ T4267] usb 2-1: config 129 has an invalid interface number: 5 but max is 0
[  589.063928][ T4267] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  589.073165][ T4267] usb 2-1: config 129 has no interface number 0
[  589.079423][ T4267] usb 2-1: config 129 has no interface number 1
[  589.087479][ T4267] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  589.104255][ T4267] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  589.115240][ T4267] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  589.128480][ T4267] usb 2-1: config 129 interface 135 has no altsetting 0
[  589.140255][ T4267] usb 2-1: config 129 interface 5 has no altsetting 0
[  589.586827][   T26] input: HID 0079:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0079:0006.0007/input/input61
[  589.675644][ T4295] usb 4-1: USB disconnect, device number 13
[  589.972512][    C1] net_ratelimit: 46 callbacks suppressed
[  590.023953][T11010] input: syz0 as /devices/virtual/input/input62
[  590.067528][ T9436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.342285][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.407617][T11019] input: syz0 as /devices/virtual/input/input63
[  590.471476][   T26] dragonrise 0003:0079:0006.0007: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.5-1/input0
[  590.567597][   T26] dragonrise 0003:0079:0006.0007: implement() called with too large value 243 (n: 1)! (kworker/1:1)
[  590.614102][ T4267] usb 2-1: string descriptor 0 read error: -71
[  590.620456][ T4267] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  590.621400][   T26] dragonrise 0003:0079:0006.0007: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley <richwalm@gmail.com>
[  590.644622][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.682834][ T4267] usb 2-1: can't set config #129, error -71
[  590.706243][   T26] usb 6-1: USB disconnect, device number 13
[  590.717563][ T4267] usb 2-1: USB disconnect, device number 21
[  590.890070][T11025] fido_id[11025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  591.413186][   T26] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  591.752518][   T26] usb 6-1: Using ep0 maxpacket: 8
[  591.903099][   T26] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  591.932086][   T26] usb 6-1: config 179 has no interface number 0
[  591.992820][   T26] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  592.407105][   T26] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  592.571539][   T26] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  592.655057][   T26] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  592.730133][   T26] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  592.814040][   T26] usb 6-1: config 179 interface 65 has no altsetting 0
[  592.856666][   T26] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  592.919853][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.349264][   T26] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input64
[  593.427926][T11076] input: syz0 as /devices/virtual/input/input65
[  593.653117][ T9436] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  594.083053][ T9436] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.133767][ T9436] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  594.236101][   T26] usb 6-1: USB disconnect, device number 14
[  594.242685][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  594.258875][   T26] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  594.282925][ T9436] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  594.312689][ T9436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  594.320729][ T9436] usb 5-1: SerialNumber: syz
[  594.928058][ T9436] usb 5-1: 0:2 : does not exist
[  595.039869][ T9436] usb 5-1: USB disconnect, device number 14
[  595.067303][    C0] net_ratelimit: 56 callbacks suppressed
[  595.273344][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.153839][T11116] input: syz0 as /devices/virtual/input/input66
[  596.404874][T11120] input: syz0 as /devices/virtual/input/input67
[  596.648148][   T25] audit: type=1800 audit(596.621:40): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1854" name="c_srate" dev="configfs" ino=68111 res=0 errno=0
[  596.668319][   T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  596.676221][ T9436] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  597.070104][T11135] program syz.3.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.122498][ T9436] usb 5-1: Using ep0 maxpacket: 8
[  597.127872][   T26] usb 3-1: Using ep0 maxpacket: 32
[  597.263998][   T26] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  597.264039][ T9436] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  597.281228][ T9436] usb 5-1: config 179 has no interface number 0
[  597.306214][T11145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  597.359033][ T9436] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  597.601857][   T26] usb 3-1: config 0 has no interface number 0
[  597.640150][ T9436] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  597.719440][   T26] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  597.757510][ T9436] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11
[  597.789855][   T26] usb 3-1: config 0 interface 85 has no altsetting 0
[  597.823029][ T9436] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024
[  597.877689][ T9436] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  597.948479][ T9436] usb 5-1: config 179 interface 65 has no altsetting 0
[  597.968609][ T9436] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  598.017396][ T9436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.046014][   T26] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  598.078713][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.115860][   T26] usb 3-1: Product: syz
[  598.134573][ T9436] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input68
[  598.167872][   T26] usb 3-1: Manufacturer: syz
[  598.192778][   T26] usb 3-1: SerialNumber: syz
[  598.246799][   T26] usb 3-1: config 0 descriptor??
[  598.463623][ T9436] usb 5-1: USB disconnect, device number 15
[  598.500114][ T9436] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  598.595649][T11154] input: syz0 as /devices/virtual/input/input70
[  598.636726][T11157] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1869'.
[  598.831316][   T25] audit: type=1800 audit(598.801:41): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.1870" name="c_srate" dev="configfs" ino=68244 res=0 errno=0
[  598.953233][   T26] appletouch 3-1:0.85: Geyser mode initialized.
[  599.056717][   T26] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input69
[  599.082511][ T4235] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  599.583010][ T4235] usb 6-1: unable to get BOS descriptor or descriptor too short
[  599.602276][   T26] usb 3-1: USB disconnect, device number 11
[  599.682728][ T4235] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[  599.733174][ T4235] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[  599.741363][ T4235] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  599.741385][ T4235] usb 6-1: config 129 has no interface number 0
[  599.998535][ T4235] usb 6-1: config 129 has no interface number 1
[  600.718919][    C1] net_ratelimit: 62 callbacks suppressed
[  600.787134][ T4235] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  600.843980][T11189] input: syz0 as /devices/virtual/input/input71
[  600.864811][ T4235] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  600.899159][ T4235] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  600.939807][ T4235] usb 6-1: config 129 interface 135 has no altsetting 0
[  600.962292][ T4235] usb 6-1: config 129 interface 5 has no altsetting 0
[  600.987519][ T9436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.009702][   T26] appletouch 3-1:0.85: input: appletouch disconnected
[  601.192102][T11200] serial 00:04: in use; can't configure
[  601.273125][ T4235] usb 6-1: string descriptor 0 read error: -22
[  601.279417][ T4235] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  601.318946][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.410869][ T4235] usb 6-1: MIDIStreaming interface descriptor not found
[  601.432690][   T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  601.722863][   T26] usb 3-1: Using ep0 maxpacket: 16
[  601.759453][T11207] program syz.3.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  601.855601][ T4267] usb 6-1: USB disconnect, device number 15
[  601.863926][   T26] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  601.863973][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.974419][   T26] usb 3-1: config 0 descriptor??
[  602.063430][   T26] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  602.263461][   T26] usb 3-1: Detected FT8U232AM
[  602.279515][   T26] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  602.468269][ T4237] usb 3-1: USB disconnect, device number 12
[  602.492546][ T4237] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  602.510929][T11217] md: personality for level  is not loaded!
[  602.537953][ T4237] ftdi_sio 3-1:0.0: device disconnected
[  603.526795][T11231] input: syz0 as /devices/virtual/input/input72
[  604.383899][T11239] input: syz0 as /devices/virtual/input/input73
[  605.411575][T11257] loop4: detected capacity change from 0 to 128
[  605.692678][T11257] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  605.777356][ T6872] net_ratelimit: 41 callbacks suppressed
[  605.777367][ T6872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.869469][T11257] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  605.908565][T11257] FAT-fs (loop4): Filesystem has been set read-only
[  605.959683][  T154] Bluetooth: hci5: Frame reassembly failed (-84)
[  606.092689][   T26] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  606.134677][ T4188] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  606.191623][   T25] audit: type=1800 audit(606.161:42): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1907" name="c_srate" dev="configfs" ino=69647 res=0 errno=0
[  607.212941][   T26] usb 6-1: Using ep0 maxpacket: 8
[  607.603344][   T26] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  607.711591][   T26] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  607.753152][ T4235] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  607.855530][   T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  607.983357][   T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  608.020121][   T26] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  608.064811][   T26] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  608.099715][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.141631][ T9437] Bluetooth: hci5: command 0x1003 tx timeout
[  608.148410][ T4235] usb 2-1: not running at top speed; connect to a high speed hub
[  608.165607][T10907] Bluetooth: hci5: sending frame failed (-49)
[  608.580178][   T26] usb 6-1: GET_CAPABILITIES returned 0
[  608.606795][   T26] usbtmc 6-1:16.0: can't read capabilities
[  608.633341][ T4235] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  608.685264][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.862169][ T4235] usb 2-1: Product: syz
[  608.916881][ T4235] usb 2-1: Manufacturer: syz
[  608.986285][ T4235] usb 2-1: SerialNumber: syz
[  609.007531][   T26] usb 6-1: USB disconnect, device number 16
[  609.107305][ T4235] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  609.118899][T11299] input: syz0 as /devices/virtual/input/input74
[  609.188497][ T4235] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  609.229865][T11302] input: syz0 as /devices/virtual/input/input75
[  609.270938][ T4235] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  609.348793][ T4235] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  609.409956][ T4235] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  609.625238][T11311] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  610.317931][ T4235] Bluetooth: hci5: command 0x1001 tx timeout
[  610.507128][T10907] Bluetooth: hci5: sending frame failed (-49)
[  610.522371][   T13] usb 2-1: USB disconnect, device number 22
[  610.562207][   T13] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  610.574030][   T25] audit: type=1800 audit(610.551:43): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.1920" name="c_srate" dev="configfs" ino=69916 res=0 errno=0
[  610.695558][T11328] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  610.778826][T11327] program syz.1.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  611.572482][    C1] net_ratelimit: 60 callbacks suppressed
[  611.657601][T11332] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  612.063284][   T13] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  612.542681][   T26] Bluetooth: hci5: command 0x1009 tx timeout
[  612.606104][   T13] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  612.620550][T11349] program syz.4.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  612.641281][   T13] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  612.652009][   T13] keyspan 2-1:1.0: device disconnected
[  612.843751][T11354] input: syz0 as /devices/virtual/input/input76
[  613.979168][T11364] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  614.000806][T11358] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  614.154679][   T13] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  614.348076][T11372] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  614.745701][T11374] loop4: detected capacity change from 0 to 64
[  614.925207][T11374] hfs: request for non-existent node 131072 in B*Tree
[  614.980778][T11374] hfs: request for non-existent node 131072 in B*Tree
[  615.815138][T11378] loop4: detected capacity change from 0 to 32768
[  616.179084][   T25] audit: type=1800 audit(616.151:44): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.1936" name="c_srate" dev="configfs" ino=69180 res=0 errno=0
[  616.206436][T11378] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  616.266415][T11378] JBD2: Ignoring recovery information on journal
[  616.404992][T11378] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  616.855071][ T4188] ocfs2: Unmounting device (7,4) on (node local)
[  616.925955][T11403] program syz.5.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  617.095002][ T4683] net_ratelimit: 57 callbacks suppressed
[  617.205679][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.302212][T11411] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  618.493541][T11419] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  619.005763][T11430] loop4: detected capacity change from 0 to 256
[  619.021380][T11431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1958'.
[  619.117563][T11430] FAT-fs (loop4): Directory bread(block 1285) failed
[  619.139723][T11430] FAT-fs (loop4): Directory bread(block 1286) failed
[  619.177017][T11430] FAT-fs (loop4): Directory bread(block 1287) failed
[  619.211988][T11430] FAT-fs (loop4): Directory bread(block 1288) failed
[  619.263672][T11430] FAT-fs (loop4): Directory bread(block 1285) failed
[  619.270413][T11430] FAT-fs (loop4): Directory bread(block 1286) failed
[  619.277555][T11430] FAT-fs (loop4): Directory bread(block 1287) failed
[  619.284279][T11430] FAT-fs (loop4): Directory bread(block 1288) failed
[  619.292958][T11430] FAT-fs (loop4): Directory bread(block 1285) failed
[  619.299732][T11430] FAT-fs (loop4): Directory bread(block 1286) failed
[  619.402652][ T4237] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  619.575822][T11436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input77
[  619.762767][ T4237] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  619.802182][ T4237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.875156][ T4237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  619.953037][ T4237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.516537][T11457] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  622.292880][ T4683] net_ratelimit: 56 callbacks suppressed
[  622.883073][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.380598][T11472] loop4: detected capacity change from 0 to 2048
[  623.394713][T11474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  623.443840][ T4237] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  623.471641][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  623.721089][T11484] input: syz0 as /devices/virtual/input/input78
[  623.745173][T11472] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback.
[  623.958108][T11493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input79
[  624.226231][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  624.232625][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  624.271345][ T4237] usb 2-1: can't set config #1, error -71
[  624.288539][ T4237] usb 2-1: USB disconnect, device number 24
[  624.336192][T11502] input: syz0 as /devices/virtual/input/input80
[  624.600873][T11513] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  625.118593][T11521] loop4: detected capacity change from 0 to 64
[  625.449466][T11521] hfs: unable to locate alternate MDB
[  625.496324][T11521] hfs: continuing without an alternate MDB
[  627.254234][T11547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input81
[  627.389433][T11544] input: syz0 as /devices/virtual/input/input82
[  627.422569][    C1] net_ratelimit: 46 callbacks suppressed
[  627.517707][T11553] loop4: detected capacity change from 0 to 256
[  627.567344][T11552] input: syz0 as /devices/virtual/input/input83
[  627.621908][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.688987][T11556] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  627.711294][T11553] FAT-fs (loop4): Directory bread(block 1285) failed
[  627.733790][T11553] FAT-fs (loop4): Directory bread(block 1286) failed
[  627.827386][T11567] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  627.847269][T11553] FAT-fs (loop4): Directory bread(block 1287) failed
[  627.996285][T11553] FAT-fs (loop4): Directory bread(block 1288) failed
[  628.351666][T11553] FAT-fs (loop4): Directory bread(block 1285) failed
[  628.359096][T11553] FAT-fs (loop4): Directory bread(block 1286) failed
[  628.365907][T11553] FAT-fs (loop4): Directory bread(block 1287) failed
[  628.372754][T11553] FAT-fs (loop4): Directory bread(block 1288) failed
[  628.385911][T11553] FAT-fs (loop4): Directory bread(block 1285) failed
[  628.393012][T11553] FAT-fs (loop4): Directory bread(block 1286) failed
[  629.098552][T11576] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  629.624847][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'.
[  629.678203][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'.
[  630.537421][T11602] input: syz0 as /devices/virtual/input/input84
[  630.611092][T11605] input: syz0 as /devices/virtual/input/input85
[  630.637670][T11608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input86
[  631.015751][T11585] loop4: detected capacity change from 0 to 32768
[  631.229942][T11585] XFS (loop4): Mounting V5 Filesystem
[  631.332544][   T26] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  631.425546][T11632] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  632.033071][   T26] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  632.064808][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.104760][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'.
[  632.141483][   T26] usb 3-1: Product: syz
[  632.477924][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2008'.
[  632.847866][T11641] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  632.868511][   T26] usb 3-1: Manufacturer: syz
[  632.898925][   T26] usb 3-1: SerialNumber: syz
[  632.958930][   T26] usb 3-1: config 0 descriptor??
[  633.024567][ T4235] net_ratelimit: 63 callbacks suppressed
[  633.024578][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.053759][T11585] XFS (loop4): Ending clean mount
[  633.087949][   T26] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  633.215360][   T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  633.288504][T11614] dvb-usb: bulk message failed: -22 (7/0)
[  633.353536][   T26] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  633.427599][T11656] input: syz0 as /devices/virtual/input/input87
[  633.436450][   T26] usb 3-1: media controller created
[  633.631885][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  633.757373][ T4188] XFS (loop4): Unmounting Filesystem
[  633.870359][   T26] DVB: Unable to find symbol mt352_attach()
[  633.908883][T11660] input: syz0 as /devices/virtual/input/input88
[  634.013045][T11667] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  634.530646][   T26] DVB: Unable to find symbol nxt6000_attach()
[  634.540675][   T26] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  635.523546][ T4235] Bluetooth: hci5: command 0x1003 tx timeout
[  635.530287][T10907] Bluetooth: hci5: sending frame failed (-49)
[  635.539146][   T26] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input89
[  635.553098][   T26] dvb-usb: schedule remote query interval to 1000 msecs.
[  635.561025][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  635.572116][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  635.578194][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  635.588160][   T26] usb 3-1: USB disconnect, device number 13
[  635.825992][T11680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input90
[  636.575407][T11688] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  636.803991][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  637.178899][T11700] input: syz0 as /devices/virtual/input/input91
[  637.512814][T11707] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  637.586296][   T26] Bluetooth: hci5: command 0x1001 tx timeout
[  637.753708][T10907] Bluetooth: hci5: sending frame failed (-49)
[  638.107402][ T4295] net_ratelimit: 62 callbacks suppressed
[  638.107414][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.258034][ T4237] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  639.692583][ T4295] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  639.824027][ T4235] Bluetooth: hci5: command 0x1009 tx timeout
[  639.962527][ T4295] usb 6-1: Using ep0 maxpacket: 32
[  640.026956][ T4237] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  640.059404][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.113698][ T4237] usb 5-1: Product: syz
[  640.113829][ T4295] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  640.126183][ T4237] usb 5-1: Manufacturer: syz
[  640.130299][ T4295] usb 6-1: config 0 has no interface number 0
[  640.139519][T11732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'.
[  640.157719][ T4295] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  640.161779][ T4237] usb 5-1: SerialNumber: syz
[  640.205555][T11732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'.
[  640.235108][ T4295] usb 6-1: config 0 interface 85 has no altsetting 0
[  640.259109][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2036'.
[  640.275573][ T4237] usb 5-1: config 0 descriptor??
[  640.332752][ T4237] usb 5-1: can't set config #0, error -71
[  640.358679][ T4237] usb 5-1: USB disconnect, device number 16
[  640.467475][T11744] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  640.837935][T11736] input: syz0 as /devices/virtual/input/input92
[  640.863170][ T4295] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  640.878583][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.938147][ T4295] usb 6-1: Product: syz
[  640.942358][ T4295] usb 6-1: Manufacturer: syz
[  640.982959][ T4295] usb 6-1: SerialNumber: syz
[  641.028186][ T4295] usb 6-1: config 0 descriptor??
[  641.649827][T11751] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  641.823998][ T4295] appletouch 6-1:0.85: Geyser mode initialized.
[  641.972062][ T4295] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input93
[  642.734407][ T4295] usb 6-1: USB disconnect, device number 17
[  642.910635][ T4295] appletouch 6-1:0.85: input: appletouch disconnected
[  643.237540][ T4267] net_ratelimit: 54 callbacks suppressed
[  643.237551][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.372873][ T4295] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  643.793826][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.912868][ T4295] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  643.965841][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.034798][ T4295] usb 6-1: config 0 descriptor??
[  644.044466][T11772] loop4: detected capacity change from 0 to 256
[  644.118837][T11772] FAT-fs (loop4): Directory bread(block 1285) failed
[  644.154199][T11772] FAT-fs (loop4): Directory bread(block 1286) failed
[  644.160939][T11772] FAT-fs (loop4): Directory bread(block 1287) failed
[  644.161107][T11772] FAT-fs (loop4): Directory bread(block 1288) failed
[  644.297246][T11780] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  644.423394][ T4295] usbhid 6-1:0.0: can't add hid device: -71
[  644.435366][ T4295] usbhid: probe of 6-1:0.0 failed with error -71
[  644.662927][ T4295] usb 6-1: USB disconnect, device number 18
[  644.884353][T11772] FAT-fs (loop4): Directory bread(block 1285) failed
[  644.891122][T11772] FAT-fs (loop4): Directory bread(block 1286) failed
[  644.898061][T11772] FAT-fs (loop4): Directory bread(block 1287) failed
[  644.905071][T11772] FAT-fs (loop4): Directory bread(block 1288) failed
[  644.917248][T11772] FAT-fs (loop4): Directory bread(block 1285) failed
[  644.924146][T11772] FAT-fs (loop4): Directory bread(block 1286) failed
[  645.198909][T11782] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input94
[  645.475578][T11786] input: syz0 as /devices/virtual/input/input95
[  645.622905][ T4295] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  645.819518][T11796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  646.043514][ T4295] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9
[  646.102537][ T4295] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00
[  646.174150][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.302848][ T4295] usb 6-1: can't set config #1, error -71
[  646.321896][ T4295] usb 6-1: USB disconnect, device number 19
[  647.104223][ T4295] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  647.332768][ T4235] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  647.447429][ T4295] usb 5-1: Using ep0 maxpacket: 32
[  647.573757][ T4295] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  647.609835][ T4295] usb 5-1: config 0 has no interface number 0
[  647.617233][ T4235] usb 4-1: Using ep0 maxpacket: 8
[  647.722582][ T4295] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  647.753030][ T4235] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  647.813363][ T4235] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  647.847632][ T4295] usb 5-1: config 0 interface 85 has no altsetting 0
[  647.867004][ T4235] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[  647.906324][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.046817][ T4295] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  648.064939][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.118471][ T4295] usb 5-1: Product: syz
[  648.138129][ T4295] usb 5-1: Manufacturer: syz
[  648.174024][ T4295] usb 5-1: SerialNumber: syz
[  648.224302][ T4295] usb 5-1: config 0 descriptor??
[  648.266993][ T4235] usb 4-1: string descriptor 0 read error: -71
[  648.280263][ T4235] mdc800 4-1:1.0: probe fails -> wrong Interface
[  648.380965][ T4235] usb 4-1: USB disconnect, device number 14
[  648.460796][ T9436] net_ratelimit: 57 callbacks suppressed
[  648.460807][ T9436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.598875][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.673323][T11837] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  648.929870][T11852] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  649.065374][ T4295] appletouch 5-1:0.85: Geyser mode initialized.
[  649.177119][ T4295] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input96
[  649.371081][ T4295] usb 5-1: USB disconnect, device number 17
[  649.377263][    C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  649.606284][ T4295] appletouch 5-1:0.85: input: appletouch disconnected
[  649.983835][T11855] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  650.532470][ T4235] Bluetooth: hci5: command 0x1003 tx timeout
[  650.538659][T10907] Bluetooth: hci5: sending frame failed (-49)
[  650.715284][T11877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  651.481338][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'.
[  651.901527][T11893] loop4: detected capacity change from 0 to 128
[  652.095905][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'.
[  652.126762][T11893] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  652.219331][T11893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  652.298561][T11901] WARNING! power/level is deprecated; use power/control instead
[  652.585581][T11911] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  652.613857][ T4295] Bluetooth: hci5: command 0x1001 tx timeout
[  652.630688][T10907] Bluetooth: hci5: sending frame failed (-49)
[  653.045358][T11913] FAULT_INJECTION: forcing a failure.
[  653.045358][T11913] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  653.148479][T11913] CPU: 1 PID: 11913 Comm: syz.5.2092 Not tainted syzkaller #0
[  653.155984][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  653.166067][T11913] Call Trace:
[  653.169356][T11913]  <TASK>
[  653.172294][T11913]  dump_stack_lvl+0x188/0x250
[  653.177010][T11913]  ? show_regs_print_info+0x20/0x20
[  653.182218][T11913]  ? load_image+0x410/0x410
[  653.186748][T11913]  ? __lock_acquire+0x7b50/0x7b50
[  653.191892][T11913]  ? verify_lock_unused+0x140/0x140
[  653.197115][T11913]  should_fail+0x383/0x4b0
[  653.201771][T11913]  strncpy_from_user+0x32/0x350
[  653.206642][T11913]  getxattr+0xf5/0x410
[  653.210824][T11913]  ? path_getxattr+0x200/0x200
[  653.215619][T11913]  ? __fdget+0x18b/0x210
[  653.219870][T11913]  __x64_sys_fgetxattr+0x194/0x200
[  653.224999][T11913]  do_syscall_64+0x4c/0xa0
[  653.229455][T11913]  ? clear_bhb_loop+0x30/0x80
[  653.234225][T11913]  ? clear_bhb_loop+0x30/0x80
[  653.238911][T11913]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  653.244824][T11913] RIP: 0033:0x7ff698a01159
[  653.249248][T11913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.268860][T11913] RSP: 002b:00007ff696c59028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[  653.277291][T11913] RAX: ffffffffffffffda RBX: 00007ff698c88fa0 RCX: 00007ff698a01159
[  653.285255][T11913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  653.293229][T11913] RBP: 00007ff698a9806b R08: 0000000000000000 R09: 0000000000000000
[  653.301206][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  653.309199][T11913] R13: 00007ff698c89038 R14: 00007ff698c88fa0 R15: 00007ffc547b7428
[  653.317275][T11913]  </TASK>
[  653.486959][    C0] net_ratelimit: 49 callbacks suppressed
[  653.743715][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.752031][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.909182][T11931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  654.623757][ T4295] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  654.702691][   T26] Bluetooth: hci5: command 0x1009 tx timeout
[  655.022879][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.133780][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.485615][ T4295] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  655.572428][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.065286][T11956] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  656.339464][ T4295] usb 5-1: config 0 descriptor??
[  656.443187][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2107'.
[  656.822479][   T25] audit: type=1800 audit(656.741:45): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2110" name="c_ssize" dev="configfs" ino=72648 res=0 errno=0
[  656.937107][ T4295] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  656.967537][ T4295] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  656.973306][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'.
[  657.016634][ T4295] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  657.067355][ T4295] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  657.108368][ T4295] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  657.158968][ T4295] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  657.863703][ T4295] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 5: -71
[  657.999274][ T4295] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense calibration info: -71
[  658.542447][    C1] net_ratelimit: 49 callbacks suppressed
[  658.695256][T11996] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  658.712935][ T4295] playstation 0003:054C:0DF2.0008: Failed to get calibration data from DualSense
[  659.126491][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.149022][ T4295] playstation 0003:054C:0DF2.0008: Failed to create dualsense.
[  659.211794][ T4295] playstation: probe of 0003:054C:0DF2.0008 failed with error -71
[  659.288591][ T4295] usb 5-1: USB disconnect, device number 18
[  659.420791][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2108'.
[  659.475434][T12008] loop4: detected capacity change from 0 to 128
[  659.607073][T12002] fido_id[12002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  659.630960][T12008] FAT-fs (loop4): bogus number of reserved sectors
[  659.663721][T12008] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  659.773716][T12008] FAT-fs (loop4): Can't find a valid FAT filesystem
[  660.127340][T12026] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  660.593005][ T4235] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  661.013841][ T4235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  661.067714][ T4235] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  661.306777][ T4235] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  661.340838][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  661.393006][ T4235] usb 2-1: Product: syz
[  661.397207][ T4235] usb 2-1: Manufacturer: syz
[  661.527233][T12052] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  661.677916][ T4235] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected
[  661.914493][ T4235] usb 2-1: iuu_phoenix converter now attached to ttyUSB0
[  662.502695][T12057] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  662.763961][ T4235] usb 2-1: USB disconnect, device number 25
[  662.932904][ T4235] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  663.032922][ T4235] iuu_phoenix 2-1:1.0: device disconnected
[  663.542874][ T9436] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  663.556772][T12066] net_ratelimit: 58 callbacks suppressed
[  663.556783][T12066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.593183][T12066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.702550][   T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  663.974111][ T9436] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  663.984738][   T26] usb 4-1: Using ep0 maxpacket: 8
[  663.994762][ T9436] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.006074][ T9436] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  664.037270][T12091] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  664.115067][ T9436] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  664.143836][   T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.290903][   T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  664.453487][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.509628][   T26] usb 4-1: config 0 descriptor??
[  664.529400][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.577952][   T26] gspca_main: vc032x-2.14.0 probing 046d:0892
[  664.644981][ T9436] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  664.681247][ T9436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.721052][ T9436] usb 5-1: Product: syz
[  664.899800][ T9436] usb 5-1: Manufacturer: syz
[  664.920769][ T9436] usb 5-1: SerialNumber: syz
[  665.003687][T12100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input97
[  665.111221][ T9436] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  665.172439][ T9436] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  665.210709][ T9436] usbserial_generic 5-1:1.0: generic converter detected
[  665.259006][ T9436] usb 5-1: generic converter now attached to ttyUSB0
[  665.323253][ T9436] usb 5-1: USB disconnect, device number 19
[  665.419985][ T9436] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  665.493011][ T9436] usbserial_generic 5-1:1.0: device disconnected
[  665.626911][   T13] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  665.762975][   T26] gspca_vc032x: reg_r err -71
[  665.771916][   T26] vc032x: probe of 4-1:0.0 failed with error -71
[  665.790288][   T26] usb 4-1: USB disconnect, device number 15
[  665.924831][T12125] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  666.335179][T12127] loop4: detected capacity change from 0 to 256
[  667.105936][T12132] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  667.425018][   T13] usb 2-1: Using ep0 maxpacket: 16
[  667.582720][   T13] usb 2-1: device descriptor read/all, error -71
[  667.622736][ T1112] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  667.984585][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  668.008891][ T1112] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  668.025933][T12147] xt_hashlimit: max too large, truncated to 1048576
[  668.033330][T12144] loop4: detected capacity change from 0 to 512
[  668.046469][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.073860][ T1112] usb 3-1: config 0 descriptor??
[  668.093425][T12144] EXT4-fs (loop4): Ignoring removed nobh option
[  668.198410][T12144] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[  668.242802][T12144] EXT4-fs (loop4): shut down requested (2)
[  668.443580][ T1112] usbhid 3-1:0.0: can't add hid device: -71
[  668.449643][ T1112] usbhid: probe of 3-1:0.0 failed with error -71
[  668.481822][ T1112] usb 3-1: USB disconnect, device number 14
[  668.568350][T12162] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  669.012446][    C0] net_ratelimit: 59 callbacks suppressed
[  670.094625][T12163] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  670.115617][T12165] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  670.504664][T12172] input: syz0 as /devices/virtual/input/input98
[  670.898065][T12183] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  671.825568][T12186] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  672.593280][T12194] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  672.972052][T12197] pci 0000:00:01.0: MSI/MSI-X allowed for future drivers
[  674.145791][ T4283] net_ratelimit: 36 callbacks suppressed
[  674.171304][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.200452][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.515498][T12225] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  676.095554][T12228] input: syz0 as /devices/virtual/input/input99
[  676.432757][ T9429] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  676.512786][   T26] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  676.628676][T12238] 
[  676.701437][T12242] input: syz0 as /devices/virtual/input/input100
[  676.815212][ T9429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  676.922117][ T9429] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  676.936431][ T9429] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  676.949667][ T9429] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  676.965238][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.978455][   T26] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  676.990620][ T9429] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  677.000940][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.009564][ T9429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.072209][   T26] usb 2-1: config 0 descriptor??
[  677.214380][T12233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  677.234860][T12233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  677.280011][ T9429] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  677.301929][ T9429] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  677.310584][ T9429] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  677.436591][T12253] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  677.569389][ T9429] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  677.782919][   T26] usbhid 2-1:0.0: can't add hid device: -71
[  677.788975][   T26] usbhid: probe of 2-1:0.0 failed with error -71
[  677.854675][ T9429] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  677.905943][   T26] usb 2-1: USB disconnect, device number 28
[  677.931414][ T9429] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  678.413756][T12258] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  678.734019][ T9429] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  678.824367][ T9429] usb 4-1: USB disconnect, device number 16
[  678.988737][T12263] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  679.240766][   T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  679.250513][ T4233] net_ratelimit: 53 callbacks suppressed
[  679.250532][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.364355][ T9429] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  679.449036][ T9429] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  679.934519][T12271] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  680.208046][ T9429] keyspan 4-1:1.0: device disconnected
[  680.585182][T12275] input: syz0 as /devices/virtual/input/input101
[  681.292741][T12282] input: syz0 as /devices/virtual/input/input102
[  681.413320][T12289] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  682.568233][T12312] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  682.584655][ T9429] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  683.077052][T12309] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  683.184106][ T9429] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  683.381051][ T9429] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  683.441959][ T9429] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  683.644351][ T9429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.672884][T12324] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  684.090304][ T9429] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  684.228483][T12328] input: syz0 as /devices/virtual/input/input103
[  684.382889][  T154] net_ratelimit: 32 callbacks suppressed
[  684.749701][T12341] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  685.014872][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.880529][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  685.894753][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.903503][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  685.938421][T12340] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  686.260093][   T13] usb 6-1: USB disconnect, device number 20
[  686.293054][T12345] input: syz0 as /devices/virtual/input/input104
[  686.335430][   T13] idmouse 6-1:1.0: disconnected
[  686.407147][T12350] input: syz1 as /devices/virtual/input/input105
[  686.831502][T12368] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input106
[  687.164484][T12381] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  688.344833][T12387] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  689.052859][ T9437] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  689.462811][ T9437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.508432][ T9437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.570083][T12403] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  689.586868][ T4329] net_ratelimit: 47 callbacks suppressed
[  689.843680][ T9437] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  689.994560][ T9437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.075111][ T9437] usb 3-1: config 0 descriptor??
[  690.441369][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.606170][ T9437] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0
[  690.656848][ T9437] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  690.766482][ T9437] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  690.861338][ T9437] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  691.002622][ T9437] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected
[  691.038448][ T9437] hid-steam 0003:28DE:1142.0009: No HID_FEATURE_REPORT submitted -  nothing to read
[  691.073149][T12409] input: syz0 as /devices/virtual/input/input107
[  691.147329][ T9437] usb 3-1: USB disconnect, device number 15
[  691.281346][ T9437] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected
[  691.300352][T12413] fido_id[12413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  691.648924][T12427] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  693.262491][ T9429] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  693.373824][T12453] input: syz0 as /devices/virtual/input/input108
[  693.522642][ T9429] usb 6-1: Using ep0 maxpacket: 8
[  693.646900][ T9429] usb 6-1: config 13 has an invalid interface number: 54 but max is 0
[  693.662946][ T9429] usb 6-1: config 13 has no interface number 0
[  693.691905][ T9429] usb 6-1: config 13 interface 54 has no altsetting 0
[  693.933222][ T9429] usb 6-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=67.ea
[  693.981380][ T9429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.024264][ T9429] usb 6-1: Product: syz
[  694.028466][ T9429] usb 6-1: Manufacturer: syz
[  694.050353][T12440] loop4: detected capacity change from 0 to 40427
[  694.059502][ T9429] usb 6-1: SerialNumber: syz
[  694.129709][T12440] F2FS-fs (loop4): invalid crc value
[  694.170036][T12440] F2FS-fs (loop4): Found nat_bits in checkpoint
[  694.286441][T12440] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  694.305242][T12440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  694.360406][T12440] attempt to access beyond end of device
[  694.360406][T12440] loop4: rw=2049, want=45104, limit=40427
[  694.445195][ T9429] keyspan 6-1:13.54: Keyspan - (without firmware) converter detected
[  694.478703][ T9429] usb 6-1: USB disconnect, device number 21
[  694.491765][ T9429] keyspan 6-1:13.54: device disconnected
[  694.612741][ T4683] net_ratelimit: 50 callbacks suppressed
[  694.881838][   T25] audit: type=1800 audit(694.851:46): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2267" name="c_srate" dev="configfs" ino=76943 res=0 errno=0
[  694.933252][ T9429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.850152][T12483] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  695.949900][T12490] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  695.949900][T12490] The task syz.5.2269 (12490) triggered the difference, watch for misbehavior.
[  696.019081][T12493] input: syz0 as /devices/virtual/input/input109
[  696.141907][T12499] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  697.252040][T12510] FAULT_INJECTION: forcing a failure.
[  697.252040][T12510] name failslab, interval 1, probability 0, space 0, times 1
[  697.279874][T12513] loop4: detected capacity change from 0 to 256
[  697.309466][T12510] CPU: 1 PID: 12510 Comm: syz.5.2277 Not tainted syzkaller #0
[  697.316961][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  697.316993][T12510] Call Trace:
[  697.317001][T12510]  <TASK>
[  697.317010][T12510]  dump_stack_lvl+0x188/0x250
[  697.330364][T12510]  ? show_regs_print_info+0x20/0x20
[  697.337951][T12510]  ? load_image+0x410/0x410
[  697.347628][T12510]  ? __might_sleep+0xf0/0xf0
[  697.352321][T12510]  ? __lock_acquire+0x7b50/0x7b50
[  697.357362][T12510]  should_fail+0x383/0x4b0
[  697.361791][T12510]  should_failslab+0x5/0x20
[  697.366370][T12510]  slab_pre_alloc_hook+0x51/0xc0
[  697.371359][T12510]  __kmalloc+0x6b/0x340
[  697.375503][T12510]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  697.375616][T12510]  tomoyo_realpath_from_path+0xed/0x5e0
[  697.386834][T12510]  ? user_path_at_empty+0x13e/0x190
[  697.392075][T12510]  ? do_syscall_64+0x4c/0xa0
[  697.396665][T12510]  tomoyo_path2_perm+0x27e/0x840
[  697.396689][T12510]  ? tomoyo_check_mkdev_acl+0x490/0x490
[  697.407137][T12510]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  697.407182][T12510]  ? rcu_is_watching+0x11/0xa0
[  697.417865][T12510]  ? kmem_cache_free+0x14c/0x210
[  697.422801][T12510]  security_sb_pivotroot+0x67/0x90
[  697.422875][T12510]  __se_sys_pivot_root+0x206/0xc00
[  697.433058][T12510]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  697.433081][T12510]  ? __x64_sys_pivot_root+0x60/0x60
[  697.444207][T12510]  ? lock_chain_count+0x20/0x20
[  697.444234][T12510]  ? lockdep_hardirqs_on+0x94/0x140
[  697.454236][T12510]  do_syscall_64+0x4c/0xa0
[  697.454255][T12510]  ? clear_bhb_loop+0x30/0x80
[  697.463303][T12510]  ? clear_bhb_loop+0x30/0x80
[  697.463330][T12510]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  697.463350][T12510] RIP: 0033:0x7ff698a01159
[  697.463368][T12510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.473883][T12510] RSP: 002b:00007ff696c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b
[  697.473906][T12510] RAX: ffffffffffffffda RBX: 00007ff698c88fa0 RCX: 00007ff698a01159
[  697.473917][T12510] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000040
[  697.473929][T12510] RBP: 00007ff698a9806b R08: 0000000000000000 R09: 0000000000000000
[  697.473939][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  697.473949][T12510] R13: 00007ff698c89038 R14: 00007ff698c88fa0 R15: 00007ffc547b7428
[  697.473979][T12510]  </TASK>
[  697.600237][T12513] FAT-fs (loop4): Directory bread(block 1285) failed
[  697.610521][T12513] FAT-fs (loop4): Directory bread(block 1286) failed
[  697.629931][T12513] FAT-fs (loop4): Directory bread(block 1287) failed
[  697.637073][T12513] FAT-fs (loop4): Directory bread(block 1288) failed
[  697.648279][T12513] FAT-fs (loop4): Directory bread(block 1285) failed
[  697.655499][T12513] FAT-fs (loop4): Directory bread(block 1286) failed
[  697.662245][T12513] FAT-fs (loop4): Directory bread(block 1287) failed
[  697.668991][T12513] FAT-fs (loop4): Directory bread(block 1288) failed
[  697.681179][T12513] FAT-fs (loop4): Directory bread(block 1285) failed
[  697.687971][T12513] FAT-fs (loop4): Directory bread(block 1286) failed
[  697.846102][T12510] ERROR: Out of memory at tomoyo_realpath_from_path.
[  698.572879][T12515] sp0: Synchronizing with TNC
[  698.617945][   T25] audit: type=1800 audit(698.591:47): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.2281" name="c_srate" dev="configfs" ino=77107 res=0 errno=0
[  698.692863][T12528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  698.994910][T12540] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  699.509542][T12543] input: syz0 as /devices/virtual/input/input110
[  699.876800][  T154] net_ratelimit: 56 callbacks suppressed
[  700.523180][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.541901][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.607215][T12553] comedi comedi1: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached
[  700.827778][T12560] bridge0: port 3(syz_tun) entered blocking state
[  700.863315][T12560] bridge0: port 3(syz_tun) entered disabled state
[  700.906116][T12560] device syz_tun entered promiscuous mode
[  700.934059][T12560] bridge0: port 3(syz_tun) entered blocking state
[  700.940585][T12560] bridge0: port 3(syz_tun) entered forwarding state
[  701.142008][   T25] audit: type=1800 audit(701.111:48): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.2293" name="c_srate" dev="configfs" ino=77231 res=0 errno=0
[  701.374578][   T25] audit: type=1800 audit(701.351:49): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2297" name="members" dev="configfs" ino=76429 res=0 errno=0
[  701.872851][T12582] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  703.164862][T12597] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  703.179500][   T26] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  703.823609][   T26] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  703.851529][   T26] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.862137][   T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  703.875815][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.943942][   T26] hub 6-1:4.0: USB hub found
[  704.169165][   T25] audit: type=1800 audit(704.141:50): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.2306" name="c_srate" dev="configfs" ino=77248 res=0 errno=0
[  704.199741][   T26] hub 6-1:4.0: 2 ports detected
[  704.207061][   T26] usb 6-1: selecting invalid altsetting 1
[  704.230511][   T26] hub 6-1:4.0: Using single TT (err -22)
[  704.418640][T12614] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  704.432700][   T26] hub 6-1:4.0: hub_hub_status failed (err = -71)
[  704.512995][   T26] hub 6-1:4.0: config failed, can't get hub status (err -71)
[  704.838172][   T26] usb 6-1: USB disconnect, device number 22
[  704.947215][  T154] net_ratelimit: 50 callbacks suppressed
[  705.012942][ T4233] Bluetooth: hci0: command 0x0c20 tx timeout
[  705.019439][ T4233] Bluetooth: hci1: command 0x201b tx timeout
[  705.045523][T12620] loop4: detected capacity change from 0 to 256
[  705.423486][T12625] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  706.018098][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.057314][T12620] FAT-fs (loop4): Directory bread(block 1285) failed
[  706.142858][T12620] FAT-fs (loop4): Directory bread(block 1286) failed
[  706.204145][T12620] FAT-fs (loop4): Directory bread(block 1287) failed
[  706.213417][T12629] input: syz0 as /devices/virtual/input/input111
[  706.267456][T12620] FAT-fs (loop4): Directory bread(block 1288) failed
[  706.340861][T12620] FAT-fs (loop4): Directory bread(block 1285) failed
[  706.347831][T12620] FAT-fs (loop4): Directory bread(block 1286) failed
[  706.354618][T12620] FAT-fs (loop4): Directory bread(block 1287) failed
[  706.354659][T12620] FAT-fs (loop4): Directory bread(block 1288) failed
[  706.941979][T12642] sctp: [Deprecated]: syz.5.2318 (pid 12642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  706.941979][T12642] Use struct sctp_sack_info instead
[  707.109976][T12646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  708.248469][T12659] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  708.802235][T12666] FAULT_INJECTION: forcing a failure.
[  708.802235][T12666] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  708.896509][T12666] CPU: 1 PID: 12666 Comm: syz.4.2324 Not tainted syzkaller #0
[  708.904010][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  708.914082][T12666] Call Trace:
[  708.917368][T12666]  <TASK>
[  708.920301][T12666]  dump_stack_lvl+0x188/0x250
[  708.924981][T12666]  ? show_regs_print_info+0x20/0x20
[  708.930179][T12666]  ? load_image+0x410/0x410
[  708.934697][T12666]  ? __lock_acquire+0x7b50/0x7b50
[  708.934733][T12666]  should_fail+0x383/0x4b0
[  708.934758][T12666]  prepare_alloc_pages+0x1e3/0x5b0
[  708.944185][T12666]  __alloc_pages+0x11b/0x480
[  708.944211][T12666]  ? zone_statistics+0x170/0x170
[  708.944233][T12666]  ? __rwlock_init+0x140/0x140
[  708.953917][T12666]  ? alloc_pages+0x452/0x560
[  708.963647][T12666]  __get_free_pages+0x8/0x30
[  708.963673][T12666]  kasan_populate_vmalloc_pte+0x21/0xc0
[  708.972855][T12666]  __apply_to_page_range+0x987/0xd10
[  708.983687][T12666]  ? kasan_populate_vmalloc+0x70/0x70
[  708.983709][T12666]  alloc_vmap_area+0x19e8/0x1b30
[  708.983743][T12666]  ? vm_map_ram+0xba0/0xba0
[  708.994060][T12666]  __get_vm_area_node+0x14f/0x2d0
[  708.994083][T12666]  __vmalloc_node_range+0xef/0x8b0
[  708.994101][T12666]  ? stack_map_alloc+0x305/0x550
[  709.003582][T12666]  ? apparmor_capable+0x12c/0x190
[  709.013618][T12666]  ? bpf_lsm_capable+0x5/0x10
[  709.013639][T12666]  bpf_map_area_alloc+0xd4/0xe0
[  709.023309][T12666]  ? stack_map_alloc+0x305/0x550
[  709.023330][T12666]  stack_map_alloc+0x305/0x550
[  709.023351][T12666]  map_create+0x481/0x2330
[  709.033137][T12666]  ? bpf_lsm_bpf+0x5/0x10
[  709.042348][T12666]  __sys_bpf+0x30a/0x6f0
[  709.042376][T12666]  ? bpf_link_show_fdinfo+0x380/0x380
[  709.042409][T12666]  __x64_sys_bpf+0x78/0x90
[  709.050925][T12666]  do_syscall_64+0x4c/0xa0
[  709.060659][T12666]  ? clear_bhb_loop+0x30/0x80
[  709.069696][T12666]  ? clear_bhb_loop+0x30/0x80
[  709.074368][T12666]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  709.074389][T12666] RIP: 0033:0x7f457c262159
[  709.074408][T12666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.084649][T12666] RSP: 002b:00007f457a4ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  709.084670][T12666] RAX: ffffffffffffffda RBX: 00007f457c4e9fa0 RCX: 00007f457c262159
[  709.084684][T12666] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000
[  709.112653][T12666] RBP: 00007f457c2f906b R08: 0000000000000000 R09: 0000000000000000
[  709.112666][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.112677][T12666] R13: 00007f457c4ea038 R14: 00007f457c4e9fa0 R15: 00007ffc42601fe8
[  709.112703][T12666]  </TASK>
[  709.203877][T12670] input: syz0 as /devices/virtual/input/input112
[  709.302836][ T4233] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  709.707235][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.739301][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  709.797399][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  709.857158][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  709.907057][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.984464][ T4233] usb 2-1: config 0 descriptor??
[  710.014260][ T9429] net_ratelimit: 35 callbacks suppressed
[  710.014272][ T9429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.095804][T12680] loop4: detected capacity change from 0 to 256
[  710.419109][T12685] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  710.496382][T12680] FAT-fs (loop4): Directory bread(block 1285) failed
[  710.846238][ T4233] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  710.886361][T12680] FAT-fs (loop4): Directory bread(block 1286) failed
[  710.937366][T12680] FAT-fs (loop4): Directory bread(block 1287) failed
[  711.399453][T12680] FAT-fs (loop4): Directory bread(block 1288) failed
[  711.450397][T12680] FAT-fs (loop4): Directory bread(block 1285) failed
[  711.457280][T12680] FAT-fs (loop4): Directory bread(block 1286) failed
[  711.464134][T12680] FAT-fs (loop4): Directory bread(block 1287) failed
[  711.470842][T12680] FAT-fs (loop4): Directory bread(block 1288) failed
[  711.980030][ T4233] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  712.008873][ T4233] usb 2-1: USB disconnect, device number 30
[  712.125804][T12691] fido_id[12691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  712.233502][T12699] FAULT_INJECTION: forcing a failure.
[  712.233502][T12699] name fail_futex, interval 1, probability 0, space 0, times 1
[  712.282614][T12702] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  712.719346][T12699] CPU: 1 PID: 12699 Comm: syz.4.2335 Not tainted syzkaller #0
[  712.726867][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.736932][T12699] Call Trace:
[  712.740222][T12699]  <TASK>
[  712.743164][T12699]  dump_stack_lvl+0x188/0x250
[  712.747854][T12699]  ? show_regs_print_info+0x20/0x20
[  712.753065][T12699]  ? load_image+0x410/0x410
[  712.757592][T12699]  should_fail+0x383/0x4b0
[  712.762028][T12699]  get_futex_key+0x1cf/0x12d0
[  712.766833][T12699]  ? futex_wait_restart+0x250/0x250
[  712.772046][T12699]  ? __lock_acquire+0x7b50/0x7b50
[  712.777087][T12699]  futex_wait_setup+0x4b/0x520
[  712.781877][T12699]  futex_wait+0x22f/0x680
[  712.786232][T12699]  ? do_futex+0x12b0/0x12b0
[  712.790773][T12699]  ? verify_lock_unused+0x140/0x140
[  712.795995][T12699]  do_futex+0xdc2/0x12b0
[  712.800257][T12699]  ? release_firmware_map_entry+0x190/0x190
[  712.806169][T12699]  ? preempt_schedule_irq+0xe6/0x160
[  712.811472][T12699]  ? futex_exit_release+0x1c0/0x1c0
[  712.816683][T12699]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  712.822682][T12699]  ? lock_chain_count+0x20/0x20
[  712.827556][T12699]  __se_sys_futex+0x389/0x420
[  712.832257][T12699]  ? lockdep_hardirqs_on+0x94/0x140
[  712.837478][T12699]  ? __x64_sys_futex+0xf0/0xf0
[  712.842254][T12699]  ? __x64_sys_futex+0x1d/0xf0
[  712.847035][T12699]  do_syscall_64+0x4c/0xa0
[  712.851458][T12699]  ? clear_bhb_loop+0x30/0x80
[  712.856143][T12699]  ? clear_bhb_loop+0x30/0x80
[  712.860829][T12699]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  712.866726][T12699] RIP: 0033:0x7f457c262159
[  712.871140][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.890742][T12699] RSP: 002b:00007f457a4ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  712.899166][T12699] RAX: ffffffffffffffda RBX: 00007f457c4e9fa0 RCX: 00007f457c262159
[  712.907158][T12699] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000
[  712.915150][T12699] RBP: 00007f457c2f906b R08: 0000000000000000 R09: 0000000000000002
[  712.923135][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.931117][T12699] R13: 00007f457c4ea038 R14: 00007f457c4e9fa0 R15: 00007ffc42601fe8
[  712.939115][T12699]  </TASK>
[  713.098962][T12712] input: syz0 as /devices/virtual/input/input113
[  713.504759][T12723] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  714.519954][T12728] input: syz0 as /devices/virtual/input/input114
[  715.092487][    C0] net_ratelimit: 39 callbacks suppressed
[  715.118385][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.536199][T12747] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  715.697436][T12758] FAULT_INJECTION: forcing a failure.
[  715.697436][T12758] name failslab, interval 1, probability 0, space 0, times 0
[  715.732467][T12758] CPU: 1 PID: 12758 Comm: syz.4.2353 Not tainted syzkaller #0
[  715.739969][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  715.739984][T12758] Call Trace:
[  715.739991][T12758]  <TASK>
[  715.740000][T12758]  dump_stack_lvl+0x188/0x250
[  715.740027][T12758]  ? show_regs_print_info+0x20/0x20
[  715.740045][T12758]  ? load_image+0x410/0x410
[  715.740069][T12758]  ? __might_sleep+0xf0/0xf0
[  715.754097][T12758]  ? __lock_acquire+0x7b50/0x7b50
[  715.754130][T12758]  should_fail+0x383/0x4b0
[  715.754156][T12758]  should_failslab+0x5/0x20
[  715.754172][T12758]  slab_pre_alloc_hook+0x51/0xc0
[  715.754189][T12758]  ? security_file_alloc+0x30/0x110
[  715.754207][T12758]  kmem_cache_alloc+0x3d/0x280
[  715.754222][T12758]  ? rcu_is_watching+0x11/0xa0
[  715.767575][T12758]  security_file_alloc+0x30/0x110
[  715.776628][T12758]  __alloc_file+0xc2/0x240
[  715.776652][T12758]  alloc_empty_file+0x90/0x180
[  715.776672][T12758]  alloc_file+0x5c/0x510
[  715.786062][T12758]  ? do_raw_spin_unlock+0x11d/0x230
[  715.786086][T12758]  alloc_file_pseudo+0x180/0x200
[  715.795494][T12758]  ? alloc_empty_file_noaccount+0x80/0x80
[  715.795515][T12758]  ? _raw_spin_unlock+0x24/0x40
[  715.805442][T12758]  __anon_inode_getfd+0x26b/0x3d0
[  715.815207][T12758]  ? anon_inode_getfd+0x40/0x40
[  715.815232][T12758]  do_signalfd4+0x183/0x320
[  715.824368][T12758]  ? _copy_from_user+0x111/0x170
[  715.833789][T12758]  __x64_sys_signalfd+0x12e/0x170
[  715.833809][T12758]  ? __ia32_sys_signalfd4+0x1a0/0x1a0
[  715.844432][T12758]  ? lockdep_hardirqs_on+0x94/0x140
[  715.844458][T12758]  do_syscall_64+0x4c/0xa0
[  715.854277][T12758]  ? clear_bhb_loop+0x30/0x80
[  715.854298][T12758]  ? clear_bhb_loop+0x30/0x80
[  715.863608][T12758]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  715.863630][T12758] RIP: 0033:0x7f457c262159
[  715.873562][T12758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.873578][T12758] RSP: 002b:00007f457a4ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  715.884723][T12758] RAX: ffffffffffffffda RBX: 00007f457c4e9fa0 RCX: 00007f457c262159
[  715.884739][T12758] RDX: 0000000000000008 RSI: 0000200000000180 RDI: ffffffffffffffff
[  715.884751][T12758] RBP: 00007f457c2f906b R08: 0000000000000000 R09: 0000000000000000
[  715.893801][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  715.893813][T12758] R13: 00007f457c4ea038 R14: 00007f457c4e9fa0 R15: 00007ffc42601fe8
[  715.893840][T12758]  </TASK>
[  716.082624][T12764] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  717.254828][T12774] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  717.505758][T12775] input: syz0 as /devices/virtual/input/input115
[  717.583797][T12776] input: syz0 as /devices/virtual/input/input116
[  718.500068][T12796] cramfs: checking physical address 0x000000001f243000 for linear cramfs image
[  718.531916][T12796] cramfs: wrong magic
[  718.578650][T12796] cramfs: wrong magic
[  718.852769][T12813] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  719.234588][T12811] input: syz0 as /devices/virtual/input/input117
[  719.250140][T12810] input: syz0 as /devices/virtual/input/input118
[  720.021779][   T25] audit: type=1800 audit(719.991:51): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.2376" name="c_srate" dev="configfs" ino=78681 res=0 errno=0
[  720.061103][T12831] netlink: 'syz.5.2377': attribute type 3 has an invalid length.
[  720.192256][ T4283] net_ratelimit: 50 callbacks suppressed
[  720.501809][T12854] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  720.632891][ T9429] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  721.068431][T12858] input: syz0 as /devices/virtual/input/input119
[  721.099434][T12859] input: syz0 as /devices/virtual/input/input120
[  721.203038][ T9429] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  721.220968][ T9429] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  721.498018][ T9429] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  721.507918][ T9429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  721.519142][ T9429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  721.663109][ T9429] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  721.696696][ T9429] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  721.757534][   T25] audit: type=1800 audit(721.731:52): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.2390" name="c_srate" dev="configfs" ino=77498 res=0 errno=0
[  721.792415][ T9429] usb 5-1: Product: syz
[  721.801239][ T9429] usb 5-1: Manufacturer: syz
[  721.898169][ T9429] cdc_wdm 5-1:1.0: skipping garbage
[  721.907492][ T9429] cdc_wdm 5-1:1.0: skipping garbage
[  721.969819][ T9429] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  721.997964][ T9429] cdc_wdm 5-1:1.0: Unknown control protocol
[  722.119164][T12888] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  722.778407][T12893] input: syz0 as /devices/virtual/input/input121
[  722.958976][ T9429] usb 5-1: USB disconnect, device number 20
[  722.965401][    C1] cdc_wdm 5-1:1.0: Unexpected error -71
[  722.967089][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  722.967276][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  722.967293][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  723.112574][T12901] input: syz0 as /devices/virtual/input/input122
[  723.463727][   T25] audit: type=1326 audit(723.441:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12911 comm="syz.3.2406" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63d024159 code=0x0
[  723.713554][   T25] audit: type=1800 audit(723.691:54): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2405" name="c_srate" dev="configfs" ino=77578 res=0 errno=0
[  723.882753][T12929] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  724.840977][T12937] input: syz0 as /devices/virtual/input/input123
[  724.850686][T12939] loop4: detected capacity change from 0 to 256
[  724.891230][ T9429] kernel read not supported for file /kmsg (pid: 9429 comm: kworker/1:11)
[  724.928780][T12939] FAT-fs (loop4): Directory bread(block 1285) failed
[  724.970645][T12939] FAT-fs (loop4): Directory bread(block 1286) failed
[  725.009898][T12939] FAT-fs (loop4): Directory bread(block 1287) failed
[  725.022475][T12939] FAT-fs (loop4): Directory bread(block 1288) failed
[  725.036312][T12939] FAT-fs (loop4): Directory bread(block 1285) failed
[  725.044415][T12939] FAT-fs (loop4): Directory bread(block 1286) failed
[  725.052439][T12939] FAT-fs (loop4): Directory bread(block 1287) failed
[  725.059164][T12939] FAT-fs (loop4): Directory bread(block 1288) failed
[  725.067220][T12939] FAT-fs (loop4): Directory bread(block 1285) failed
[  725.074008][T12939] FAT-fs (loop4): Directory bread(block 1286) failed
[  725.111389][T12947] input: syz0 as /devices/virtual/input/input124
[  725.118374][   T26] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  725.332435][    C0] net_ratelimit: 38 callbacks suppressed
[  725.341183][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.429674][   T25] audit: type=1800 audit(725.401:55): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2420" name="c_srate" dev="configfs" ino=77696 res=0 errno=0
[  725.493670][T12961] FAULT_INJECTION: forcing a failure.
[  725.493670][T12961] name failslab, interval 1, probability 0, space 0, times 0
[  725.549995][T12961] CPU: 0 PID: 12961 Comm: syz.2.2423 Not tainted syzkaller #0
[  725.557506][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  725.567571][T12961] Call Trace:
[  725.570857][T12961]  <TASK>
[  725.573794][T12961]  dump_stack_lvl+0x188/0x250
[  725.578484][T12961]  ? show_regs_print_info+0x20/0x20
[  725.583689][T12961]  ? load_image+0x410/0x410
[  725.588213][T12961]  ? rcu_lock_release+0x5/0x20
[  725.593075][T12961]  should_fail+0x383/0x4b0
[  725.597510][T12961]  should_failslab+0x5/0x20
[  725.602026][T12961]  slab_pre_alloc_hook+0x51/0xc0
[  725.607061][T12961]  kmem_cache_alloc_trace+0x47/0x290
[  725.612354][T12961]  ? proc_thread_self_get_link+0xf8/0x190
[  725.618129][T12961]  proc_thread_self_get_link+0xf8/0x190
[  725.618177][T12961]  ? proc_setup_thread_self+0x2d0/0x2d0
[  725.618196][T12961]  pick_link+0x701/0xdc0
[  725.618221][T12961]  step_into+0xac6/0xcd0
[  725.618246][T12961]  ? set_root+0x3a0/0x3a0
[  725.642786][T12961]  ? walk_component+0x1b6/0x460
[  725.647656][T12961]  link_path_walk+0x688/0xde0
[  725.652352][T12961]  ? handle_lookup_down+0x130/0x130
[  725.657563][T12961]  path_openat+0x28e/0x2fb0
[  725.657608][T12961]  ? __kasan_slab_alloc+0xa9/0xc0
[  725.657636][T12961]  ? do_filp_open+0x400/0x400
[  725.657666][T12961]  do_filp_open+0x1df/0x400
[  725.667923][T12961]  ? vfs_tmpfile+0x300/0x300
[  725.667962][T12961]  ? _raw_spin_unlock+0x24/0x40
[  725.677462][T12961]  ? alloc_fd+0x59e/0x650
[  725.686938][T12961]  do_sys_openat2+0x14b/0x500
[  725.686959][T12961]  ? __lock_acquire+0x7b50/0x7b50
[  725.695958][T12961]  ? do_sys_open+0xe0/0xe0
[  725.695984][T12961]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  725.696010][T12961]  ? lock_chain_count+0x20/0x20
[  725.696031][T12961]  __x64_sys_openat+0x135/0x160
[  725.696049][T12961]  do_syscall_64+0x4c/0xa0
[  725.705977][T12961]  ? clear_bhb_loop+0x30/0x80
[  725.706002][T12961]  ? clear_bhb_loop+0x30/0x80
[  725.706019][T12961]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  725.706043][T12961] RIP: 0033:0x7ffa4262698e
[  725.706063][T12961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  725.706083][T12961] RSP: 002b:00007ffa408bdec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  725.706105][T12961] RAX: ffffffffffffffda RBX: 00007ffa408be6c0 RCX: 00007ffa4262698e
[  725.706119][T12961] RDX: 0000000000000002 RSI: 00007ffa408bdf90 RDI: ffffffffffffff9c
[  725.706131][T12961] RBP: 00007ffa426fd06b R08: 0000000000000000 R09: 0000000000000000
[  725.706144][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.706155][T12961] R13: 00007ffa428ee038 R14: 00007ffa428edfa0 R15: 00007ffd82ed6128
[  725.706183][T12961]  </TASK>
[  725.952160][T12964] input: syz0 as /devices/virtual/input/input125
[  725.979822][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'.
[  725.998209][T12967] FAULT_INJECTION: forcing a failure.
[  725.998209][T12967] name fail_futex, interval 1, probability 0, space 0, times 0
[  726.017933][T12967] CPU: 0 PID: 12967 Comm: syz.4.2426 Not tainted syzkaller #0
[  726.025429][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.035489][T12967] Call Trace:
[  726.035500][T12967]  <TASK>
[  726.035507][T12967]  dump_stack_lvl+0x188/0x250
[  726.035533][T12967]  ? show_regs_print_info+0x20/0x20
[  726.035550][T12967]  ? load_image+0x410/0x410
[  726.035571][T12967]  ? mark_lock+0x94/0x320
[  726.035592][T12967]  should_fail+0x383/0x4b0
[  726.035617][T12967]  get_futex_key+0x1a1/0x12d0
[  726.035640][T12967]  ? futex_wait_restart+0x250/0x250
[  726.035654][T12967]  ? __lock_acquire+0x13dc/0x7b50
[  726.052387][T12967]  futex_wake+0x101/0x540
[  726.065595][T12967]  ? futex_wait+0x680/0x680
[  726.089253][T12967]  ? verify_lock_unused+0x140/0x140
[  726.094470][T12967]  ? verify_lock_unused+0x140/0x140
[  726.099671][T12967]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  726.105692][T12967]  do_futex+0xd83/0x12b0
[  726.105731][T12967]  ? futex_exit_release+0x1c0/0x1c0
[  726.105751][T12967]  ? __context_tracking_exit+0x4c/0x80
[  726.120615][T12967]  __se_sys_futex+0x389/0x420
[  726.125302][T12967]  ? __x64_sys_futex+0xf0/0xf0
[  726.125333][T12967]  ? __x64_sys_futex+0x1d/0xf0
[  726.125355][T12967]  do_syscall_64+0x4c/0xa0
[  726.125370][T12967]  ? clear_bhb_loop+0x30/0x80
[  726.135389][T12967]  ? clear_bhb_loop+0x30/0x80
[  726.144450][T12967]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  726.144479][T12967] RIP: 0033:0x7f457c262159
[  726.144495][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.144508][T12967] RSP: 002b:00007f457a4ba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  726.144524][T12967] RAX: ffffffffffffffda RBX: 00007f457c4e9fa8 RCX: 00007f457c262159
[  726.144535][T12967] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f457c4e9fac
[  726.144545][T12967] RBP: 00007f457c4e9fa0 R08: 0039730fd40713db R09: 0000000000000000
[  726.144556][T12967] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  726.144566][T12967] R13: 00007f457c4ea038 R14: 00007ffc42601f00 R15: 00007ffc42601fe8
[  726.144589][T12967]  </TASK>
[  726.179944][   T26] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  726.217197][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.249487][   T26] usb 2-1: Product: syz
[  726.255158][   T26] usb 2-1: Manufacturer: syz
[  726.259756][   T26] usb 2-1: SerialNumber: syz
[  726.334742][   T26] ums-karma 2-1:1.0: USB Mass Storage device detected
[  726.383688][   T26] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  726.383688][   T26]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  726.472333][T12980] input: syz0 as /devices/virtual/input/input126
[  726.689598][   T25] audit: type=1800 audit(726.661:56): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2434" name="c_srate" dev="configfs" ino=79162 res=0 errno=0
[  726.804668][   T26] ums-karma: probe of 2-1:1.0 failed with error -5
[  727.132134][T12997] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  727.173068][   T26] usb 2-1: USB disconnect, device number 31
[  727.390394][T13001] input: syz0 as /devices/virtual/input/input127
[  727.867984][T13004] overlayfs: failed to resolve './file0': -2
[  727.928014][T13007] input: syz0 as /devices/virtual/input/input128
[  727.934760][T12979] loop4: detected capacity change from 0 to 32768
[  728.047080][T13013] FAULT_INJECTION: forcing a failure.
[  728.047080][T13013] name failslab, interval 1, probability 0, space 0, times 0
[  728.089111][T13013] CPU: 0 PID: 13013 Comm: syz.5.2444 Not tainted syzkaller #0
[  728.096611][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  728.106668][T13013] Call Trace:
[  728.106678][T13013]  <TASK>
[  728.106688][T13013]  dump_stack_lvl+0x188/0x250
[  728.106713][T13013]  ? show_regs_print_info+0x20/0x20
[  728.106731][T13013]  ? load_image+0x410/0x410
[  728.112939][T13013]  ? __lock_acquire+0x7b50/0x7b50
[  728.112971][T13013]  should_fail+0x383/0x4b0
[  728.112997][T13013]  should_failslab+0x5/0x20
[  728.140798][ T4329] tipc: Subscription rejected, illegal request
[  728.141243][T13013]  slab_pre_alloc_hook+0x51/0xc0
[  728.141273][T13013]  kmem_cache_alloc_trace+0x47/0x290
[  728.141289][T13013]  ? sctp_endpoint_new+0x11a/0xa00
[  728.163129][T13013]  sctp_endpoint_new+0x11a/0xa00
[  728.168084][T13013]  sctp_init_sock+0x95b/0x11c0
[  728.172849][T13013]  sctp_v6_init_sock+0x12/0x60
[  728.172869][T13013]  inet6_create+0xd88/0x1130
[  728.182274][T13013]  __sock_create+0x473/0x910
[  728.186961][T13013]  __sys_socket+0xe2/0x170
[  728.191398][T13013]  __x64_sys_socket+0x76/0x80
[  728.196089][T13013]  do_syscall_64+0x4c/0xa0
[  728.200514][T13013]  ? clear_bhb_loop+0x30/0x80
[  728.205211][T13013]  ? clear_bhb_loop+0x30/0x80
[  728.209910][T13013]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  728.215835][T13013] RIP: 0033:0x7ff698a01159
[  728.220264][T13013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.239891][T13013] RSP: 002b:00007ff696c59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  728.248314][T13013] RAX: ffffffffffffffda RBX: 00007ff698c88fa0 RCX: 00007ff698a01159
[  728.256410][T13013] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a
[  728.264400][T13013] RBP: 00007ff698a9806b R08: 0000000000000000 R09: 0000000000000000
[  728.272391][T13013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  728.280378][T13013] R13: 00007ff698c89038 R14: 00007ff698c88fa0 R15: 00007ffc547b7428
[  728.280407][T13013]  </TASK>
[  728.340429][T12979] XFS (loop4): Mounting V5 Filesystem
[  728.412595][   T25] audit: type=1800 audit(728.381:57): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.2447" name="c_srate" dev="configfs" ino=79248 res=0 errno=0
[  728.491046][T12979] XFS (loop4): Ending clean mount
[  728.717967][   T25] audit: type=1804 audit(728.691:58): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=open_writers comm="syz.4.2429" name="/newroot/436/file1/file1" dev="loop4" ino=6150 res=1 errno=0
[  728.749888][T13035] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  729.121169][ T4188] XFS (loop4): Unmounting Filesystem
[  729.516722][T13045] input: syz0 as /devices/virtual/input/input129
[  729.793068][T13051] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  729.964632][T13056] device ip6gre1 entered promiscuous mode
[  730.099272][   T25] audit: type=1800 audit(730.071:59): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2461" name="c_srate" dev="configfs" ino=79362 res=0 errno=0
[  730.130882][T13067] input: syz0 as /devices/virtual/input/input130
[  730.171514][T13072] input: syz0 as /devices/virtual/input/input131
[  730.462603][  T154] net_ratelimit: 43 callbacks suppressed
[  730.785198][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.959192][T13081] loop4: detected capacity change from 0 to 32768
[  731.101169][   T25] audit: type=1800 audit(731.071:60): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2478" name="c_srate" dev="configfs" ino=79506 res=0 errno=0
[  731.143859][T13109] input: syz0 as /devices/virtual/input/input132
[  731.238442][T13111] input: syz0 as /devices/virtual/input/input133
[  731.254467][T13081] XFS (loop4): Mounting V5 Filesystem
[  731.438938][T13081] XFS (loop4): Ending clean mount
[  731.522513][   T25] audit: type=1800 audit(731.471:61): pid=13081 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.2469" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  731.642262][ T4188] XFS (loop4): Unmounting Filesystem
[  732.462186][T13147] input: syz0 as /devices/virtual/input/input134
[  732.571957][   T25] audit: type=1800 audit(732.541:62): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2491" name="c_srate" dev="configfs" ino=79546 res=0 errno=0
[  732.743370][T13153] device syzkaller1 entered promiscuous mode
[  732.820584][T13161] loop4: detected capacity change from 0 to 64
[  732.826780][T13157] input: syz0 as /devices/virtual/input/input135
[  733.200683][T13171] loop4: detected capacity change from 0 to 256
[  733.213099][T13171] FAT-fs (loop4): Directory bread(block 1285) failed
[  733.220272][T13171] FAT-fs (loop4): Directory bread(block 1286) failed
[  733.232662][T13171] FAT-fs (loop4): Directory bread(block 1287) failed
[  733.245612][T13171] FAT-fs (loop4): Directory bread(block 1288) failed
[  733.262824][ T9429] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  733.273290][T13171] FAT-fs (loop4): Directory bread(block 1285) failed
[  733.280085][T13171] FAT-fs (loop4): Directory bread(block 1286) failed
[  733.286983][T13171] FAT-fs (loop4): Directory bread(block 1287) failed
[  733.287018][T13171] FAT-fs (loop4): Directory bread(block 1288) failed
[  733.290512][T13171] FAT-fs (loop4): Directory bread(block 1285) failed
[  733.307454][T13171] FAT-fs (loop4): Directory bread(block 1286) failed
[  733.582728][ T1112] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  734.102504][ T1112] usb 3-1: Using ep0 maxpacket: 16
[  734.202632][ T9429] usb 4-1: Using ep0 maxpacket: 8
[  734.230403][ T1112] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  734.251259][ T1112] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  734.273021][T13180] input: syz0 as /devices/virtual/input/input136
[  734.286257][   T25] audit: type=1800 audit(734.261:63): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2505" name="c_srate" dev="configfs" ino=80145 res=0 errno=0
[  734.342800][ T1112] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  734.361744][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  734.384158][ T1112] usb 3-1: SerialNumber: syz
[  734.473366][T13190] input: syz0 as /devices/virtual/input/input137
[  734.493795][ T1112] usb 3-1: 0:2 : does not exist
[  734.526107][ T9429] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  734.550994][ T9429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.566325][ T9429] usb 4-1: Product: syz
[  734.570513][ T9429] usb 4-1: Manufacturer: syz
[  734.570531][ T9429] usb 4-1: SerialNumber: syz
[  734.586176][ T9429] usb 4-1: config 0 descriptor??
[  734.655343][ T9429] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  734.666286][T13200] FAULT_INJECTION: forcing a failure.
[  734.666286][T13200] name failslab, interval 1, probability 0, space 0, times 0
[  734.703778][T13200] CPU: 1 PID: 13200 Comm: syz.5.2511 Not tainted syzkaller #0
[  734.711283][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  734.721343][T13200] Call Trace:
[  734.724625][T13200]  <TASK>
[  734.727565][T13200]  dump_stack_lvl+0x188/0x250
[  734.732256][T13200]  ? show_regs_print_info+0x20/0x20
[  734.737459][T13200]  ? load_image+0x410/0x410
[  734.741969][T13200]  ? __lock_acquire+0x7b50/0x7b50
[  734.747016][T13200]  should_fail+0x383/0x4b0
[  734.751446][T13200]  should_failslab+0x5/0x20
[  734.755963][T13200]  slab_pre_alloc_hook+0x51/0xc0
[  734.760923][T13200]  kmem_cache_alloc_trace+0x47/0x290
[  734.766215][T13200]  ? resv_map_alloc+0x84/0x2a0
[  734.770990][T13200]  resv_map_alloc+0x84/0x2a0
[  734.775591][T13200]  hugetlbfs_get_inode+0x64/0x510
[  734.780728][T13200]  hugetlb_file_setup+0x249/0x6f0
[  734.785784][T13200]  ? __lock_acquire+0x7b50/0x7b50
[  734.790820][T13200]  ksys_mmap_pgoff+0x229/0x790
[  734.795596][T13200]  ? mmap_region+0x1730/0x1730
[  734.800372][T13200]  ? lockdep_hardirqs_on+0x94/0x140
[  734.805582][T13200]  do_syscall_64+0x4c/0xa0
[  734.810005][T13200]  ? clear_bhb_loop+0x30/0x80
[  734.814686][T13200]  ? clear_bhb_loop+0x30/0x80
[  734.819369][T13200]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  734.825269][T13200] RIP: 0033:0x7ff698a01159
[  734.829689][T13200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.849299][T13200] RSP: 002b:00007ff696c59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  734.857723][T13200] RAX: ffffffffffffffda RBX: 00007ff698c88fa0 RCX: 00007ff698a01159
[  734.865703][T13200] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000
[  734.873683][T13200] RBP: 00007ff698a9806b R08: ffffffffffffffff R09: 0000000000000000
[  734.881661][T13200] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000000
[  734.889643][T13200] R13: 00007ff698c89038 R14: 00007ff698c88fa0 R15: 00007ffc547b7428
[  734.897664][T13200]  </TASK>
[  734.915668][T13202] loop4: detected capacity change from 0 to 1024
[  734.977579][T13202] EXT4-fs (loop4): Ignoring removed bh option
[  735.005616][T13202] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  735.126746][T13202] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  735.353294][ T1112] usb 3-1: USB disconnect, device number 16
[  735.494377][ T4329] net_ratelimit: 51 callbacks suppressed
[  735.507341][   T25] audit: type=1800 audit(735.481:64): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.2518" name="c_srate" dev="configfs" ino=80178 res=0 errno=0
[  735.562289][T13220] input: syz0 as /devices/virtual/input/input138
[  735.784366][ T9429] usb 4-1: USB disconnect, device number 17
[  735.841433][T13227] input: syz0 as /devices/virtual/input/input139
[  736.099960][T13231] lo speed is unknown, defaulting to 1000
[  736.414693][T13231] lo speed is unknown, defaulting to 1000
[  736.552474][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2529'.
[  736.600053][   T25] audit: type=1800 audit(736.571:65): pid=13245 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.2530" name="c_srate" dev="configfs" ino=79800 res=0 errno=0
[  736.780362][T13250] input: syz0 as /devices/virtual/input/input140
[  736.943914][T13261] loop4: detected capacity change from 0 to 256
[  736.971067][T13258] input: syz0 as /devices/virtual/input/input141
[  737.006147][T13261] FAT-fs (loop4): Directory bread(block 1285) failed
[  737.030362][T13261] FAT-fs (loop4): Directory bread(block 1286) failed
[  737.050090][T13261] FAT-fs (loop4): Directory bread(block 1287) failed
[  737.106867][T13261] FAT-fs (loop4): Directory bread(block 1288) failed
[  737.171886][T13261] FAT-fs (loop4): Directory bread(block 1285) failed
[  737.178708][T13261] FAT-fs (loop4): Directory bread(block 1286) failed
[  737.185567][T13261] FAT-fs (loop4): Directory bread(block 1287) failed
[  737.192300][T13261] FAT-fs (loop4): Directory bread(block 1288) failed
[  737.200266][T13261] FAT-fs (loop4): Directory bread(block 1285) failed
[  737.207229][T13261] FAT-fs (loop4): Directory bread(block 1286) failed
[  738.119623][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'.
[  738.128507][T13285] input: syz0 as /devices/virtual/input/input142
[  738.319098][T13295] input: syz0 as /devices/virtual/input/input143
[  738.622578][   T26] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  738.684661][T13308] loop4: detected capacity change from 0 to 256
[  738.710999][T13308] FAT-fs (loop4): Directory bread(block 1285) failed
[  738.737009][T13308] FAT-fs (loop4): Directory bread(block 1286) failed
[  738.748846][T13308] FAT-fs (loop4): Directory bread(block 1287) failed
[  738.755944][T13308] FAT-fs (loop4): Directory bread(block 1288) failed
[  738.882124][T13308] FAT-fs (loop4): Directory bread(block 1285) failed
[  738.889109][T13308] FAT-fs (loop4): Directory bread(block 1286) failed
[  738.896008][T13308] FAT-fs (loop4): Directory bread(block 1287) failed
[  738.902779][T13308] FAT-fs (loop4): Directory bread(block 1288) failed
[  738.910714][T13308] FAT-fs (loop4): Directory bread(block 1285) failed
[  738.917983][T13308] FAT-fs (loop4): Directory bread(block 1286) failed
[  739.620882][   T26] usb 2-1: Using ep0 maxpacket: 8
[  739.710717][T13318] Illegal XDP return value 954003818, expect packet loss!
[  739.905720][   T26] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  739.914509][   T26] usb 2-1: config 179 has no interface number 0
[  739.914541][   T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  739.931800][   T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  739.943068][   T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  739.959898][   T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  739.971428][   T26] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  739.985775][   T26] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  740.001949][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.022766][ T4233] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  740.034835][T13298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  740.053703][T13332] loop4: detected capacity change from 0 to 8
[  740.075593][ T4233] Bluetooth: hci1: Injecting HCI hardware error event
[  740.098075][T13330] input: syz0 as /devices/virtual/input/input144
[  740.105250][T10907] Bluetooth: hci1: hardware error 0x00
[  740.348196][ T4233] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input145
[  740.386008][T13337] usb usb8: check_ctrlrecip: process 13337 (syz.3.2563) requesting ep 01 but needs 81
[  740.440086][T13337] usb usb8: usbfs: process 13337 (syz.3.2563) did not claim interface 0 before use
[  740.516484][ T4233] usb 2-1: USB disconnect, device number 32
[  740.532558][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  740.541002][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  740.550300][T13343] input: syz0 as /devices/virtual/input/input146
[  740.556784][T13344] loop4: detected capacity change from 0 to 256
[  740.569702][ T4233] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  740.608821][T13344] FAT-fs (loop4): Directory bread(block 1285) failed
[  740.615686][    C1] net_ratelimit: 46 callbacks suppressed
[  740.666436][ T9429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.712475][T13344] FAT-fs (loop4): Directory bread(block 1286) failed
[  740.719210][T13344] FAT-fs (loop4): Directory bread(block 1287) failed
[  740.789507][T13344] FAT-fs (loop4): Directory bread(block 1288) failed
[  741.420239][T13344] FAT-fs (loop4): Directory bread(block 1285) failed
[  741.427131][T13344] FAT-fs (loop4): Directory bread(block 1286) failed
[  741.434001][T13344] FAT-fs (loop4): Directory bread(block 1287) failed
[  741.440736][T13344] FAT-fs (loop4): Directory bread(block 1288) failed
[  741.457641][T13344] FAT-fs (loop4): Directory bread(block 1285) failed
[  741.464482][T13344] FAT-fs (loop4): Directory bread(block 1286) failed
[  741.737853][T13353] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2568'.
[  741.772855][   T13] 
[  741.775225][   T13] ======================================================
[  741.776546][T13368] AppArmor: unconfined exec no attachment
[  741.782227][   T13] WARNING: possible circular locking dependency detected
[  741.782247][   T13] syzkaller #0 Not tainted
[  741.782256][   T13] ------------------------------------------------------
[  741.782261][   T13] kworker/0:1/13 is trying to acquire lock:
[  741.812247][   T13] ffff8880251a9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  741.823298][   T13] 
[  741.823298][   T13] but task is already holding lock:
[  741.830660][   T13] ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  741.834156][T13366] kcov: kcov_start: t = ffff88801fa2d940, size = 524288, area = ffffc90003461000
[  741.839819][   T13] 
[  741.839819][   T13] which lock already depends on the new lock.
[  741.839819][   T13] 
[  741.849331][T13353] kcov: kcov_task_exit: t = ffff888046921dc0, kcov->t = ffff888046921dc0
[  741.859395][   T13] 
[  741.859395][   T13] the existing dependency chain (in reverse order) is:
[  741.859402][   T13] 
[  741.859402][   T13] -> #4 (
[  741.868144][T13370] kcov: kcov_start: t = ffff888044198000, size = 524288, area = ffffc9000f83e000
[  741.876784][   T13] rfkill_global_mutex
[  741.885440][T13371] kcov: kcov_start: t = ffff888072da9dc0, size = 524288, area = ffffc90010841000
[  741.890971][   T13] ){+.+.}-{3:3}:
[  741.907545][   T13]        __mutex_lock_common+0x1e5/0x2400
[  741.913267][   T13]        mutex_lock_nested+0x17/0x20
[  741.918551][   T13]        rfkill_register+0x2f/0x970
[  741.923756][   T13]        hci_register_dev+0x459/0x980
[  741.929212][   T13]        vhci_create_device+0x32e/0x5c0
[  741.934831][   T13]        vhci_write+0x389/0x440
[  741.938866][T13370] nci: nci_allocate_device: supported_protocols 0xde
[  741.939683][   T13]        vfs_write+0x748/0xd70
[  741.951080][   T13]        ksys_write+0x153/0x260
[  741.951642][T13366] IPv6-nf: payload len = 0
[  741.955928][   T13]        do_syscall_64+0x4c/0xa0
[  741.955949][   T13]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  741.955966][   T13] 
[  741.955966][   T13] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  741.979461][   T13]        __mutex_lock_common+0x1e5/0x2400
[  741.982770][T13366] nf_conntrack: can't find proto in pkt
[  741.985182][   T13]        mutex_lock_nested+0x17/0x20
[  741.985203][   T13]        vhci_send_frame+0x88/0x100
[  741.999021][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  742.001184][   T13]        hci_send_frame+0x1a9/0x2e0
[  742.012893][   T13]        hci_tx_work+0x9b5/0x16d0
[  742.013656][ T4173] tcp_in_window: START
[  742.017929][   T13]        process_one_work+0x867/0xff0
[  742.017950][   T13]        worker_thread+0xad7/0x12a0
[  742.017964][   T13]        kthread+0x42e/0x520
[  742.022030][ T4173] tcp_in_window: 
[  742.027370][   T13]        ret_from_fork+0x1f/0x30
[  742.027409][   T13] 
[  742.027409][   T13] -> #2
[  742.032588][ T4173] seq=3342799715 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342799987
[  742.037137][   T13]  ((work_completion)(&hdev->tx_work)
[  742.040742][ T4173] tcp_in_window: sender end=3342799715 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952782 maxend=3951313422 maxwin=3083392 scale=7
[  742.045651][   T13] ){+.+.}-{0:0}:
[  742.045663][   T13]        __flush_work+0x116/0x210
[  742.045679][   T13]        hci_dev_do_close+0x201/0x1020
[  742.050587][ T4173] tcp_in_window: 
[  742.059662][   T13]        hci_unregister_dev+0x2eb/0x590
[  742.059679][   T13]        vhci_release+0x73/0xc0
[  742.065032][ T4173] seq=3342799715 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342799987
[  742.079658][   T13]        __fput+0x212/0x8c0
[  742.079682][   T13]        task_work_run+0x125/0x1a0
[  742.083249][ T4173] tcp_in_window: sender end=3342799715 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952782 maxend=3951313422 maxwin=3083392 scale=7
[  742.088226][   T13]        do_exit+0x635/0x2110
[  742.093692][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  742.097266][   T13]        do_group_exit+0x12c/0x2f0
[  742.102801][ T4173] tcp_in_window: res=1 sender end=3342799987 maxend=3345883107 maxwin=1360640 receiver end=3949952782 maxend=3951313422 maxwin=3083392
[  742.107604][   T13]        get_signal+0x7eb/0x12e0
[  742.116703][ T4173] tcp_conntracks: 
[  742.121165][   T13]        arch_do_signal_or_restart+0xe6/0x12a0
[  742.126299][ T4173] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  742.140901][   T13]        exit_to_user_mode_loop+0x9e/0x130
[  742.155869][T13366] nf_conntrack: not prepared to track yet or error occurred
[  742.155932][   T13]        exit_to_user_mode_prepare+0xee/0x180
[  742.199388][T13366] kcov: kcov_task_exit: t = ffff88801fa2d940, kcov->t = ffff88801fa2d940
[  742.202852][   T13]        syscall_exit_to_user_mode+0x16/0x40
[  742.223255][   T13]        ret_from_fork+0x15/0x30
[  742.228198][   T13] 
[  742.228198][   T13] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  742.235846][   T13]        __mutex_lock_common+0x1e5/0x2400
[  742.241569][   T13]        mutex_lock_nested+0x17/0x20
[  742.246853][   T13]        bg_scan_update+0x44/0x3b0
[  742.252076][   T13]        process_one_work+0x867/0xff0
[  742.257450][   T13]        worker_thread+0xad7/0x12a0
[  742.259305][T13363] kcov: kcov_task_exit: t = ffff8880232cbb80, kcov->t = ffff8880232cbb80
[  742.262643][   T13]        kthread+0x42e/0x520
[  742.275615][   T13]        ret_from_fork+0x1f/0x30
[  742.280554][   T13] 
[  742.280554][   T13] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  742.290361][   T13]        __lock_acquire+0x2c66/0x7b50
[  742.295736][   T13]        lock_acquire+0x19e/0x400
[  742.300764][   T13]        __flush_work+0x116/0x210
[  742.305790][   T13]        __cancel_work_timer+0x3f4/0x560
[  742.311428][   T13]        hci_request_cancel_all+0xcc/0x300
[  742.317242][   T13]        hci_dev_do_close+0x4e/0x1020
[  742.322610][   T13]        hci_rfkill_set_block+0x101/0x180
[  742.328333][   T13]        rfkill_set_block+0x1c1/0x3c0
[  742.333708][   T13]        rfkill_epo+0x75/0x170
[  742.338473][   T13]        rfkill_op_handler+0x76/0x220
[  742.343845][   T13]        process_one_work+0x867/0xff0
[  742.349217][   T13]        worker_thread+0xad7/0x12a0
[  742.354411][   T13]        kthread+0x42e/0x520
[  742.359000][   T13]        ret_from_fork+0x1f/0x30
[  742.363945][   T13] 
[  742.363945][   T13] other info that might help us debug this:
[  742.363945][   T13] 
[  742.374167][   T13] Chain exists of:
[  742.374167][   T13]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  742.374167][   T13] 
[  742.390023][   T13]  Possible unsafe locking scenario:
[  742.390023][   T13] 
[  742.395167][T13369] kcov: kcov_start: t = ffff88801ee01dc0, size = 524288, area = ffffc90003c63000
[  742.397466][   T13]        CPU0                    CPU1
[  742.397472][   T13]        ----                    ----
[  742.417251][   T13]   lock(rfkill_global_mutex);
[  742.422021][   T13]                                lock(&data->open_mutex);
[  742.429128][   T13]                                lock(rfkill_global_mutex);
[  742.436414][   T13]   lock((work_completion)(&hdev->bg_scan_update));
[  742.439633][T13369] llcp: llcp_sock_create: ffff888047240000
[  742.442998][   T13] 
[  742.442998][   T13]  *** DEADLOCK ***
[  742.442998][   T13] 
[  742.443004][   T13] 3 locks held by kworker/0:1/13:
[  742.443015][   T13]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  742.443059][   T13]  #1: ffffc90000d27d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  742.443094][   T13]  #2: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  742.443134][   T13] 
[  742.443134][   T13] stack backtrace:
[  742.443139][   T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0
[  742.443155][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  742.443165][   T13] Workqueue: events rfkill_op_handler
[  742.443180][   T13] Call Trace:
[  742.443187][   T13]  <TASK>
[  742.443193][   T13]  dump_stack_lvl+0x188/0x250
[  742.443211][   T13]  ? load_image+0x410/0x410
[  742.443227][   T13]  ? show_regs_print_info+0x20/0x20
[  742.443253][   T13]  ? print_circular_bug+0x12b/0x1a0
[  742.443271][   T13]  check_noncircular+0x296/0x330
[  742.443289][   T13]  ? add_chain_block+0x9b0/0x9b0
[  742.443303][   T13]  ? lockdep_lock+0xf1/0x1f0
[  742.443322][   T13]  ? __lock_acquire+0x1305/0x7b50
[  742.443341][   T13]  ? mark_lock+0x94/0x320
[  742.443355][   T13]  ? _find_first_zero_bit+0xd1/0xf0
[  742.528211][ T4173] No more buffers in queue
[  742.531482][   T13]  __lock_acquire+0x2c66/0x7b50
[  742.535998][ T4173] eth0: xmit ffff888044a8cae8 42:01:0a:80:00:01
[  742.541144][   T13]  ? release_firmware_map_entry+0x190/0x190
[  742.546348][ T4173] Added buffer head 2 to ffff88814775a800
[  742.551223][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  742.551220][   T13]  ? verify_lock_unused+0x140/0x140
[  742.551247][   T13]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  742.556698][    C1] Sent skb ffff888044a8cae8
[  742.560730][   T13]  ? verify_lock_unused+0x140/0x140
[  742.565769][    C1] No more buffers in queue
[  742.570046][   T13]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  742.595238][T13362] llcp: llcp_sock_release: ffff888020830000
[  742.596535][   T13]  lock_acquire+0x19e/0x400
[  742.596561][   T13]  ? __flush_work+0xfa/0x210
[  742.602259][T13362] llcp: llcp_sock_destruct: ffff888020830000
[  742.609597][   T13]  ? __lock_acquire+0x7b50/0x7b50
[  742.609617][   T13]  ? read_lock_is_recursive+0x10/0x10
[  742.609633][   T13]  ? start_flush_work+0x784/0x830
[  742.638204][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  742.640958][   T13]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  742.648573][T13369] kcov: kcov_task_exit: t = ffff88801ee01dc0, kcov->t = ffff88801ee01dc0
[  742.651315][   T13]  __flush_work+0x116/0x210
[  742.656342][T13370] kobject: 'nfc2' (ffff88806234f018): kobject_cleanup, parent 0000000000000000
[  742.661861][   T13]  ? __flush_work+0xfa/0x210
[  742.661894][   T13]  ? flush_work+0x20/0x20
[  742.661907][   T13]  ? try_to_grab_pending+0xfb/0x820
[  742.661923][   T13]  ? mark_lock+0x94/0x320
[  742.667017][T13371] kcov: kcov_task_exit: t = ffff888072da9dc0, kcov->t = ffff888072da9dc0
[  742.672274][   T13]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  742.688400][T13370] kobject: 'nfc2' (ffff88806234f018): calling ktype release
[  742.689899][   T13]  ? lock_chain_count+0x20/0x20
[  742.698702][    C1] bridge0: hello timer expired
[  742.702776][   T13]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  742.702799][   T13]  ? _raw_spin_unlock+0x40/0x40
[  742.711810][    C1] bridge0: hello timer expired
[  742.716272][   T13]  ? __cancel_work_timer+0x36a/0x560
[  742.716292][   T13]  __cancel_work_timer+0x3f4/0x560
[  742.722680][ T4173] tcp_in_window: START
[  742.725768][   T13]  ? cancel_work_sync+0x20/0x20
[  742.730074][ T4173] tcp_in_window: 
[  742.738455][   T13]  ? remove_wait_queue+0x120/0x120
[  742.744495][ T4173] seq=3342799987 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342802803
[  742.751729][   T13]  ? __cancel_work+0x1f9/0x2e0
[  742.756571][ T4173] tcp_in_window: sender end=3342799987 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952782 maxend=3951313422 maxwin=3083392 scale=7
[  742.761289][   T13]  ? cancel_work+0x20/0x20
[  742.767255][ T4173] tcp_in_window: 
[  742.772062][   T13]  ? __rwlock_init+0x140/0x140
[  742.776809][ T4173] seq=3342799987 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342802803
[  742.782059][   T13]  hci_request_cancel_all+0xcc/0x300
[  742.787153][ T4173] tcp_in_window: sender end=3342799987 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952782 maxend=3951313422 maxwin=3083392 scale=7
[  742.791194][   T13]  hci_dev_do_close+0x4e/0x1020
[  742.796034][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  742.799621][   T13]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  742.804722][ T4173] tcp_in_window: res=1 sender end=3342802803 maxend=3345883107 maxwin=1360640 receiver end=3949952782 maxend=3951313422 maxwin=3083392
[  742.813782][   T13]  ? _raw_spin_unlock+0x40/0x40
[  742.813802][   T13]  hci_rfkill_set_block+0x101/0x180
[  742.818537][ T4173] tcp_conntracks: 
[  742.833175][   T13]  ? rcu_lock_release+0x20/0x20
[  742.833196][   T13]  rfkill_set_block+0x1c1/0x3c0
[  742.837587][ T4173] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  742.841194][   T13]  rfkill_epo+0x75/0x170
[  742.867381][T13370] nfc: nfc_release: dev_name=nfc2
[  742.874910][   T13]  rfkill_op_handler+0x76/0x220
[  742.874936][   T13]  process_one_work+0x867/0xff0
[  742.890243][T13370] kobject: 'nfc2': free name
[  742.890920][   T13]  ? worker_detach_from_pool+0x240/0x240
[  742.911512][T13381] kcov: kcov_start: t = ffff8880263c5940, size = 524288, area = ffffc9000ec3b000
[  742.914691][   T13]  ? lockdep_hardirqs_off+0x70/0x100
[  742.976678][   T13]  ? _raw_spin_lock_irq+0xb7/0xf0
[  742.981697][   T13]  ? _raw_spin_lock_irqsave+0x100/0x100
[  742.987226][   T13]  ? wq_worker_running+0x97/0x170
[  742.992231][   T13]  worker_thread+0xad7/0x12a0
[  742.996899][   T13]  kthread+0x42e/0x520
[  743.000948][   T13]  ? rcu_lock_release+0x20/0x20
[  743.005777][   T13]  ? kthread_blkcg+0xd0/0xd0
[  743.010348][   T13]  ret_from_fork+0x1f/0x30
[  743.014752][   T13]  </TASK>
[  743.017850][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  743.025302][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  743.032706][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  743.039650][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  743.042442][T13370] kcov: kcov_task_exit: t = ffff888044198000, kcov->t = ffff888044198000
[  743.046806][    C0] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5)
[  743.064322][T13381] kcov: kcov_task_exit: t = ffff8880263c5940, kcov->t = ffff8880263c5940
[  743.066579][    C0] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 20 attempts, giving up
[  743.077913][  T154] nf_conntrack: nf_ct_destroy(ffff888060bf1800)
[  743.086327][    C0] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  743.104129][    C0] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  743.104178][ T4173] No more buffers in queue
[  743.115652][    C0] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5)
[  743.120042][ T4173] eth0: xmit ffff888044a8cfe8 42:01:0a:80:00:01
[  743.131617][    C0] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 16)
[  743.137830][ T4173] Added buffer head 2 to ffff88814775a800
[  743.149441][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  743.149441][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  743.150167][T13342] sock ffff8880601b2400 sk ffff888020832000
[  743.155189][    C0] No more buffers in queue
[  743.155222][    C0] Receiving skb proto 0x0800 len 52 type 0
[  743.155253][    C0] Receiving skb proto 0x0800 len 52 type 0
[  743.155278][    C0] Receiving skb proto 0x0800 len 52 type 0
[  743.155424][    C1] Sent skb ffff888044a8cfe8
[  743.155433][    C0] Receiving skb proto 0x0800 len 40 type 0
[  743.155439][    C1] No more buffers in queue
[  743.155456][    C0] Receiving skb proto 0x0800 len 40 type 0
[  743.155474][    C0] No more buffers in queue
[  743.155512][    C0] tcp_in_window: START
[  743.155519][    C0] tcp_in_window: 
[  743.155526][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155545][    C0] tcp_in_window: sender end=3949952782 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155570][    C0] tcp_in_window: 
[  743.155577][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155597][    C0] tcp_in_window: sender end=3949952782 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155622][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  743.155635][    C0] tcp_in_window: res=1 sender end=3949952783 maxend=3951313422 maxwin=3083392 receiver end=3342802803 maxend=3345883107 maxwin=1360640
[  743.155654][    C0] tcp_conntracks: 
[  743.155661][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  743.155684][    C0] tcp_in_window: START
[  743.155692][    C0] tcp_in_window: 
[  743.155699][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155722][    C0] tcp_in_window: sender end=3949952783 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155748][    C0] tcp_in_window: 
[  743.155755][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155775][    C0] tcp_in_window: sender end=3949952783 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155793][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  743.155803][    C0] tcp_in_window: res=1 sender end=3949952783 maxend=3951313422 maxwin=3083392 receiver end=3342802803 maxend=3345883107 maxwin=1360640
[  743.155823][    C0] tcp_conntracks: 
[  743.155829][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[  743.155848][    C0] tcp_in_window: START
[  743.155855][    C0] tcp_in_window: 
[  743.155862][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155881][    C0] tcp_in_window: sender end=3949952783 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155906][    C0] tcp_in_window: 
[  743.155913][    C0] seq=3949952782 ack=3342799715+(0) sack=3342799715+(0) win=24089 end=3949952783
[  743.155933][    C0] tcp_in_window: sender end=3949952783 maxend=3951313422 maxwin=3083392 scale=7 receiver end=3342802803 maxend=3345883107 maxwin=1360640 scale=7
[  743.155958][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  743.155971][    C0] tcp_in_window: res=1 sender end=3949952783 maxend=3951313422 maxwin=3083392 receiver end=3342802803 maxend=3345883107 maxwin=1360640
[  743.155994][    C0] tcp_conntracks: 
[  743.156001][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[  743.156022][    C0] tcp_conntracks: 
[  743.156029][    C0] syn=0 ack=0 fin=0 rst=1 old=6 new=8
[  743.156047][    C0] tcp_conntracks: 
[  743.156052][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  743.156155][  T907] Added buffer head 0 to ffff888146bcba00
[  743.156222][    C0] virtqueue callback for ffff888146bcba00 (ffffffff84590320)
[  743.156413][    C0] No more buffers in queue
[  743.156424][    C0] No more buffers in queue
[  743.171573][T13383] AppArmor: unconfined exec no attachment
[  743.171887][ T3520] sd 0:0:1:0: cmd ffff888024256d28 CDB: 0x2a
[  743.177217][T13342] sock ffff8880601b6c00, sk ffff888020833000
[  743.181554][ T3520] Added buffer head 132 to ffff8881474b2e00
[  743.187374][T13342] parent ffff888020833000 state BT_CONNECTED
[  743.194180][ T4683] nf_conntrack: new packet for ffff88802a7cac00
[  743.198907][T13342] parent ffff888020833000
[  743.198912][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  743.198925][T13342] sock ffff8880601b6c00, sk ffff888020833000, how 2
[  743.198938][T13342] Handling sock shutdown
[  743.198937][    C1] sd 0:0:1:0: cmd ffff888024256d28 response 0 status 0x0 sense_len 0
[  743.198946][T13342] chan ffff888020834000 orig refcnt 3
[  743.198957][T13342] chan ffff888020834000 state BT_CONNECTED
[  743.198961][    C1] No more buffers in queue
[  743.198971][T13342] chan ffff888020834000 state BT_CONNECTED
[  743.203505][ T4683] nf_nat: Already setup manip DST for ct ffff88802a7cac00 (status bits 0x188)
[  743.209279][T13342] chan ffff888020834000, err 0, state BT_CONNECTED
[  743.209293][T13342] chan ffff888020834000 state BT_CONNECTED
[  743.209308][T13342] chan ffff888020834000 orig refcnt 4
[  743.213722][ T4683] nf_nat: Already setup manip SRC for ct ffff88802a7cac00 (status bits 0x188)
[  743.219497][T13342] hcon ffff88807b640000 orig refcnt 2
[  743.225570][ T4283] nf_conntrack: new packet for ffff88802a7cad80
[  743.227954][T13342] chan ffff888020834000 orig refcnt 3
[  743.231569][ T4283] nf_nat: Already setup manip DST for ct ffff88802a7cad80 (status bits 0x188)
[  743.240670][T13342] Sock shutdown complete err: 0
[  743.255338][ T4283] nf_nat: Already setup manip SRC for ct ffff88802a7cad80 (status bits 0x188)
[  743.258950][T13342] chan ffff888020834000 orig refcnt 2
[  743.268968][ T4275] nf_conntrack: normal packet for ffff88807c20bc80
[  743.282775][T13342] sk ffff888020833000 state BT_CLOSED
[  743.282789][T13342] chan ffff888020834000 orig refcnt 3
[  743.288606][ T4329] nf_conntrack: new packet for ffff88802a7ca600
[  743.301847][T13342] sk ffff888020833000
[  743.305566][ T4329] nf_nat: Already setup manip DST for ct ffff88802a7ca600 (status bits 0x188)
[  743.310901][T13342] chan ffff888020834000 orig refcnt 2
[  743.314979][ T4329] nf_nat: Already setup manip SRC for ct ffff88802a7ca600 (status bits 0x188)
[  743.318620][T13342] chan ffff888020834000 orig refcnt 1
[  743.328352][ T4408] nf_conntrack: normal packet for ffff88802a7cbb00
[  743.342352][T13342] chan ffff888020834000
[  743.343234][   T13] hci1: cancelling interleave scan
[  743.346309][T13344] kcov: kcov_task_exit: t = ffff88802c9c5940, kcov->t = ffff88802c9c5940
[  743.355537][T13359] kcov: kcov_task_exit: t = ffff88802caf1dc0, kcov->t = ffff88802caf1dc0
[  743.440279][   T13] kobject: 'rfkill6' (ffff8881481fb108): kobject_uevent_env
[  743.455774][T13384] kcov: kcov_start: t = ffff888022f80000, size = 524288, area = ffffc90005239000
[  743.458011][T13385] kcov: kcov_start: t = ffff888029cad940, size = 524288, area = ffffc9000e83a000
[  743.463573][  T263] sd 0:0:1:0: cmd ffff888022f28128 CDB: 0x35
[  743.476744][   T13] kobject: 'rfkill6' (ffff8881481fb108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6'
[  743.478337][   T13] ffff888076934000 name hci2 blocked 1
[  743.480714][  T263] Added buffer head 132 to ffff8881474b2e00
[  743.486106][   T13] hci2 ffff888076934000
[  743.489887][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  743.501035][T13384] sctp: sctp_init_sock: sk:ffff88807d6a1b00
[  743.504165][    C1] sd 0:0:1:0: cmd ffff888022f28128 response 0 status 0x0 sense_len 0
[  743.504187][    C1] No more buffers in queue
[  743.505455][ T9436] nf_conntrack: normal packet for ffff88802a7cbc80
[  743.514205][T13384] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1699
[  743.517654][  T263] sd 0:0:1:0: cmd ffff888024257128 CDB: 0x2a
[  743.523973][   T13] hci2: err 0x13
[  743.526297][  T263] Added buffer head 132 to ffff8881474b2e00
[  743.531972][   T13] hci2: cancelling interleave scan
[  743.558827][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  743.563122][T13384] device: 'input147': device_add
[  743.566656][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  743.580859][T13387] AppArmor: unconfined exec no attachment
[  743.584778][    C1] sd 0:0:1:0: cmd ffff888024257128 response 0 status 0x0 sense_len 0
[  743.584798][    C1] No more buffers in queue
[  743.590730][  T263] sd 0:0:1:0: cmd ffff888022f28128 CDB: 0x35
[  743.597213][T13384] kobject: 'input147' (ffff888023d882f0): kobject_add_internal: parent: 'input', set: 'devices'
[  743.598424][  T263] Added buffer head 132 to ffff8881474b2e00
[  743.604588][T13384] input input147: No ACPI support
[  743.608759][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  743.971995][    C1] sd 0:0:1:0: cmd ffff888022f28128 response 0 status 0x0 sense_len 0
[  743.980047][    C1] No more buffers in queue
[  743.984815][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  743.991507][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  743.992708][T13388] kcov: kcov_start: t = ffff888027cc5940, size = 524288, area = ffffc90011043000
[  743.998836][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  744.009375][ T4173] tcp_in_window: START
[  744.014562][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  744.018626][ T4173] tcp_in_window: 
[  744.025283][ T4173] seq=3342802803 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342805619
[  744.025463][    C1] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  744.028911][ T4173] tcp_in_window: sender end=3342802803 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.050893][T13384] PM: Adding info for No Bus:input147
[  744.064243][ T4173] tcp_in_window: 
[  744.064257][ T4173] seq=3342802803 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342805619
[  744.064278][ T4173] tcp_in_window: sender end=3342802803 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.064299][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  744.064313][ T4173] tcp_in_window: res=1 sender end=3342805619 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313422 maxwin=3083392
[  744.064336][ T4173] tcp_conntracks: 
[  744.064343][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  744.073046][ T4683] nf_conntrack: new packet for ffff88807652dc80
[  744.073729][T13384] kobject: 'input147' (ffff888023d882f0): kobject_uevent_env
[  744.083998][ T4683] nf_nat: Already setup manip DST for ct ffff88807652dc80 (status bits 0x188)
[  744.099142][T13384] kobject: 'input147' (ffff888023d882f0): fill_kobj_path: path = '/devices/virtual/input/input147'
[  744.104141][ T4683] nf_nat: Already setup manip SRC for ct ffff88807652dc80 (status bits 0x188)
[  744.118956][T13384] kobject: 'input147' (ffff888023d882f0): fill_kobj_path: path = '/devices/virtual/input/input147'
[  744.152161][T13385] kcov: kcov_task_exit: t = ffff888029cad940, kcov->t = ffff888029cad940
[  744.160911][T13384] input: syz0 as /devices/virtual/input/input147
[  744.172107][   T13] hci2 state 0 -> 0
[  744.181473][T13389] AppArmor: unconfined exec no attachment
[  744.190605][   T13] All LE pending actions cleared
[  744.196757][T13384] device: 'event5': device_add
[  744.199627][   T13] hdev hci2
[  744.205056][T13388] kcov: kcov_task_exit: t = ffff888027cc5940, kcov->t = ffff888027cc5940
[  744.212643][T13384] kobject: 'event5' (ffff888061d7c138): kobject_add_internal: parent: 'input147', set: 'devices'
[  744.215145][   T13] hcon ffff8880197da000 reason 22
[  744.217903][T13384] input event5: No ACPI support
[  744.227720][   T13] hcon ffff8880197da000 conn ffff888019bbd800, err 103
[  744.243995][T13384] PM: Adding info for No Bus:event5
[  744.248863][ T4173] No more buffers in queue
[  744.255501][T13391] AppArmor: unconfined exec no attachment
[  744.258798][ T4173] eth0: xmit ffff88802c84afe8 42:01:0a:80:00:01
[  744.263351][   T23] send_to_group: group=ffff8881449f9000 mask=100 marks_mask=8002304 marks_ignore_mask=0 data=ffff8880603e7780 data_type=3 dir=ffff888025e98760 cookie=0
[  744.268895][ T4173] Added buffer head 13 to ffff88814775a600
[  744.275131][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  744.275154][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  744.282377][   T23] inotify_handle_inode_event: group=ffff8881449f9000 mark=ffff88802b89b000 mask=100
[  744.290503][    C0] Sent skb ffff88802c84afe8
[  744.310691][ T3851] Deleting a9feffff/32 tos=0 t=ffff88802b9b7330
[  744.310957][    C0] No more buffers in queue
[  744.322083][   T23] fsnotify_insert_event: group=ffff8881449f9000 event=ffff8880210b2080
[  744.324902][    C0] Receiving skb proto 0x0800 len 40 type 0
[  744.331187][ T3543] get_one_event: group=ffff8881449f9000 event=ffff8880210b2080
[  744.335522][    C0] No more buffers in queue
[  744.344024][ T3543] fsnotify_remove_first_event: group=ffff8881449f9000 event=ffff8880210b2080
[  744.349580][    C0] tcp_conntracks: 
[  744.358272][ T3851] Deleting a9feffff/32 tos=0 t=ffff88802b9b7330
[  744.361488][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  744.370281][   T23] send_to_group: group=ffff8881449f9000 mask=8000004 marks_mask=8002304 marks_ignore_mask=0 data=ffff8880603e7780 data_type=3 dir=ffff888025e98760 cookie=0
[  744.374699][    C0] No more buffers in queue
[  744.380872][ T3851] Deleting a9feb967/32 tos=0 t=ffff88802b9b7330
[  744.389477][   T13] hci2 hcon ffff8880197da000 chan ffff88801bd84700
[  744.401770][   T23] inotify_handle_inode_event: group=ffff8881449f9000 mark=ffff88802b89b000 mask=8000004
[  744.406575][ T1112] Added buffer head 0 to ffff88801ef45b00
[  744.414743][ T3543] inotify_read: group=ffff8881449f9000 kevent=ffff8880210b2080
[  744.419209][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  744.428765][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  744.434328][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  744.441872][   T23] fsnotify_insert_event: group=ffff8881449f9000 event=ffff8880210b2100
[  744.449192][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  744.454739][ T4267] nf_conntrack: normal packet for ffff88807c20aa80
[  744.457313][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:169.254.185.103 in wq:ffffffff966b5cd8
[  744.462860][ T4237] nfc: nfc_urelease_event_work: portid 1699
[  744.472374][ T3543] copy_event_to_user: group=ffff8881449f9000 event=ffff8880210b2080
[  744.478648][ T1112] nf_conntrack: normal packet for ffff88807834b380
[  744.489304][ T3851] Deleting a9fe0000/16 tos=0 t=ffff88802b9b7330
[  744.495252][ T4267] Added buffer head 0 to ffff88801ef45b00
[  744.500843][ T4173] tcp_in_window: START
[  744.509365][ T4237] nf_conntrack: normal packet for ffff88807c20ad80
[  744.515325][ T4173] tcp_in_window: 
[  744.522568][ T3543] get_one_event: group=ffff8881449f9000 event=ffff8880210b2100
[  744.527265][ T4173] seq=3342805619 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342808435
[  744.531295][ T3543] fsnotify_remove_first_event: group=ffff8881449f9000 event=ffff8880210b2100
[  744.531300][    C1] virtqueue callback for ffff88814775a700 (ffffffff85491a80)
[  744.531311][ T3543] inotify_read: group=ffff8881449f9000 kevent=ffff8880210b2100
[  744.531324][ T3543] copy_event_to_user: group=ffff8881449f9000 event=ffff8880210b2100
[  744.537823][ T4173] tcp_in_window: sender end=3342805619 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.537848][ T4173] tcp_in_window: 
[  744.537836][    C0] wireguard: wg0: Handshake for peer 37 (224.0.0.1:20000) did not complete after 5 seconds, retrying (try 2)
[  744.537854][ T4173] seq=3342805619 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342808435
[  744.537873][ T4173] tcp_in_window: sender end=3342805619 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.537894][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  744.537906][ T4173] tcp_in_window: res=1 sender end=3342808435 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313422 maxwin=3083392
[  744.537926][ T4173] tcp_conntracks: 
[  744.537932][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  744.538299][    C1] No more buffers in queue
[  744.544075][ T3543] inotify_read: group=ffff8881449f9000 kevent=0000000000000000
[  744.549206][    C1] Receiving skb proto 0x0806 len 28 type 1
[  744.560057][T13384] kobject: 'event5' (ffff888061d7c138): kobject_uevent_env
[  744.567032][    C1] No more buffers in queue
[  744.567172][    C1] No more buffers in queue
[  744.576279][ T3543] input input147: flushing now
[  744.582045][    C1] eth0: xmit ffff88802a915000 42:01:0a:80:00:01
[  744.582067][    C1] Added buffer head 2 to ffff88814775a800
[  744.582116][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  744.583130][ T4233] nf_conntrack: normal packet for ffff88802a7cbc80
[  744.590611][ T1112] nf_conntrack: normal packet for ffff88807c20b080
[  744.605323][    C1] Sent skb ffff88802a915000
[  744.609153][ T4237] nf_conntrack: normal packet for ffff88807652d500
[  744.620138][    C1] No more buffers in queue
[  744.631221][T13384] kobject: 'event5' (ffff888061d7c138): fill_kobj_path: path = '/devices/virtual/input/input147/event5'
[  744.645732][T13392] AppArmor: unconfined exec no attachment
[  744.651272][  T154] kernfs bonding_masters: removing
[  744.673459][ T4173] No more buffers in queue
[  744.680722][T13384] kcov: kcov_task_exit: t = ffff888022f80000, kcov->t = ffff888022f80000
[  744.684616][ T4173] eth0: xmit ffff88802c84b268 42:01:0a:80:00:01
[  744.698919][T13384] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1699
[  744.702034][ T4173] Added buffer head 2 to ffff88814775a800
[  744.702073][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  744.706483][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  744.711490][    C1] bridge0: hello timer expired
[  744.719058][    C0] No more buffers in queue
[  744.723340][    C1] bridge0: hello timer expired
[  744.730634][    C0] Receiving skb proto 0x0800 len 40 type 0
[  744.741625][    C1] Sent skb ffff88802c84b268
[  744.743610][    C0] No more buffers in queue
[  744.748096][    C1] No more buffers in queue
[  744.754649][    C0] tcp_conntracks: 
[  744.761621][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  744.770114][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  744.771372][  T154] kobject: 'nfs_client' (ffff8880252c4780): kobject_uevent_env
[  744.776744][ T4173] tcp_in_window: START
[  744.785711][   T13] hci2 hcon ffff8880197da000 handle 201
[  744.793981][ T4173] tcp_in_window: 
[  744.801537][ T6840] input input147: flushing now
[  744.808021][ T4173] seq=3342808435 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342811251
[  744.822171][  T154] kobject: 'nfs_client' (ffff8880252c4780): fill_kobj_path: path = '/fs/nfs/net/nfs_client'
[  744.828468][ T4173] tcp_in_window: sender end=3342808435 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.833592][   T13] hcon ffff8880197da000
[  744.837654][ T4173] tcp_in_window: 
[  744.842764][T13384] kernfs runtime_status: removing
[  744.848211][ T4173] seq=3342808435 ack=3949952782+(0) sack=3949952782+(0) win=10630 end=3342811251
[  744.848234][ T4173] tcp_in_window: sender end=3342808435 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  744.853189][ T4237] nfc: nfc_urelease_event_work: portid 1699
[  744.857137][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  744.861589][  T154] kernfs nfs_client: removing
[  744.865264][ T4173] tcp_in_window: res=1 sender end=3342811251 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313422 maxwin=3083392
[  744.872006][  T154] kobject: 'nfs_client' (ffff8880252c4780): kobject_cleanup, parent 0000000000000000
[  744.877113][ T4173] tcp_conntracks: 
[  744.877122][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  744.884745][T13384] kernfs control: removing
[  744.897180][ T4173] No more buffers in queue
[  744.898973][  T154] kobject: 'nfs_client' (ffff8880252c4780): calling ktype release
[  744.902651][ T4173] eth0: xmit ffff88802c84a0e8 42:01:0a:80:00:01
[  744.902672][ T4173] Added buffer head 2 to ffff88814775a800
[  744.911758][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  744.911773][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  744.921952][    C1] Sent skb ffff88802c84a0e8
[  744.937119][T13384] kernfs runtime_suspended_time: removing
[  744.940697][    C1] No more buffers in queue
[  744.944504][T13384] kernfs runtime_active_time: removing
[  744.949641][T13395] AppArmor: unconfined exec no attachment
[  744.958842][    C0] No more buffers in queue
[  744.982600][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff966b5cd8 is addr:169.254.185.103 for cmd:2 at entry:ffff888021a80000
[  744.984338][    C0] Receiving skb proto 0x0800 len 40 type 0
[  744.989333][ T3543] input input147: flushing now
[  745.002744][    C0] No more buffers in queue
[  745.002778][    C0] tcp_conntracks: 
[  745.002786][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  745.005960][   T13] hci2: conn ffff8880197da000
[  745.014279][ T4283] sd 0:0:1:0: cmd ffff888024257528 CDB: 0x2a
[  745.018088][   T13] device: 'hci2:201': device_unregister
[  745.021654][ T4283] Added buffer head 132 to ffff8881474b2e00
[  745.026296][   T13] kernfs runtime_status: removing
[  745.032104][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  745.038847][T13384] kernfs autosuspend_delay_ms: removing
[  745.046316][  T154] kobject: 'nfs_client': free name
[  745.051000][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  745.065631][ T4283] sd 0:0:1:0: cmd ffff888024257928 CDB: 0x2a
[  745.070923][   T13] kernfs control: removing
[  745.075810][ T4283] Added buffer head 233 to ffff8881474b2e00
[  745.083413][ T4188] kernfs backing_file: removing
[  745.085451][ T4283] sd 0:0:1:0: cmd ffff888024257d28 CDB: 0x2a
[  745.105180][T13384] kernfs power: removing
[  745.109931][ T4283] Added buffer head 205 to ffff8881474b2e00
[  745.116469][T13397] AppArmor: unconfined exec no attachment
[  745.120125][ T4283] sd 0:0:1:0: cmd ffff888024258128 CDB: 0x2a
[  745.124777][   T13] kernfs runtime_suspended_time: removing
[  745.128177][ T4283] Added buffer head 32 to ffff8881474b2e00
[  745.129263][ T4173] tcp_in_window: START
[  745.134122][ T4188] kernfs offset: removing
[  745.138257][ T4173] tcp_in_window: 
[  745.144292][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  745.144323][    C1] sd 0:0:1:0: cmd ffff888024258128 response 0 status 0x0 sense_len 0
[  745.144349][    C1] sd 0:0:1:0: cmd ffff888024257d28 response 0 status 0x0 sense_len 0
[  745.144365][    C1] No more buffers in queue
[  745.149919][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  745.149951][    C1] sd 0:0:1:0: cmd ffff888024257528 response 0 status 0x0 sense_len 0
[  745.149980][    C1] No more buffers in queue
[  745.152824][   T23] send_to_group: group=ffff8881449f9000 mask=8000004 marks_mask=8002304 marks_ignore_mask=0 data=ffff8880603e7780 data_type=3 dir=ffff888025e98760 cookie=0
[  745.155909][ T4173] seq=3342811251 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  745.160909][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  745.160934][    C1] sd 0:0:1:0: cmd ffff888024257928 response 0 status 0x0 sense_len 0
[  745.160953][    C1] No more buffers in queue
[  745.161321][   T13] kernfs runtime_active_time: removing
[  745.167487][ T4173] tcp_in_window: sender end=3342811251 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  745.173241][   T23] inotify_handle_inode_event: group=ffff8881449f9000 mark=ffff88802b89b000 mask=8000004
[  745.178125][ T4173] tcp_in_window: 
[  745.194483][ T4188] kernfs sizelimit: removing
[  745.196763][ T4173] seq=3342811251 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  745.205742][   T13] kernfs autosuspend_delay_ms: removing
[  745.207493][ T4173] tcp_in_window: sender end=3342811251 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313422 maxwin=3083392 scale=7
[  745.214456][   T23] fsnotify_insert_event: group=ffff8881449f9000 event=ffff88804adf8080
[  745.217718][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  745.226834][ T4188] kernfs autoclear: removing
[  745.229357][ T4173] tcp_in_window: res=1 sender end=3342812659 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313423 maxwin=3083392
[  745.243857][   T13] kernfs power: removing
[  745.246904][ T4173] tcp_conntracks: 
[  745.252615][   T13] kernfs device: removing
[  745.255382][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  745.259280][   T23] send_to_group: group=ffff8881449f9000 mask=200 marks_mask=8002304 marks_ignore_mask=0 data=ffff888067ab8760 data_type=2 dir=ffff888025e98760 cookie=0
[  745.296081][ T4173] No more buffers in queue
[  745.306241][ T4188] kernfs partscan: removing
[  745.306912][ T4173] eth0: xmit ffff88802c84a5e8 42:01:0a:80:00:01
[  745.324583][   T13] kernfs subsystem: removing
[  745.331644][ T4173] Added buffer head 2 to ffff88814775a800
[  745.339033][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  745.339040][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  745.339913][    C0] No more buffers in queue
[  745.347632][    C1] Sent skb ffff88802c84a5e8
[  745.351761][    C0] Receiving skb proto 0x0800 len 40 type 0
[  745.357192][    C1] No more buffers in queue
[  745.372000][    C0] No more buffers in queue
[  745.386404][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  745.389990][    C0] tcp_conntracks: 
[  745.419310][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  745.419353][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  745.419359][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  745.578909][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  745.584288][ T4173] tcp_in_window: START
[  745.587015][ T4188] kernfs dio: removing
[  745.588348][ T4173] tcp_in_window: 
[  745.592506][ T4173] seq=3342812659 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  745.592520][ T4188] kernfs loop: removing
[  745.592540][ T4188] kobject: 'loop4' (ffff8880170e0040): kobject_uevent_env
[  745.596139][ T4173] tcp_in_window: sender end=3342812659 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313423 maxwin=3083392 scale=7
[  745.605320][   T13] kernfs hci2:201: removing
[  745.609362][ T4173] tcp_in_window: 
[  745.616534][   T13] kernfs uevent: removing
[  745.631117][ T4173] seq=3342812659 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  745.635724][ T4188] kobject: 'loop4' (ffff8880170e0040): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  745.639223][ T4173] tcp_in_window: sender end=3342812659 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313423 maxwin=3083392 scale=7
[  745.643596][   T23] inotify_handle_inode_event: group=ffff8881449f9000 mark=ffff88802b89b000 mask=200
[  745.652645][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  745.652661][ T4173] tcp_in_window: res=1 sender end=3342812659 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313423 maxwin=3083392
[  745.662980][ T4188] kobject: 'loop4' (ffff8880170e0040): kobject_uevent_env
[  745.677454][ T4173] tcp_conntracks: 
[  745.677465][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  745.686890][   T13] PM: Removing info for No Bus:hci2:201
[  745.692440][    C1] net_ratelimit: 42 callbacks suppressed
[  745.692451][    C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0)
[  745.705986][   T23] fsnotify_insert_event: group=ffff8881449f9000 event=ffff88804adf8600
[  745.715175][ T9429] nf_conntrack: normal packet for ffff88802a7cbc80
[  745.717917][ T4188] kobject: 'loop4' (ffff8880170e0040): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  745.722671][T13400] AppArmor: unconfined exec no attachment
[  745.729100][T13384] kernfs 13:69: removing
[  745.742379][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  745.750009][   T13] kobject: 'hci2:201' (ffff8880197da420): kobject_uevent_env
[  745.756173][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  745.772826][ T6691] inotify_handle_inode_event: group=ffff8881449fb800 mark=ffff888075709ed8 mask=8000
[  745.776254][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  745.782996][T13384] kernfs dev: removing
[  745.790243][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  745.793113][ T4173] No more buffers in queue
[  745.797196][   T13] kobject: 'hci2:201' (ffff8880197da420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201'
[  745.806369][ T4173] eth0: xmit ffff88807f6f73c0 42:01:0a:80:00:01
[  745.806389][ T4173] Added buffer head 2 to ffff88814775a800
[  745.813157][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  745.813157][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  745.813641][ T6691] fsnotify_insert_event: group=ffff8881449fb800 event=ffff888024e359c0
[  745.817527][    C1] Sent skb ffff88807f6f73c0
[  745.824541][ T4237] Added buffer head 0 to ffff88801ef45b00
[  745.828325][    C1] No more buffers in queue
[  745.840331][    C0] wireguard: wg2: Handshake for peer 35 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9)
[  745.852234][ T3558] get_one_event: group=ffff8881449fb800 event=ffff888024e359c0
[  745.859103][    C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7)
[  745.866463][ T3558] fsnotify_remove_first_event: group=ffff8881449fb800 event=ffff888024e359c0
[  745.874758][    C0] No more buffers in queue
[  745.882233][ T4283] wireguard: wg2: Sending handshake initiation to peer 35 ([::1]:20001/0%0)
[  745.884906][    C0] Receiving skb proto 0x0800 len 40 type 0
[  745.889603][ T4283] wireguard: wg1: Sending handshake initiation to peer 4 (127.0.0.1:20003)
[  745.900827][    C0] No more buffers in queue
[  745.912509][ T3543] get_one_event: group=ffff8881449f9000 event=ffff88804adf8080
[  745.919828][    C0] tcp_conntracks: 
[  745.928545][ T3543] fsnotify_remove_first_event: group=ffff8881449f9000 event=ffff88804adf8080
[  745.928828][ T4173] nf_conntrack: normal packet for ffff88807652c000
[  745.932966][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  745.933474][    C0] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0)
[  745.943705][ T4173] tcp_in_window: START
[  745.951874][   T13] kernfs hci2:201: removing
[  745.956321][ T4173] tcp_in_window: 
[  745.963637][T13384] kernfs device: removing
[  745.968253][ T4173] seq=3342812659 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  745.971960][T13384] kernfs subsystem: removing
[  745.980677][ T4173] tcp_in_window: sender end=3342812659 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313423 maxwin=3083392 scale=7
[  745.990843][ T4283] nf_conntrack: normal packet for ffff88807c20ac00
[  745.992532][ T4173] tcp_in_window: 
[  745.992541][ T4173] seq=3342812659 ack=3949952783+(0) sack=3949952783+(0) win=10630 end=3342812659
[  746.001182][ T3558] inotify_read: group=ffff8881449fb800 kevent=ffff888024e359c0
[  746.005157][ T4173] tcp_in_window: sender end=3342812659 maxend=3345883107 maxwin=1360640 scale=7 receiver end=3949952783 maxend=3951313423 maxwin=3083392 scale=7
[  746.009665][   T13] kobject: 'hci2:201' (ffff8880197da420): kobject_cleanup, parent 0000000000000000
[  746.013249][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1
[  746.017594][T13384] kernfs event5: removing
[  746.026656][ T4173] tcp_in_window: res=1 sender end=3342812659 maxend=3345883107 maxwin=1360640 receiver end=3949952783 maxend=3951313423 maxwin=3083392
[  746.031228][   T13] kobject: 'hci2:201' (ffff8880197da420): calling ktype release
[  746.045864][ T4173] tcp_conntracks: 
[  746.052361][ T3558] copy_event_to_user: group=ffff8881449fb800 event=ffff888024e359c0
[  746.055959][ T4173] syn=0 ack=1 fin=0 rst=0 old=8 new=8
[  746.065105][T13384] kernfs uevent: removing
[  746.079175][ T3543] inotify_read: group=ffff8881449f9000 kevent=ffff88804adf8080
[  746.088568][ T3558] inotify_read: group=ffff8881449fb800 kevent=0000000000000000
[  746.097272][ T3543] copy_event_to_user: group=ffff8881449f9000 event=ffff88804adf8080
[  746.112415][   T13] kobject: 'hci2:201': free name
[  746.121133][ T3543] get_one_event: group=ffff8881449f9000 event=ffff88804adf8600
[  746.133653][T13384] PM: Removing info for No Bus:event5
[  746.140012][ T3543] fsnotify_remove_first_event: group=ffff8881449f9000 event=ffff88804adf8600
[  746.145071][   T13] hci2 orig refcnt 10
[  746.150304][ T6840] inotify_handle_inode_event: group=ffff8881449fb800 mark=ffff88802b89baf0 mask=8000
[  746.156907][T13384] kobject: 'event5' (ffff888061d7c138): kobject_uevent_env
[  746.166547][ T6840] fsnotify_insert_event: group=ffff8881449fb800 event=ffff888044382540
[  746.172741][   T13] hcon ffff88802c7d6000 reason 22
[  746.179879][ T3543] inotify_read: group=ffff8881449f9000 kevent=ffff88804adf8600
[  746.185206][ T3558] get_one_event: group=ffff8881449fb800 event=ffff888044382540
[  746.185226][ T3558] fsnotify_remove_first_event: group=ffff8881449fb800 event=ffff888044382540
[  746.193602][ T3543] copy_event_to_user: group=ffff8881449f9000 event=ffff88804adf8600
[  746.212389][ T3558] inotify_read: group=ffff8881449fb800 kevent=ffff888044382540
[  746.213238][ T3543] inotify_read: group=ffff8881449f9000 kevent=0000000000000000
[  746.220318][ T3558] copy_event_to_user: group=ffff8881449fb800 event=ffff888044382540
[  746.220343][ T3558] inotify_read: group=ffff8881449fb800 kevent=0000000000000000
[  746.220812][T13384] kobject: 'event5' (ffff888061d7c138): fill_kobj_path: path = '/devices/virtual/input/input147/event5'
[  746.229486][ T4173] No more buffers in queue
[  746.233787][   T13] hcon ffff88802c7d6000 conn ffff888019bbd000, err 103
[  746.241309][ T4173] eth0: xmit ffff8880197d38c0 42:01:0a:80:00:01
[  746.263678][T13384] kernfs event5: removing
[  746.265630][ T4173] Added buffer head 2 to ffff88814775a800
[  746.273157][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  746.273157][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  746.273933][    C0] No more buffers in queue
[  746.280940][    C1] Sent skb ffff8880197d38c0
[  746.288698][    C0] Receiving skb proto 0x0800 len 40 type 0
[  746.296302][    C1] No more buffers in queue
[  746.307410][    C0] No more buffers in queue
[  746.312998][    C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0)
[  746.318692][    C0] tcp_conntracks: 
[  746.330119][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.334910][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  746.364395][T10706] uart_close(3) called
[  746.382269][ T5146] uart_close(3) called
[  746.385619][ T4172] tcp_in_window: START
[  746.399864][ T7119] uart_close(3) called
[  746.403052][ T4172] tcp_in_window: 
[  746.403060][ T4172] seq=1291177882 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291177998
[  746.413270][ T7519] uart_close(3) called
[  746.415250][ T4172] tcp_in_window: sender end=1291177882 maxend=1291242010 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  746.427795][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  746.427849][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  746.427861][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  746.431191][ T8287] uart_close(3) called
[  746.431934][ T4172] tcp_in_window: 
[  746.452939][T10707] uart_close(3) called
[  746.453656][ T4172] seq=1291177882 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291177998
[  746.462362][    C1] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12)
[  746.467494][ T4172] tcp_in_window: sender end=1291177882 maxend=1291242010 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  746.471554][    C1] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  746.475138][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  746.483920][T11647] uart_close(3) called
[  746.488123][ T4172] tcp_in_window: res=1 sender end=1291177998 maxend=1291242010 maxwin=64768 receiver end=3066462912 maxend=3066527040 maxwin=65408
[  746.509718][ T5541] uart_close(3) called
[  746.514037][ T4172] tcp_conntracks: 
[  746.514047][ T4172] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  746.582661][ T4283] wireguard: wg1: Sending handshake initiation to peer 34 (127.0.0.1:20003)
[  746.591652][ T4283] nf_conntrack: normal packet for ffff88802a7cbe00
[  746.598308][ T4329] wireguard: wg0: Sending handshake initiation to peer 26 ([::1]:20003/0%0)
[  746.609822][   T13] hci2 hcon ffff88802c7d6000 chan ffff88801bd84800
[  746.617450][ T4329] nf_conntrack: new packet for ffff88807c20af00
[  746.623733][ T4329] nf_nat: Already setup manip DST for ct ffff88807c20af00 (status bits 0x188)
[  746.632626][ T4329] nf_nat: Already setup manip SRC for ct ffff88807c20af00 (status bits 0x188)
[  746.673595][ T4237] Added buffer head 0 to ffff88801ef45b00
[  746.679512][T13384] kobject: '(null)' (ffff888061d7c670): kobject_cleanup, parent ffff888061d7c138
[  746.692600][    C1] bridge0: hello timer expired
[  746.697499][    C1] bridge0: hello timer expired
[  746.697731][T13405] profile_transition: 3 callbacks suppressed
[  746.697743][T13405] AppArmor: unconfined exec no attachment
[  746.708281][T13384] kobject: '(null)' (ffff888061d7c670): calling ktype release
[  746.721863][ T4182] kcov: kcov_task_exit: t = ffff88807a385940, kcov->t = ffff88807a385940
[  746.721860][ T4183] kcov: kcov_task_exit: t = ffff888077dd8000, kcov->t = ffff888077dd8000
[  746.729925][ T4184] kcov: kcov_task_exit: t = ffff888077dd9dc0, kcov->t = ffff888077dd9dc0
[  746.747271][ T5986] kcov: kcov_task_exit: t = ffff88802caf0000, kcov->t = ffff88802caf0000
[  746.770882][ T4185] kcov: kcov_task_exit: t = ffff88801a593b80, kcov->t = ffff88801a593b80
[  746.829416][    C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0)
[  746.838562][T13408] AppArmor: unconfined exec no attachment
[  746.838857][ T4233] nf_conntrack: normal packet for ffff88802a7cbc80
[  746.866041][ T9462] ffff88807a36c000 name hci0 bus 0
[  746.912429][    C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0)
[  746.921236][ T9462] hci0 ffff88807a36c000
[  746.923112][T13410] AppArmor: unconfined exec no attachment
[  746.933353][ T9462] hci0: err 0x13
[  746.952423][ T5787] uart_close(3) called
[  746.956579][ T7612] uart_close(3) called
[  746.960678][T11212] uart_close(3) called
[  746.966058][T12141] uart_close(3) called
[  746.970182][ T4448] uart_close(3) called
[  746.974479][T11770] uart_close(3) called
[  746.979363][ T4519] uart_close(3) called
[  746.983875][ T9705] uart_close(3) called
[  746.988187][ T9889] uart_close(3) called
[  746.992540][    C0] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  746.992732][T10303] uart_close(3) called
[  747.005663][ T4283] nf_conntrack: normal packet for ffff88802a7cb200
[  747.008632][ T5263] uart_close(3) called
[  747.034575][ T9462] hci0: cancelling interleave scan
[  747.039955][ T9462] hci0 state 0 -> 0
[  747.048095][ T8354] uart_close(3) called
[  747.052248][ T7751] uart_close(3) called
[  747.057228][T12248] uart_close(3) called
[  747.060313][T13413] AppArmor: unconfined exec no attachment
[  747.061344][ T6244] uart_close(3) called
[  747.071951][ T9462] sock ffff888079348000, index 0, cmd 16, status 17
[  747.088741][T13415] AppArmor: unconfined exec no attachment
[  747.095023][    C1] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  747.106093][ T4172] No more buffers in queue
[  747.112362][    C1] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8)
[  747.116668][ T4172] eth0: xmit ffff8880448dc368 42:01:0a:80:00:01
[  747.128199][    C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3)
[  747.134409][ T4172] Added buffer head 13 to ffff88814775a600
[  747.145842][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  747.145866][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  747.146305][ T1432] No more buffers in queue
[  747.151817][    C0] Sent skb ffff8880448dc368
[  747.159035][ T1432] eth0: xmit ffff88807bd8c140 ff:ff:ff:ff:ff:ff
[  747.166400][    C0] No more buffers in queue
[  747.170785][ T1432] Added buffer head 2 to ffff88814775a800
[  747.170803][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  747.175298][    C0] Receiving skb proto 0x0800 len 52 type 0
[  747.185876][    C0] No more buffers in queue
[  747.192008][    C1] Sent skb ffff88807bd8c140
[  747.198944][    C0] nf_conntrack: normal packet for ffff88807834a480
[  747.204736][    C1] No more buffers in queue
[  747.209115][    C0] tcp_in_window: START
[  747.216998][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  747.220079][    C0] tcp_in_window: 
[  747.225888][T11691] uart_close(3) called
[  747.228548][    C0] seq=3066462912 ack=1291177998+(0) sack=1291177998+(0) win=501 end=3066462912
[  747.244841][ T9462] channel 2 len 15
[  747.251397][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291177998 maxend=1291242010 maxwin=64768 scale=7
[  747.255180][T10903] uart_close(3) called
[  747.269426][    C0] tcp_in_window: 
[  747.273488][    C0] seq=3066462912 ack=1291177998+(0) sack=1291177998+(0) win=501 end=3066462912
[  747.286057][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291177998 maxend=1291242010 maxwin=64768 scale=7
[  747.292558][ T9462] channel 3 len 10
[  747.300407][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  747.304148][T12395] uart_close(3) called
[  747.309351][    C0] tcp_in_window: res=1 sender end=3066462912 maxend=3066527040 maxwin=65408 receiver end=1291177998 maxend=1291242126 maxwin=64768
[  747.315852][T12395] uart_wait_until_sent(3), jiffies=4295011862, expire=4295011868...
[  747.326998][    C0] tcp_conntracks: 
[  747.327011][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  747.327968][    C0] No more buffers in queue
[  747.350581][ T9462] All LE pending actions cleared
[  747.354664][T13416] AppArmor: unconfined exec no attachment
[  747.372403][ T9462] hdev hci0
[  747.382430][T13417] AppArmor: unconfined exec no attachment
[  747.394496][ T9196] uart_close(3) called
[  747.404964][ T5943] uart_close(3) called
[  747.409103][ T5013] uart_close(3) called
[  747.413676][ T5056] uart_close(3) called
[  747.417964][ T6189] uart_close(3) called
[  747.419075][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  747.423173][ T4466] uart_close(3) called
[  747.429413][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  747.440330][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  747.442409][ T8286] uart_close(3) called
[  747.447605][ T4267] Added buffer head 0 to ffff88801ef45b00
[  747.452005][ T9007] uart_close(3) called
[  747.462951][ T9354] uart_close(3) called
[  747.467074][ T6053] uart_close(3) called
[  747.471478][T10644] uart_close(3) called
[  747.471650][T13420] AppArmor: unconfined exec no attachment
[  747.477391][ T9118] uart_close(3) called
[  747.487978][T11730] uart_close(3) called
[  747.493226][T13384] kobject: 'event5' (ffff888061d7c138): kobject_cleanup, parent 0000000000000000
[  747.495725][ T4708] ffff88801b1b4000 name hci3 bus 0
[  747.502768][   T13] hci2 hcon ffff88802c7d6000 handle 200
[  747.514473][T10420] uart_close(3) called
[  747.519954][ T9462] hcon ffff88807e3c8000 reason 22
[  747.525027][T13384] kobject: 'event5' (ffff888061d7c138): calling ktype release
[  747.525068][T13384] kobject: 'event5': free name
[  747.525105][T13384] kernfs runtime_status: removing
[  747.525130][T13384] kernfs control: removing
[  747.525150][T13384] kernfs runtime_suspended_time: removing
[  747.525169][T13384] kernfs runtime_active_time: removing
[  747.525188][T13384] kernfs autosuspend_delay_ms: removing
[  747.525215][T13384] kernfs power: removing
[  747.525233][T13384] kernfs subsystem: removing
[  747.525244][T13384] kernfs input147: removing
[  747.525273][T13384] kernfs uevent: removing
[  747.532733][ T4498] uart_close(3) called
[  747.532976][ T6064] uart_close(3) called
[  747.545674][   T13] hcon ffff88802c7d6000
[  747.554497][ T4583] ffff888076934000 name hci2 bus 0
[  747.573226][ T4172] tcp_in_window: START
[  747.579275][ T5194] ffff8880251a8000 name hci1 bus 0
[  747.581728][ T4172] tcp_in_window: 
[  747.608301][ T4172] seq=1291177998 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291178050
[  747.613556][ T7854] uart_close(3) called
[  747.620880][ T4172] tcp_in_window: sender end=1291177998 maxend=1291242126 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  747.626632][ T9462] hcon ffff88807e3c8000 conn ffff88807a532800, err 103
[  747.639231][ T4172] tcp_in_window: 
[  747.646161][ T4172] seq=1291177998 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291178050
[  747.648291][ T4708] hci3 ffff88801b1b4000
[  747.649793][ T4172] tcp_in_window: sender end=1291177998 maxend=1291242126 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  747.660612][ T5194] hci1 ffff8880251a8000
[  747.662887][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  747.686628][ T4172] tcp_in_window: res=1 sender end=1291178050 maxend=1291242126 maxwin=64768 receiver end=3066462912 maxend=3066527040 maxwin=65408
[  747.700104][ T4172] tcp_conntracks: 
[  747.700117][ T4172] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  747.700124][ T8457] uart_close(3) called
[  747.700400][T10380] uart_close(3) called
[  747.717009][ T4267] nf_conntrack: normal packet for ffff88807834b380
[  747.721030][T13384] kernfs name: removing
[  747.725346][ T4237] nf_conntrack: normal packet for ffff88807c20aa80
[  747.729655][T13384] kernfs phys: removing
[  747.739288][ T4708] hci3: err 0x13
[  747.742875][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  747.742893][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  747.742906][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  747.742919][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  747.764562][T13423] AppArmor: unconfined exec no attachment
[  747.770234][ T4583] hci2 ffff888076934000
[  747.772661][T13384] kernfs uniq: removing
[  747.776554][T11405] uart_close(3) called
[  747.788512][T13384] kernfs modalias: removing
[  747.793026][ T5194] hci1: err 0x13
[  747.793048][ T5194] hci1: cancelling interleave scan
[  747.793082][ T5194] channel 3 len 6
[  747.793124][ T5194] channel 3 len 8
[  747.805412][T13384] kernfs properties: removing
[  747.805428][T13384] kernfs inhibited: removing
[  747.805450][T13384] kernfs bustype: removing
[  747.805460][T13384] kernfs vendor: removing
[  747.805479][T13384] kernfs product: removing
[  747.805497][T13384] kernfs version: removing
[  747.805516][T13384] kernfs id: removing
[  747.805527][T13384] kernfs ev: removing
[  747.805536][T13384] kernfs key: removing
[  747.805546][T13384] kernfs rel: removing
[  747.805556][T13384] kernfs abs: removing
[  747.805566][T13384] kernfs msc: removing
[  747.805585][T13384] kernfs led: removing
[  747.805602][T13384] kernfs snd: removing
[  747.805618][T13384] kernfs ff: removing
[  747.809256][ T4583] hci2: err 0x13
[  747.839569][T13384] kernfs sw: removing
[  747.841216][ T5367] uart_close(3) called
[  747.852482][T13384] kernfs capabilities: removing
[  747.852501][T13384] PM: Removing info for No Bus:input147
[  747.852521][T13384] kobject: 'input147' (ffff888023d882f0): kobject_uevent_env
[  747.864987][ T9462] hci0 hcon ffff88807e3c8000 chan ffff888024102800
[  747.873193][T13425] AppArmor: unconfined exec no attachment
[  747.903601][T13384] kobject: 'input147' (ffff888023d882f0): fill_kobj_path: path = '/devices/virtual/input/input147'
[  747.909350][ T9437] nf_conntrack: normal packet for ffff88802a7cbc80
[  747.937063][T13384] kernfs input147: removing
[  747.937483][ T8422] uart_close(3) called
[  747.947083][ T5194] hdev hci1 event 2
[  747.950920][ T5194] hdev 0000000000000000 len 8
[  747.954162][T13384] kobject: 'input147' (ffff888023d882f0): kobject_cleanup, parent 0000000000000000
[  747.955657][T10787] uart_close(3) called
[  747.974568][ T4708] hci3: cancelling interleave scan
[  747.979722][ T4708] hci3 state 0 -> 0
[  747.983804][ T6137] uart_close(3) called
[  747.992191][T13384] kobject: 'input147' (ffff888023d882f0): calling ktype release
[  747.999928][ T5194] kernfs runtime_status: removing
[  748.005035][ T4708] channel 3 len 10
[  748.008794][ T4708] All LE pending actions cleared
[  748.013477][T13384] kobject: 'input147': free name
[  748.014029][ T5194] kernfs control: removing
[  748.020956][T13384] sctp: sctp_close: sk:ffff88807d6a1b00, timeout:0
[  748.023096][ T4583] hci2: cancelling interleave scan
[  748.032405][ T4708] hdev hci3
[  748.037962][ T5194] kernfs runtime_suspended_time: removing
[  748.043975][ T5194] kernfs runtime_active_time: removing
[  748.049463][ T5194] kernfs autosuspend_delay_ms: removing
[  748.067091][T13384] sctp: sctp_destroy_sock: sk:ffff88807d6a1b00
[  748.074857][ T5194] kernfs power: removing
[  748.079148][ T5194] kernfs device: removing
[  748.086045][ T8989] ffff88801af88000 name hci4 bus 0
[  748.094598][ T4172] No more buffers in queue
[  748.099033][ T4172] eth0: xmit ffff8880448dc0e8 42:01:0a:80:00:01
[  748.102521][ T8989] hci4 ffff88801af88000
[  748.105307][ T4172] Added buffer head 13 to ffff88814775a600
[  748.109404][ T8989] hci4: err 0x13
[  748.109407][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  748.109424][ T8989] hci4: cancelling interleave scan
[  748.109430][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  748.109468][ T8989] channel 3 len 6
[  748.115350][    C0] Sent skb ffff8880448dc0e8
[  748.115366][    C0] No more buffers in queue
[  748.115393][    C0] Receiving skb proto 0x0800 len 52 type 0
[  748.115412][    C0] No more buffers in queue
[  748.115440][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.115456][    C0] tcp_in_window: START
[  748.115463][    C0] tcp_in_window: 
[  748.119050][ T8989] channel 3 len 8
[  748.126349][    C0] seq=3066462912 ack=1291178050+(0) sack=1291178050+(0) win=501 end=3066462912
[  748.131472][ T8989] hdev hci4 event 2
[  748.138807][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178050 maxend=1291242126 maxwin=64768 scale=7
[  748.142708][ T8989] hdev 0000000000000000 len 8
[  748.146918][    C0] tcp_in_window: 
[  748.154866][ T5194] kernfs subsystem: removing
[  748.157199][    C0] seq=3066462912 ack=1291178050+(0) sack=1291178050+(0) win=501 end=3066462912
[  748.161590][ T5194] kernfs rfkill6: removing
[  748.168062][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178050 maxend=1291242126 maxwin=64768 scale=7
[  748.168086][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.168100][    C0] tcp_in_window: res=1 sender end=3066462912 maxend=3066527040 maxwin=65408 receiver end=1291178050 maxend=1291242178 maxwin=64768
[  748.168119][    C0] tcp_conntracks: 
[  748.168125][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  748.171584][    C0] No more buffers in queue
[  748.175048][ T8989] kernfs runtime_status: removing
[  748.192915][ T4172] tcp_in_window: START
[  748.211099][ T5194] kernfs uevent: removing
[  748.211396][ T4172] tcp_in_window: 
[  748.216554][ T5194] kernfs name: removing
[  748.219600][ T4172] seq=1291178050 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291178122
[  748.228981][ T8989] kernfs control: removing
[  748.232956][ T4172] tcp_in_window: sender end=1291178050 maxend=1291242178 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  748.232982][ T4172] tcp_in_window: 
[  748.232989][ T4172] seq=1291178050 ack=3066462912+(0) sack=3066462912+(0) win=501 end=1291178122
[  748.233009][ T4172] tcp_in_window: sender end=1291178050 maxend=1291242178 maxwin=64768 scale=7 receiver end=3066462912 maxend=3066527040 maxwin=65408 scale=7
[  748.233033][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.233047][ T4172] tcp_in_window: res=1 sender end=1291178122 maxend=1291242178 maxwin=64768 receiver end=3066462912 maxend=3066527040 maxwin=65408
[  748.233069][ T4172] tcp_conntracks: 
[  748.233075][ T4172] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  748.240747][ T3851] Deleting a9feffff/32 tos=0 t=ffff88802b9b7330
[  748.248224][ T5194] kernfs type: removing
[  748.254190][ T3851] Deleting a9feffff/32 tos=0 t=ffff88802b9b7330
[  748.267237][ T8989] kernfs runtime_suspended_time: removing
[  748.270425][ T3851] Deleting a9feb967/32 tos=0 t=ffff88802b9b7330
[  748.277055][ T5194] kernfs index: removing
[  748.280654][ T4172] No more buffers in queue
[  748.285379][ T8989] kernfs runtime_active_time: removing
[  748.285402][ T8989] kernfs autosuspend_delay_ms: removing
[  748.289449][ T4172] eth0: xmit ffff8880448dc5e8 42:01:0a:80:00:01
[  748.296232][ T5194] kernfs persistent: removing
[  748.297445][ T4172] Added buffer head 13 to ffff88814775a600
[  748.301579][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  748.301587][ T5194] kernfs state: removing
[  748.301606][ T5194] kernfs soft: removing
[  748.301605][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  748.301625][ T5194] kernfs hard: removing
[  748.310683][    C0] Sent skb ffff8880448dc5e8
[  748.316322][ T8989] kernfs power: removing
[  748.329288][    C0] No more buffers in queue
[  748.332925][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  748.334370][ T5194] kernfs hard_block_reasons: removing
[  748.341886][    C0] Receiving skb proto 0x0800 len 52 type 0
[  748.357572][ T8989] kernfs device: removing
[  748.361533][    C0] Receiving skb proto 0x0800 len 88 type 0
[  748.377104][ T5194] PM: Removing info for No Bus:rfkill6
[  748.378686][    C0] Receiving skb proto 0x0800 len 112 type 0
[  748.384102][ T8989] kernfs subsystem: removing
[  748.390290][    C0] Receiving skb proto 0x0800 len 52 type 0
[  748.395935][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:169.254.185.103 in wq:ffffffff966b5cd8
[  748.400786][    C0] Receiving skb proto 0x0800 len 52 type 0
[  748.411446][ T5194] kobject: 'rfkill6' (ffff8881481fb108): kobject_uevent_env
[  748.412735][    C0] No more buffers in queue
[  748.412777][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.417408][ T5194] kobject: 'rfkill6' (ffff8881481fb108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6'
[  748.421379][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  748.428061][ T8989] kernfs rfkill9: removing
[  748.432353][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  748.438892][ T5194] kernfs rfkill6: removing
[  748.443187][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  748.443243][    C0] tcp_in_window: START
[  748.449040][ T8989] kernfs uevent: removing
[  748.456352][    C0] tcp_in_window: 
[  748.456360][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066462912
[  748.456378][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242178 maxwin=64768 scale=7
[  748.456400][    C0] tcp_in_window: 
[  748.456407][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066462912
[  748.456427][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242178 maxwin=64768 scale=7
[  748.456450][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.456465][    C0] tcp_in_window: res=1 sender end=3066462912 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.456489][    C0] tcp_conntracks: 
[  748.456496][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  748.456524][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.456538][    C0] tcp_in_window: START
[  748.456545][    C0] tcp_in_window: 
[  748.456552][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066462948
[  748.456573][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.456598][    C0] tcp_in_window: 
[  748.456606][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066462948
[  748.456627][    C0] tcp_in_window: sender end=3066462912 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.456653][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.456666][    C0] tcp_in_window: res=1 sender end=3066462948 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.462112][ T8989] kernfs name: removing
[  748.465037][    C0] tcp_conntracks: 
[  748.473931][ T8989] kernfs type: removing
[  748.476538][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  748.481032][ T8989] kernfs index: removing
[  748.485273][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.489668][ T8989] kernfs persistent: removing
[  748.497024][    C0] tcp_in_window: START
[  748.497032][    C0] tcp_in_window: 
[  748.497037][    C0] seq=3066462948 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463008
[  748.497059][    C0] tcp_in_window: sender end=3066462948 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.497084][    C0] tcp_in_window: 
[  748.497091][    C0] seq=3066462948 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463008
[  748.497112][    C0] tcp_in_window: sender end=3066462948 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.497137][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.497152][    C0] tcp_in_window: res=1 sender end=3066463008 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.497176][    C0] tcp_conntracks: 
[  748.497183][    C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  748.497208][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.497226][    C0] tcp_in_window: START
[  748.497234][    C0] tcp_in_window: 
[  748.497241][    C0] seq=3066463008 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.497261][    C0] tcp_in_window: sender end=3066463008 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.497282][    C0] tcp_in_window: 
[  748.497288][    C0] seq=3066463008 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.497307][    C0] tcp_in_window: sender end=3066463008 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.497330][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.497343][    C0] tcp_in_window: res=1 sender end=3066463009 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.503878][ T8989] kernfs state: removing
[  748.508490][    C0] tcp_conntracks: 
[  748.513660][ T8989] kernfs soft: removing
[  748.518613][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  748.524094][ T8989] kernfs hard: removing
[  748.529968][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.536929][ T3851] Deleting a9fe0000/16 tos=0 t=ffff88802b9b7330
[  748.540329][    C0] tcp_in_window: START
[  748.550744][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  748.551887][ T8989] kernfs hard_block_reasons: removing
[  748.556572][    C0] tcp_in_window: 
[  748.566928][ T8989] PM: Removing info for No Bus:rfkill9
[  748.568243][    C0] seq=3066463008 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.588699][ T8989] kobject: 'rfkill9' (ffff88814c22d108): kobject_uevent_env
[  748.593410][    C0] tcp_in_window: sender end=3066463009 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.593435][    C0] tcp_in_window: 
[  748.593441][    C0] seq=3066463008 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.593460][    C0] tcp_in_window: sender end=3066463009 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.593484][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.593497][    C0] tcp_in_window: res=1 sender end=3066463009 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.593520][    C0] tcp_conntracks: 
[  748.593527][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[  748.595461][ T1112] Added buffer head 0 to ffff88801ef45b00
[  748.605220][ T8989] kobject: 'rfkill9' (ffff88814c22d108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill9'
[  748.609707][    C0] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[  748.620150][ T8989] kernfs rfkill9: removing
[  748.620523][    C0] No more buffers in queue
[  748.625108][ T4283] nf_conntrack: new packet for ffff88802a7cac00
[  748.628412][    C0] No more buffers in queue
[  748.637347][ T4283] nf_nat: Already setup manip DST for ct ffff88802a7cac00 (status bits 0x188)
[  748.651674][    C0] Receiving skb proto 0x0800 len 148 type 0
[  748.655289][ T4283] nf_nat: Already setup manip SRC for ct ffff88802a7cac00 (status bits 0x188)
[  748.664203][    C0] No more buffers in queue
[  748.702382][    C1] bridge0: hello timer expired
[  748.706543][    C0] nf_conntrack: normal packet for ffff88807834a480
[  748.713086][    C1] bridge0: hello timer expired
[  748.717057][    C0] tcp_in_window: START
[  748.741992][ T9462] hci0 hcon ffff88807e3c8000 handle 0
[  748.743952][    C0] tcp_in_window: 
[  748.743962][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.743984][    C0] tcp_in_window: sender end=3066463009 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.744009][    C0] tcp_in_window: 
[  748.744015][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  748.744035][    C0] tcp_in_window: sender end=3066463009 maxend=3066527040 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  748.744061][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.744075][    C0] tcp_in_window: res=1 sender end=3066463009 maxend=3066527040 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  748.744099][    C0] tcp_conntracks: 
[  748.744106][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[  748.745880][   T13] hci2: conn ffff88802c7d6000
[  748.748102][ T4708] hcon ffff888019398000 reason 22
[  748.758852][   T13] device: 'hci2:200': device_unregister
[  748.772872][ T9462] hcon ffff88807e3c8000
[  748.776906][   T13] kernfs runtime_status: removing
[  748.792653][ T4172] tcp_in_window: START
[  748.795016][   T13] kernfs control: removing
[  748.797945][ T4172] tcp_in_window: 
[  748.802111][   T13] kernfs runtime_suspended_time: removing
[  748.807509][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  748.812172][   T13] kernfs runtime_active_time: removing
[  748.818234][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527040 maxwin=65408 scale=7
[  748.823110][   T13] kernfs autosuspend_delay_ms: removing
[  748.826956][ T4172] tcp_in_window: 
[  748.830600][   T13] kernfs power: removing
[  748.839519][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  748.854153][   T13] kernfs device: removing
[  748.857439][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527040 maxwin=65408 scale=7
[  748.866574][   T13] kernfs subsystem: removing
[  748.880687][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  748.880705][ T4172] tcp_in_window: res=1 sender end=1291178122 maxend=1291242250 maxwin=64768 receiver end=3066463009 maxend=3066527137 maxwin=65408
[  748.886248][   T13] kernfs hci2:200: removing
[  748.899416][ T4172] tcp_conntracks: 
[  748.899426][ T4172] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[  748.922212][   T13] kernfs uevent: removing
[  748.923002][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff966b5cd8 is addr:169.254.185.103 for cmd:2 at entry:ffff88802ac9ed00
[  748.934915][   T13] PM: Removing info for No Bus:hci2:200
[  748.947894][ T4233] nf_conntrack: normal packet for ffff88802a7cbc80
[  748.961806][   T13] kobject: 'hci2:200' (ffff88802c7d6420): kobject_uevent_env
[  748.974914][ T4708] hcon ffff888019398000 conn ffff888078c40800, err 103
[  748.980831][   T13] kobject: 'hci2:200' (ffff88802c7d6420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200'
[  749.004579][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  749.007285][ T4708] hci3 hcon ffff888019398000 chan ffff88801f807d00
[  749.010152][    C0] No more buffers in queue
[  749.014339][    C1] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  749.020630][    C0] Receiving skb proto 0x0800 len 148 type 0
[  749.026882][    C1] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[  749.030894][    C0] No more buffers in queue
[  749.038263][    C1] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 17)
[  749.043639][    C0] nf_conntrack: normal packet for ffff88807834a480
[  749.047253][    C1] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  749.052688][    C0] tcp_in_window: START
[  749.067158][ T4172] No more buffers in queue
[  749.068871][    C0] tcp_in_window: 
[  749.083165][ T4172] eth0: xmit ffff888051887500 42:01:0a:80:00:01
[  749.086784][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  749.095712][ T4172] Added buffer head 2 to ffff88814775a800
[  749.110024][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  749.110021][    C0] tcp_in_window: sender end=3066463009 maxend=3066527137 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  749.110050][    C0] tcp_in_window: 
[  749.115565][    C1] Sent skb ffff888051887500
[  749.128795][    C0] seq=3066462912 ack=1291178122+(0) sack=1291178122+(0) win=501 end=3066463009
[  749.132581][    C1] No more buffers in queue
[  749.137890][    C0] tcp_in_window: sender end=3066463009 maxend=3066527137 maxwin=65408 scale=7 receiver end=1291178122 maxend=1291242250 maxwin=64768 scale=7
[  749.147108][ T4283] nf_conntrack: new packet for ffff88802a7cad80
[  749.154891][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  749.166445][ T4283] nf_nat: Already setup manip DST for ct ffff88802a7cad80 (status bits 0x188)
[  749.170839][    C0] tcp_in_window: res=1 sender end=3066463009 maxend=3066527137 maxwin=65408 receiver end=1291178122 maxend=1291242250 maxwin=64768
[  749.175252][ T4283] nf_nat: Already setup manip SRC for ct ffff88802a7cad80 (status bits 0x188)
[  749.181461][    C0] tcp_conntracks: 
[  749.189606][ T9462] hci0: conn ffff88807e3c8000
[  749.194706][    C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7
[  749.432241][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  749.432311][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  749.432317][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  749.774206][ T4172] tcp_in_window: START
[  749.774625][  T154] nf_conntrack: new packet for ffff88802a7ca600
[  749.778272][ T4172] tcp_in_window: 
[  749.784540][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  749.784544][  T154] nf_nat: Already setup manip DST for ct ffff88802a7ca600 (status bits 0x188)
[  749.784562][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  749.788177][  T154] nf_nat: Already setup manip SRC for ct ffff88802a7ca600 (status bits 0x188)
[  749.797095][ T4172] tcp_in_window: 
[  749.806351][ T4408] nf_conntrack: normal packet for ffff88802a7cbb00
[  749.820236][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  749.829435][ T4329] nf_conntrack: normal packet for ffff88807c20bc80
[  749.832735][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  749.847643][   T13] kernfs hci2:200: removing
[  749.848226][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  749.854970][   T13] kobject: 'hci2:200' (ffff88802c7d6420): kobject_cleanup, parent 0000000000000000
[  749.869015][ T4172] tcp_in_window: res=1 sender end=1291178122 maxend=1291242250 maxwin=64768 receiver end=3066463009 maxend=3066527137 maxwin=65408
[  749.873756][   T13] kobject: 'hci2:200' (ffff88802c7d6420): calling ktype release
[  749.878796][ T4172] tcp_conntracks: 
[  749.888255][   T13] kobject: 'hci2:200': free name
[  749.901525][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[  749.909530][   T13] hci2 orig refcnt 7
[  749.913437][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  749.919363][   T13] hdev hci2 event 4
[  749.923271][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  749.927406][   T13] hdev 0000000000000000 len 8
[  749.933839][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  749.937932][   T13] hdev hci2 event 8
[  749.944316][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  749.950173][   T13] hci2 orig refcnt 6
[  749.961333][ T4583] channel 3 len 6
[  749.974083][ T4708] hci3 hcon ffff888019398000 handle 201
[  749.979662][ T4708] hcon ffff888019398000
[  749.982942][   T13] kobject: 'rfkill7' (ffff8881478eb108): kobject_uevent_env
[  749.984070][ T9462] kobject: '(null)' (ffff88807e3c8420): kobject_cleanup, parent 0000000000000000
[  749.991326][   T13] kobject: 'rfkill7' (ffff8881478eb108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7'
[  750.000320][ T4583] channel 3 len 8
[  750.015729][ T9462] kobject: '(null)' (ffff88807e3c8420): calling ktype release
[  750.023281][ T4583] hdev hci2 event 2
[  750.027114][ T4583] hdev 0000000000000000 len 8
[  750.031837][ T4583] kernfs runtime_status: removing
[  750.032618][   T13] ffff88801b1b4000 name hci3 blocked 1
[  750.036954][ T9462] hci0 orig refcnt 13
[  750.046364][ T9462] hcon ffff88804cf10000 reason 22
[  750.050636][   T13] hci3 ffff88801b1b4000
[  750.051386][ T9462] hcon ffff88804cf10000 conn ffff88802b6e1000, err 103
[  750.055843][   T13] hci3: err 0x13
[  750.062726][ T9462] hci0 hcon ffff88804cf10000 chan ffff888017bf9600
[  750.073562][ T4583] kernfs control: removing
[  750.073847][   T13] hci3: cancelling interleave scan
[  750.078007][ T4583] kernfs runtime_suspended_time: removing
[  750.085272][ T1112] Added buffer head 0 to ffff88801ef45b00
[  750.091024][ T4583] kernfs runtime_active_time: removing
[  750.100285][ T4583] kernfs autosuspend_delay_ms: removing
[  750.105832][    C0] wireguard: wg0: Handshake for peer 37 (224.0.0.1:20000) did not complete after 5 seconds, retrying (try 2)
[  750.105878][    C0] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  750.119224][ T4233] nf_conntrack: normal packet for ffff88802a7cbc80
[  750.130037][ T3520] sd 0:0:1:0: cmd ffff888024258528 CDB: 0x2a
[  750.136141][ T4683] nf_conntrack: new packet for ffff88807652dc80
[  750.141705][ T3520] Added buffer head 233 to ffff8881474b2e00
[  750.147972][ T4683] nf_nat: Already setup manip DST for ct ffff88807652dc80 (status bits 0x188)
[  750.156952][ T4172] No more buffers in queue
[  750.162671][ T4683] nf_nat: Already setup manip SRC for ct ffff88807652dc80 (status bits 0x188)
[  750.167079][ T4172] eth0: xmit ffff888025f15000 42:01:0a:80:00:01
[  750.175970][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  750.182208][ T4172] Added buffer head 13 to ffff88814775a600
[  750.189555][    C1] sd 0:0:1:0: cmd ffff888024258528 response 0 status 0x0 sense_len 0
[  750.189576][    C1] No more buffers in queue
[  750.189575][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  750.193223][  T263] sd 0:0:1:0: cmd ffff888022f28128 CDB: 0x35
[  750.195463][    C0] Sent skb ffff888025f15000
[  750.203531][  T263] Added buffer head 233 to ffff8881474b2e00
[  750.207881][    C0] No more buffers in queue
[  750.215485][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  750.225347][ T4172] tcp_in_window: START
[  750.225661][    C1] sd 0:0:1:0: cmd ffff888022f28128 response 0 status 0x0 sense_len 0
[  750.231535][ T4172] tcp_in_window: 
[  750.231543][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  750.235929][    C1] No more buffers in queue
[  750.236113][  T263] sd 0:0:1:0: cmd ffff888024258928 CDB: 0x2a
[  750.243334][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  750.247385][  T263] Added buffer head 233 to ffff8881474b2e00
[  750.255434][ T4172] tcp_in_window: 
[  750.259748][ T4708] hci3: conn ffff888019398000
[  750.267969][ T4172] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178122
[  750.272556][ T4708] device: 'hci3:201': device_unregister
[  750.278329][ T4172] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  750.292644][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  750.298514][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1
[  750.302126][    C1] sd 0:0:1:0: cmd ffff888024258928 response 0 status 0x0 sense_len 0
[  750.306791][ T4172] tcp_in_window: res=1 sender end=1291178122 maxend=1291242250 maxwin=64768 receiver end=3066463009 maxend=3066527137 maxwin=65408
[  750.315674][    C1] No more buffers in queue
[  750.317099][  T263] sd 0:0:1:0: cmd ffff888022f28128 CDB: 0x35
[  750.321207][ T4172] tcp_conntracks: 
[  750.335610][  T263] Added buffer head 233 to ffff8881474b2e00
[  750.342919][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[  750.348266][    C1] virtqueue callback for ffff8881474b2e00 (ffffffff85068310)
[  750.402295][    C1] sd 0:0:1:0: cmd ffff888022f28128 response 0 status 0x0 sense_len 0
[  750.410375][    C1] No more buffers in queue
[  750.414902][ T4583] kernfs power: removing
[  750.418940][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  750.419179][ T4583] kernfs device: removing
[  750.426525][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  750.426538][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  750.430866][ T4583] kernfs subsystem: removing
[  750.438139][ T1112] Added buffer head 0 to ffff88801ef45b00
[  750.444711][ T4583] kernfs rfkill7: removing
[  750.444743][ T4583] kernfs uevent: removing
[  750.452860][ T4172] No more buffers in queue
[  750.461407][ T4583] kernfs name: removing
[  750.464002][ T4172] eth0: xmit ffff88802ec2d8c0 42:01:0a:80:00:01
[  750.464024][ T4172] Added buffer head 13 to ffff88814775a600
[  750.468428][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  750.468453][ T4583] kernfs type: removing
[  750.472777][    C0] Sent skb ffff88802ec2d8c0
[  750.478990][ T4583] kernfs index: removing
[  750.484822][    C0] No more buffers in queue
[  750.509819][ T4708] kernfs runtime_status: removing
[  750.515956][ T9462] hci0 hcon ffff88804cf10000 handle 201
[  750.521710][ T9462] hcon ffff88804cf10000
[  750.525999][ T4708] kernfs control: removing
[  750.527657][ T4170] tcp_in_window: START
[  750.530413][    C1] virtqueue callback for ffff88814775a700 (ffffffff85491a80)
[  750.534499][ T4170] tcp_in_window: 
[  750.541801][ T4170] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178123
[  750.541847][    C1] No more buffers in queue
[  750.545451][ T4170] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  750.554418][    C1] Receiving skb proto 0x0806 len 28 type 1
[  750.558769][ T4170] tcp_in_window: 
[  750.558777][ T4170] seq=1291178122 ack=3066463009+(0) sack=3066463009+(0) win=501 end=1291178123
[  750.573088][    C1] No more buffers in queue
[  750.578867][ T4170] tcp_in_window: sender end=1291178122 maxend=1291242250 maxwin=64768 scale=7 receiver end=3066463009 maxend=3066527137 maxwin=65408 scale=7
[  750.582633][    C1] No more buffers in queue
[  750.591414][ T4170] tcp_in_window: I=1 II=1 III=1 IV=1
[  750.595837][    C1] eth0: xmit ffff88801ef7e140 42:01:0a:80:00:01
[  750.610173][ T4170] tcp_in_window: res=1 sender end=1291178123 maxend=1291242250 maxwin=64768 receiver end=3066463009 maxend=3066527137 maxwin=65408
[  750.614586][    C1] Added buffer head 2 to ffff88814775a800
[  750.619834][ T4170] tcp_conntracks: 
[  750.619841][ T4170] syn=0 ack=1 fin=1 rst=0 old=7 new=7
[  750.619840][    C1] virtqueue callback for ffff88814775a800 (ffffffff85491b70)
[  750.624783][ T4170] No more buffers in queue
[  750.626508][    C1] Sent skb ffff88801ef7e140
[  750.639567][ T4170] eth0: xmit ffff8880448dcd68 42:01:0a:80:00:01
[  750.645300][    C1] No more buffers in queue
[  750.648984][ T4170] Added buffer head 13 to ffff88814775a600
[  750.654434][    C0] virtqueue callback for ffff88814775a500 (ffffffff85491a80)
[  750.654453][    C0] virtqueue callback for ffff88814775a600 (ffffffff85491b70)
[  750.663140][ T4583] kernfs persistent: removing
[  750.666356][    C0] Sent skb ffff8880448dcd68
[  750.670718][ T4583] kernfs state: removing
[  750.676942][    C0] No more buffers in queue
[  750.676975][    C0] Receiving skb proto 0x0800 len 52 type 0
[  750.681882][ T4708] kernfs runtime_suspended_time: removing
[  750.687167][    C0] No more buffers in queue
[  750.687201][    C0] nf_conntrack: normal packet for ffff88807834a480
[  750.694782][    C1] bridge0: hello timer expired
[  750.701886][    C0] tcp_in_window: START
[  750.706688][    C1] bridge0: hello timer expired
[  750.711030][    C0] tcp_in_window: 
[  750.715994][ T4583] kernfs soft: removing
[  750.719654][    C0] seq=3066463009 ack=1291178123+(0) sack=1291178123+(0) win=501 end=3066463009
[  750.725966][ T4708] kernfs runtime_active_time: removing
[  750.731167][    C0] tcp_in_window: sender end=3066463009 maxend=3066527137 maxwin=65408 scale=7 receiver end=1291178123 maxend=1291242250 maxwin=64768 scale=7
[  750.736095][ T4583] kernfs hard: removing
[  750.742078][    C0] tcp_in_window: 
[  750.747046][ T4708] kernfs autosuspend_delay_ms: removing
[  750.750900][    C0] seq=3066463009 ack=1291178123+(0) sack=1291178123+(0) win=501 end=3066463009
[  750.755951][ T4583] kernfs hard_block_reasons: removing
[  750.759279][    C0] tcp_in_window: sender end=3066463009 maxend=3066527137 maxwin=65408 scale=7 receiver end=1291178123 maxend=1291242250 maxwin=64768 scale=7
[  750.764774][ T4708] kernfs power: removing
[  750.772377][    C0] tcp_in_window: I=1 II=1 III=1 IV=1
[  750.778442][ T4583] PM: Removing info for No Bus:rfkill7
[  750.792133][    C0] tcp_in_window: res=1 sender end=3066463009 maxend=3066527137 maxwin=65408 receiver end=1291178123 maxend=1291242251 maxwin=64768
[  750.796610][ T4708] kernfs device: removing
[  750.799929][    C0] tcp_conntracks: 
[  750.805845][ T4708] kernfs subsystem: removing
[  750.814405][    C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[  750.818638][    C0] net_ratelimit: 39 callbacks suppressed
[  750.818653][    C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0)
[  750.820548][ T4583] kobject: 'rfkill7' (ffff8881478eb108): kobject_uevent_env
[  750.834527][    C0] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0)
[  750.834629][    C0] No more buffers in queue
[  750.839380][ T4237] nf_conntrack: normal packet for ffff88807834b380
[  750.847787][ T4708] kernfs hci3:201: removing
[  750.849656][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.883491][ T4708] kernfs uevent: removing
[  750.886802][ T4267] nf_conntrack: normal packet for ffff88807c20aa80
[  750.902397][ T4583] kobject: 'rfkill7' (ffff8881478eb108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7'
[  750.910870][    C0] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0)
[  750.916608][    C1] wireguard: wg2: Receiving keepalive packet from peer 17 ([::1]:20001/0%0)
[  750.973542][ T9462] hci0: conn ffff88804cf10000
[  750.978214][ T9462] device: 'hci0:201': device_unregister
[  750.984107][ T9462] kernfs runtime_status: removing
[  750.989167][ T9462] kernfs control: removing
[  750.994263][ T4708] PM: Removing info for No Bus:hci3:201
[  750.999835][ T4708] kobject: 'hci3:201' (ffff888019398420): kobject_uevent_env
[  751.007285][ T4583] kernfs rfkill7: removing
[  751.011731][ T9462] kernfs runtime_suspended_time: removing
[  751.017490][ T9462] kernfs runtime_active_time: removing
[  751.022980][ T4708] kobject: 'hci3:201' (ffff888019398420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201'
[  751.034478][ T9462] kernfs autosuspend_delay_ms: removing
[  751.040049][ T9462] kernfs power: removing
[  751.044437][ T4708] kernfs hci3:201: removing
[  751.048934][ T4708] kobject: 'hci3:201' (ffff888019398420): kobject_cleanup, parent 0000000000000000
[  751.058292][ T9462] kernfs device: removing
[  751.062739][ T9462] kernfs subsystem: removing
[  751.067313][ T9462] kernfs hci0:201: removing
[  751.071803][ T9462] kernfs uevent: removing
[  751.076156][ T4708] kobject: 'hci3:201' (ffff888019398420): calling ktype release
[  751.084216][    C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0)
[  751.093617][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.101718][ T9462] PM: Removing info for No Bus:hci0:201
[  751.107347][ T4708] kobject: 'hci3:201': free name
[  751.112303][ T4708] hci3 orig refcnt 10
[  751.116339][ T9462] kobject: 'hci0:201' (ffff88804cf10420): kobject_uevent_env
[  751.123968][ T4708] hcon ffff88807a604000 reason 22
[  751.123990][    C0] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0)
[  751.128994][ T4708] hcon ffff88807a604000 conn ffff888078c40000, err 103
[  751.145145][ T9462] kobject: 'hci0:201' (ffff88804cf10420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201'
[  751.156971][ T9462] kernfs hci0:201: removing
[  751.161488][ T9462] kobject: 'hci0:201' (ffff88804cf10420): kobject_cleanup, parent 0000000000000000
[  751.170858][ T4708] hci3 hcon ffff88807a604000 chan ffff88801f807e00
[  751.177394][    C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0)
[  751.186088][ T9437] nf_conntrack: normal packet for ffff88802a7cbc80
[  751.192725][    C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0)
[  751.201334][ T9462] kobject: 'hci0:201' (ffff88804cf10420): calling ktype release
[  751.209669][ T4708] hci3 hcon ffff88807a604000 handle 200
[  751.215426][ T4708] hcon ffff88807a604000
[  751.219624][ T9462] kobject: 'hci0:201': free name
[  751.224571][ T9462] hci0 orig refcnt 10
[  751.228546][ T9462] hcon ffff88807b640000 reason 22
[  751.233614][ T4708] hci3: conn ffff88807a604000
[  751.238394][ T4708] device: 'hci3:200': device_unregister
[  751.244145][ T9462] hcon ffff88807b640000 conn ffff88802b6e1800, err 103
[  751.251127][ T4708] kernfs runtime_status: removing
[  751.256230][ T4708] kernfs control: removing
[  751.260657][ T4708] kernfs runtime_suspended_time: removing
[  751.266498][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): kobject_uevent_env
[  751.274818][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200/input106/input106::numlock'
[  751.289458][ T4708] kernfs runtime_active_time: removing
[  751.294948][ T4708] kernfs autosuspend_delay_ms: removing
[  751.300495][ T4708] kernfs power: removing
[  751.305079][ T9462] device: 'input106::numlock': device_unregister
[  751.311505][ T4708] kernfs device: removing
[  751.316607][ T9462] kernfs runtime_status: removing
[  751.321646][ T9462] kernfs control: removing
[  751.326739][ T4708] kernfs subsystem: removing
[  751.331368][ T4708] kernfs hci3:200: removing
[  751.336198][ T9462] kernfs runtime_suspended_time: removing
[  751.342104][ T9462] kernfs runtime_active_time: removing
[  751.347847][ T4708] kernfs uevent: removing
[  751.352177][ T4708] PM: Removing info for No Bus:hci3:200
[  751.357864][ T4708] kobject: 'hci3:200' (ffff88807a604420): kobject_uevent_env
[  751.365416][ T9462] kernfs autosuspend_delay_ms: removing
[  751.371177][ T9462] kernfs power: removing
[  751.375569][ T9462] kernfs device: removing
[  751.379930][ T9462] kernfs subsystem: removing
[  751.384587][ T4708] kobject: 'hci3:200' (ffff88807a604420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:200'
[  751.396231][ T9462] kernfs input106::numlock: removing
[  751.401559][ T9462] kernfs uevent: removing
[  751.406068][ T4708] kernfs hci3:200: removing
[  751.410571][ T4708] kobject: 'hci3:200' (ffff88807a604420): kobject_cleanup, parent 0000000000000000
[  751.418903][    C0] virtqueue callback for ffff88801ef45b00 (ffffffff8444ab50)
[  751.419905][ T9462] kernfs brightness: removing
[  751.427211][    C0] virtqueue interrupt with no work for ffff88801ef45a00
[  751.431864][ T4708] kobject: 'hci3:200' (ffff88807a604420): calling ktype release
[  751.438759][    C0] virtqueue interrupt with no work for ffff88801ef45900
[  751.439423][ T4237] Added buffer head 0 to ffff88801ef45b00
[  751.447646][ T9462] kernfs max_brightness: removing
[  751.464417][ T4708] kobject: 'hci3:200': free name
[  751.469375][ T4708] hci3 orig refcnt 7
[  751.473512][ T9462] kernfs trigger: removing
[  751.477936][ T9462] PM: Removing info for No Bus:input106::numlock
[  751.484286][ T4708] hdev hci3 event 4
[  751.488098][ T4708] hdev 0000000000000000 len 8
[  751.492810][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): kobject_uevent_env
[  751.501299][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200/input106/input106::numlock'
[  751.516299][ T4708] hdev hci3 event 8
[  751.520099][ T4708] hci3 orig refcnt 6
[  751.520139][   T13] kobject: 'rfkill8' (ffff8881481f9108): kobject_uevent_env
[  751.524072][ T4708] channel 3 len 6
[  751.531498][   T13] kobject: 'rfkill8' (ffff8881481f9108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill8'
[  751.534958][ T4708] channel 3 len 8
[  751.534987][ T4708] hdev hci3 event 2
[  751.535008][ T4708] hdev 0000000000000000 len 8
[  751.550107][   T13] ffff88801af88000 name hci4 blocked 1
[  751.550299][ T9462] kernfs input106::numlock: removing
[  751.554377][   T13] hci4 ffff88801af88000
[  751.573017][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): kobject_cleanup, parent 0000000000000000
[  751.573779][    C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8)
[  751.583811][    C1] wireguard: wg2: Handshake for peer 35 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10)
[  751.595938][ T4283] nf_conntrack: normal packet for ffff88807c20ac00
[  751.607280][ T4708] kernfs runtime_status: removing
[  751.615845][   T13] hci4: err 0x13
[  751.618471][ T9462] kobject: 'input106::numlock' (ffff8880774fd000): calling ktype release
[  751.622244][   T13] hci4: cancelling interleave scan
[  751.630655][ T4708] kernfs control: removing
[  751.637144][   T13] mac80211_hwsim hwsim2 wlan0: bond_netdev_event received NETDEV_GOING_DOWN
[  751.640026][ T4708] kernfs runtime_suspended_time: removing
[  751.649195][   T13] net wlan0: siw: event 10
[  751.654829][ T9462] device: 'input106::numlock': device_create_release
[  751.654867][ T9462] kobject: 'input106::numlock': free name
[  751.671867][   T13] ieee80211 phy3: mac80211_hwsim_remove_interface (type=1 mac_addr=08:02:11:00:00:00)
[  751.673209][ T4708] kernfs runtime_active_time: removing
[  751.682926][   T13] ieee80211 phy3: mac80211_hwsim_stop
[  751.687283][ T9462] kobject: 'input106::capslock' (ffff8880294bb000): kobject_uevent_env
[  751.693941][   T13] mac80211_hwsim hwsim2 wlan0: bond_netdev_event received NETDEV_DOWN
[  751.700597][ T9462] kobject: 'input106::capslock' (ffff8880294bb000): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200/input106/input106::capslock'
[  751.709572][   T13] net wlan0: siw: event 2
[  751.723717][ T4708] kernfs autosuspend_delay_ms: removing
[  751.730002][   T13] kobject: 'rfkill10' (ffff8880255ba108): kobject_uevent_env
[  751.733454][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  751.733470][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  751.733485][    C1] bridge0: port 1(bridge_slave_0) hold timer expired
[  751.741034][   T13] kobject: 'rfkill10' (ffff8880255ba108): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim2/ieee80211/phy3/rfkill10'
[  751.747498][    C1] bridge0: port 2(bridge_slave_1) hold timer expired
[  751.747617][ T4708] kernfs power: removing