last executing test programs:

4m16.936159496s ago: executing program 2 (id=39):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000818)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x20004801)

4m3.938692438s ago: executing program 2 (id=53):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0xa, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000840), 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="a00000001900000129bd7000fcdbdf251c20400a0002fd02000000008400130000000000000007000000000000000000000002000000000000000300000001000000000000000000000000000000000000000100000001000000000000000000000000000000004a0000000000000f00000000000000000000000000000000000000000000000000000000000000000000090200000000000000000000000000256ee0e488db518d3ca229bdc9a1f65c80d67eb3c773c5ec5dc5ccf58724b8042e7018253076"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000)
sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x2, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b80), 0x102, 0x0)
read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)

4m3.176075487s ago: executing program 2 (id=60):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x3, @loopback}, 0x70)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000680)="cf", 0x1}, {&(0x7f00000006c0)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000700)="8a", 0x1}, {&(0x7f0000000740)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="ce90bfdb", 0x4}, {&(0x7f00000008c0)="f2e659", 0x3}, {&(0x7f0000000940)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000bc0)="e1", 0x1}, {&(0x7f0000000c00)="fa", 0x1}, {&(0x7f0000000c40)="d8", 0x1}, {&(0x7f0000000c80)="f2964dd1", 0x4}, {&(0x7f0000000cc0)="b8a2f6", 0x3}, {&(0x7f0000000d00)}, {&(0x7f0000000dc0)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="87", 0x1}, {&(0x7f0000000e80)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000ec0)=0x7fffffff, 0x4)

4m3.154042688s ago: executing program 2 (id=61):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000480)=0xe8)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

4m2.050963715s ago: executing program 2 (id=66):
socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(0x0, 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000020)

4m1.147496638s ago: executing program 2 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380), 0x0)
lsetxattr$security_capability(&(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', &(0x7f0000000180), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0x9}, {0x7ff, 0x28b19fb0}]}, 0x14, 0x1)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
unshare(0x42000000)

3m45.200847633s ago: executing program 32 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380), 0x0)
lsetxattr$security_capability(&(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', &(0x7f0000000180), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0x9}, {0x7ff, 0x28b19fb0}]}, 0x14, 0x1)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
unshare(0x42000000)

1m31.45847715s ago: executing program 5 (id=1265):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x963b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x4, 0x26, &(0x7f0000000200)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4"})

1m31.302417054s ago: executing program 5 (id=1269):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='27', 0x2)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x24, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)

1m31.205482545s ago: executing program 5 (id=1272):
syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x40, 0xf6, 0xf, 0x6}, {0x0, 0xd, 0x1}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newchain={0x34, 0x64, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xffe0, 0x8}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)

1m29.997396446s ago: executing program 5 (id=1281):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, 0x0, 0x0)
inotify_init1(0x0)

1m29.925838148s ago: executing program 5 (id=1283):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='100', 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1m29.82818774s ago: executing program 5 (id=1285):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000240)=""/222}, 0x78)

1m13.873655526s ago: executing program 33 (id=1285):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000240)=""/222}, 0x78)

3.687646281s ago: executing program 6 (id=2330):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'batadv0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0xfffffffffffffffe)

3.636714782s ago: executing program 6 (id=2333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='NULL', 0x4)

3.615257883s ago: executing program 6 (id=2334):
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/error_log\x00', 0x20202, 0x154)
write$binfmt_aout(r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.016201437s ago: executing program 6 (id=2337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e79"], 0x44}}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0)
prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000600)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

2.548001258s ago: executing program 3 (id=2342):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a14", 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.48198144s ago: executing program 3 (id=2343):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000980)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000a80)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000032c0)=""/4096, 0x1000}}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@abs, 0x6e)
syz_open_dev$usbfs(0x0, 0x1ad, 0x400800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000140)='10', 0x2)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000180)=ANY=[], 0x0)

1.877021774s ago: executing program 6 (id=2346):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x20082)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x1000)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
socket$key(0xf, 0x3, 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYRES32=r3], 0x90}}, 0x0)

1.876337004s ago: executing program 3 (id=2347):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r4 = gettid()
process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000340)={0x400000000000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0)
write(r5, &(0x7f0000000180)='1', 0x1)

1.425966335s ago: executing program 4 (id=2351):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x33fe0}, 0x33fe0}}, 0x0)

1.048080675s ago: executing program 4 (id=2353):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
write(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00')

1.014522945s ago: executing program 4 (id=2355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), 0x0, &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='NULL', 0x4)

953.998106ms ago: executing program 4 (id=2356):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000206010844a75758fc562300000000000000000100fffe050072000600000005000500020000000900020073797a320000000e13000300686173683a6e65742c696661636500009bff04ac007ff42e01f3e13756f6e57a521cf9482fbf52500f7b5c4477077ab23c4299d0c487e28d8022450a7b98747cfacd2ead2c00d3014be82266d684f9f8d7af0f121a7f7f3b3ca79e10759bbc24708911d6a1181cedde3b90e7f17a9facb49a010ffc24ee6dd24e79"], 0x44}}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0)
prlimit64(r0, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000600)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x3, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

952.491767ms ago: executing program 3 (id=2357):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000010046)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vcan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r7, @ANYBLOB="010028bd700002dcdf", @ANYBLOB="48007a801400020001ceb5581c2a57e668532c82020000000c000300000000ff7f00000024000100a2b8ed36683de7cee0e1139c3825456840c7afff0faa59a94c60"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

695.033373ms ago: executing program 6 (id=2358):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/set_event\x00', 0x121302, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xf, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x2a, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000780)='net/igmp\x00')
read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020)
preadv(r3, &(0x7f0000002800)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000028c0)={0xf, {"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", 0x1000}}, 0x1006)

208.452965ms ago: executing program 0 (id=2366):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(&(0x7f0000000300), 0x0, &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='NULL', 0x4)

200.822625ms ago: executing program 1 (id=2367):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x6, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0xc0002003})

140.273486ms ago: executing program 0 (id=2368):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000340)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000380)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@can={{0x3}, 0x8, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56)
readv(r0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/150, 0x96}, {0x0}], 0x2)

140.188837ms ago: executing program 1 (id=2369):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x84, @dev={0xac, 0x14, 0x14, 0x36}, 0x4e21, 0x3, 'lc\x00', 0x11, 0x10000004, 0x25}, 0x2c)

140.011037ms ago: executing program 0 (id=2370):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4048000)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

139.919277ms ago: executing program 1 (id=2371):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80", 0x1}], 0x1}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

114.624387ms ago: executing program 4 (id=2372):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x3, 0x8, 0x4, 0x6, 0x5, 0xfa, 0x101, 0x4, 0x5, 0xffffffff, 0x70f11a29, 0x332afdda, 0x1, 0x6, 0x4, 0x800, 0x1eb, 0xa0, 0x9, 0x0, 0x8b1d, 0x7, 0xfc8c, 0x10, 0xaa2, 0x608, 0x0, 0x38, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x10, 0xfffffff7, 0x62, 0x1, 0xa24, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x0, 0x7, 0x0, 0xfffffffb, 0x3116, 0x1, 0xfffffff3, 0xc85, 0x4, 0x4, 0x9, 0x8, 0xf, 0x8, 0x3a02, 0xe, 0x523, 0x7, 0x9, 0x8, 0x81, 0x9, 0xfffffff8, 0x6, 0xdb, 0x8, 0x0, 0xd8f, 0x8, 0x4, 0x200000, 0xffff, 0xfffff3ae, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x6, 0x0, 0x800, 0x1fe679e7, 0x1, 0x8, 0x2, 0xb, 0x7fff, 0xe, 0xfff, 0x0, 0x3, 0xffffff53, 0x5c, 0x1, 0x0, 0x76b, 0x9, 0x1, 0x8001, 0xfff, 0xffff, 0xbe7c, 0x3, 0x40, 0x4, 0xa, 0x0, 0x3d9b, 0x4, 0x5, 0x4, 0x8001, 0x8001, 0xfffffb63, 0x2, 0x1, 0x7, 0x9, 0x2d87, 0xfff, 0x7fffffff, 0x7fff, 0x7, 0x3ff, 0xae38, 0x8, 0x923, 0x0, 0x4, 0xffffff81, 0xca, 0x6, 0x1, 0x9, 0x200, 0x401, 0x5, 0xc7, 0x1000, 0x0, 0x48e, 0x1, 0x400, 0x5, 0x0, 0x80000008, 0x40400000, 0x2ac, 0x2, 0x80000000, 0x40, 0x6, 0x200, 0x8, 0x7, 0x0, 0x976, 0x9, 0x4, 0x1c0000, 0x9ee, 0x6, 0xe3, 0x5, 0x8000, 0x5, 0x9, 0xfc, 0x67, 0x2d, 0x3, 0x9, 0x3, 0x8, 0xed43, 0x5, 0x1000, 0xffff, 0x9, 0x1, 0x8, 0xfffffff9, 0x8, 0x10, 0x384a, 0x7, 0x2, 0x23ed, 0x4, 0x8, 0x7fff, 0x1, 0xfffffff9, 0x80, 0xc83, 0x8f, 0x7, 0x9, 0xc5b, 0x3, 0x3, 0x7, 0x4, 0x40, 0x5, 0xb, 0x0, 0x1000, 0xfffffffa, 0x5, 0x81, 0x1, 0x3, 0x3, 0x800, 0x1, 0x0, 0xfffffffa, 0x28, 0x80000001, 0x2, 0xffffffff, 0x661, 0x1, 0x8, 0x872, 0xb, 0x82, 0x726, 0x0, 0x0, 0x8000, 0xffffffff, 0x83, 0x4, 0x6, 0x81, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0xb0, 0xffffffff, 0x7, 0x7fffffff, 0xf, 0xf90, 0x7, 0x8586, 0x3d7]}]}]}}]}, 0x43c}}, 0x40844)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)

97.856187ms ago: executing program 1 (id=2373):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)}], 0x1}, 0x30008b08)

88.637298ms ago: executing program 4 (id=2374):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002dc0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002e00)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000002e40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002ec0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000002f40), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000002f80), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002f40), 0x6a4c40)
io_setup(0x6, &(0x7f00000032c0))

77.522228ms ago: executing program 0 (id=2375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x9}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x50}}, 0x800)

62.205128ms ago: executing program 3 (id=2376):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x1000000)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='./file0\n', 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='tcp\n', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r6, &(0x7f00000005c0)='ipv4\n', 0x5)

41.217699ms ago: executing program 0 (id=2377):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
write(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00')

40.635239ms ago: executing program 1 (id=2378):
connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'batadv0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, 0xfffffffffffffffe)

15.4273ms ago: executing program 3 (id=2379):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x2, 0x45200)
ioctl$DVB_DEMUX_DMX_QUERYBUF(r0, 0xc0186f3d, &(0x7f0000000280)={0x4, 0xd7c, 0x0, 0x9, 0x4, 0x9})
ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0)
symlinkat(&(0x7f0000000440)='./sys\x00', 0xffffffffffffff9c, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001440)=[{{&(0x7f0000001480)={0xa, 0x4e23, 0x6, @mcast2, 0x10}, 0x1c, &(0x7f00000014c0)}}], 0x1, 0x1c010)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000001500)={0x10000000, 0x1c6a8b68, 0x6})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001540)={0x0, 0x0, 0x0, &(0x7f00000015c0)})
mount(0x0, &(0x7f0000001600)='./sys\x00', &(0x7f0000001640)='sysfs\x00', 0x9048ef, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x1, 0x0)
write(r2, &(0x7f00000016c0)='usbip', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000001780)='./config\x00', &(0x7f00000017c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000001980)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000019c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a40)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001a80)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001ac0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c40)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')

997.72µs ago: executing program 1 (id=2380):
r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
syslog(0x3, &(0x7f0000000200)=""/88, 0x58)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='iocharset', &(0x7f0000000140)='\xe0^@&&}\'\x00', 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x446c, &(0x7f00000044c0)="$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")

0s ago: executing program 0 (id=2381):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)

kernel console output (not intermixed with test programs):

ke_syscall+0x98/0x290
[  195.430831][ T7531]  el0_svc_common+0x13c/0x258
[  195.431796][ T7531]  do_el0_svc+0x5c/0x134
[  195.432706][ T7531]  el0_svc+0x58/0x12c
[  195.433534][ T7531]  el0t_64_sync_handler+0x84/0xf0
[  195.434610][ T7531]  el0t_64_sync+0x18c/0x190
[  195.468868][   T27] audit: type=1326 audit(195.460:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.1101" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93d7a9a8 code=0x0
[  195.677966][ T7147] net_ratelimit: 50 callbacks suppressed
[  195.913495][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.919749][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.020692][ T7556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  196.035542][ T7556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.046758][ T7556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.767816][ T7575] loop0: detected capacity change from 0 to 3904
[  196.828265][ T7580] FAULT_INJECTION: forcing a failure.
[  196.828265][ T7580] name failslab, interval 1, probability 5, space 0, times 9993
[  196.830909][ T7580] CPU: 1 PID: 7580 Comm: syz.4.1118 Not tainted syzkaller #0
[  196.832297][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  196.834184][ T7580] Call trace:
[  196.834824][ T7580]  dump_backtrace+0x1c4/0x1f0
[  196.835747][ T7580]  show_stack+0x2c/0x3c
[  196.836594][ T7580]  __dump_stack+0x30/0x40
[  196.837483][ T7580]  dump_stack_lvl+0xf4/0x15c
[  196.838380][ T7580]  dump_stack+0x1c/0x5c
[  196.839251][ T7580]  should_fail_ex+0x3cc/0x524
[  196.840109][ T7580]  __should_failslab+0xc0/0x11c
[  196.840962][ T7580]  should_failslab+0x10/0x28
[  196.841878][ T7580]  kmem_cache_alloc+0x88/0x310
[  196.842722][ T7580]  create_new_namespaces+0x48/0x604
[  196.843666][ T7580]  __arm64_sys_setns+0x278/0x12d4
[  196.844638][ T7580]  invoke_syscall+0x98/0x290
[  196.845506][ T7580]  el0_svc_common+0x13c/0x258
[  196.846410][ T7580]  do_el0_svc+0x5c/0x134
[  196.847251][ T7580]  el0_svc+0x58/0x12c
[  196.847995][ T7580]  el0t_64_sync_handler+0x84/0xf0
[  196.848881][ T7580]  el0t_64_sync+0x18c/0x190
[  196.900510][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.902905][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.908093][ T7590] misc userio: Invalid payload size
[  197.018934][ T7593] misc userio: No port type given on /dev/userio
[  197.678167][   T27] audit: type=1326 audit(197.670:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.1.1124" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93d7a9a8 code=0x0
[  200.125562][ T7656] nvmet: disable ns before setting buffered_io value.
[  200.132285][ T7656] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  200.134143][ T7656] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  200.955856][    C1] net_ratelimit: 61 callbacks suppressed
[  201.074942][ T7676] FAULT_INJECTION: forcing a failure.
[  201.074942][ T7676] name failslab, interval 1, probability 5, space 0, times 10000
[  201.079475][ T7676] CPU: 1 PID: 7676 Comm: syz.0.1150 Not tainted syzkaller #0
[  201.081046][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  201.082876][ T7676] Call trace:
[  201.083440][ T7676]  dump_backtrace+0x1c4/0x1f0
[  201.084253][ T7676]  show_stack+0x2c/0x3c
[  201.084973][ T7676]  __dump_stack+0x30/0x40
[  201.085733][ T7676]  dump_stack_lvl+0xf4/0x15c
[  201.086555][ T7676]  dump_stack+0x1c/0x5c
[  201.087413][ T7676]  should_fail_ex+0x3cc/0x524
[  201.088301][ T7676]  __should_failslab+0xc0/0x11c
[  201.089155][ T7676]  should_failslab+0x10/0x28
[  201.089928][ T7676]  slab_pre_alloc_hook+0x6c/0x31c
[  201.090885][ T7676]  kmem_cache_alloc_lru+0x60/0x284
[  201.091775][ T7676]  sock_alloc_inode+0x2c/0xcc
[  201.092678][ T7676]  new_inode_pseudo+0x68/0x1cc
[  201.093596][ T7676]  __sock_create+0x138/0x8a8
[  201.094497][ T7676]  __sys_socket+0xc0/0x1b0
[  201.095354][ T7676]  __arm64_sys_socket+0x7c/0x94
[  201.096331][ T7676]  invoke_syscall+0x98/0x290
[  201.097176][ T7676]  el0_svc_common+0x13c/0x258
[  201.098049][ T7676]  do_el0_svc+0x5c/0x134
[  201.098816][ T7676]  el0_svc+0x58/0x12c
[  201.099574][ T7676]  el0t_64_sync_handler+0x84/0xf0
[  201.100438][ T7676]  el0t_64_sync+0x18c/0x190
[  201.789513][ T7693] nvmet: disable ns before setting buffered_io value.
[  201.791455][ T7694] ebt_limit: overflow, try lower: 0/0
[  201.793873][ T7693] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  201.799880][ T7693] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  201.889947][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.893294][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.807927][ T7729] nvmet: disable ns before setting buffered_io value.
[  202.817297][ T7729] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  202.819484][ T7729] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  203.241822][ T7745] loop1: detected capacity change from 0 to 256
[  203.290839][ T7745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  203.911289][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'.
[  203.912881][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'.
[  203.914715][ T7750] netlink: 'syz.1.1175': attribute type 15 has an invalid length.
[  204.083020][ T7751] loop3: detected capacity change from 0 to 64
[  204.096061][ T4337] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  204.097935][ T4337] Bluetooth: hci5: Injecting HCI hardware error event
[  204.100251][ T4333] Bluetooth: hci5: hardware error 0x00
[  204.148899][ T7753] loop5: detected capacity change from 0 to 8
[  204.180157][ T7753] SQUASHFS error: Failed to read block 0x2000000000001ea: -5
[  204.182216][ T7753] unable to read xattr id index table
[  204.223755][   T27] audit: type=1326 audit(204.210:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.1180" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0
[  204.280591][ T7756] loop1: detected capacity change from 0 to 32768
[  204.331413][ T7756] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  204.399524][ T7768] nvmet: disable ns before setting buffered_io value.
[  204.418710][ T7768] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  204.424925][ T4329] ocfs2: Unmounting device (7,1) on (node local)
[  204.430869][ T7768] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  204.954217][ T7788] loop1: detected capacity change from 0 to 256
[  205.009343][ T7788] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  205.256113][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  205.257633][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'.
[  205.259540][ T7800] netlink: 'syz.1.1190': attribute type 15 has an invalid length.
[  205.630303][ T7811] nvmet: disable ns before setting buffered_io value.
[  205.634892][ T7811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  205.642646][ T7811] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  205.677580][ T7815] loop4: detected capacity change from 0 to 2048
[  205.811513][   T27] audit: type=1326 audit(205.780:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.4.1201" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  205.943904][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.946438][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.041518][ T7836] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  206.149878][ T7842] device syzkaller1 entered promiscuous mode
[  206.235847][    C1] net_ratelimit: 65 callbacks suppressed
[  206.395985][ T4333] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  206.538764][ T7848] nvmet: disable ns before setting buffered_io value.
[  206.541146][ T7848] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  206.543328][ T7848] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  207.873711][ T7852] binder: 7851:7852 ioctl c0306201 0 returned -14
[  207.876649][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.880283][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.880818][ T7852] binder: 7851:7852 got transaction to invalid handle, 1
[  207.883034][ T7852] binder: 7852:7851 cannot find target node
[  207.884265][ T7852] binder: 7851:7852 transaction async to 0:0 failed 38/29201/-22, size 0-0 line 3062
[  207.995544][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.002758][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.037770][ T7872] loop3: detected capacity change from 0 to 256
[  208.070140][ T7872] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  208.072514][ T7874] nvmet: disable ns before setting buffered_io value.
[  208.074690][ T7874] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  208.076748][ T7874] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  208.084226][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.085874][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.130956][   T27] audit: type=1326 audit(208.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.1223" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0
[  208.271793][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'.
[  208.273497][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'.
[  208.275094][ T7879] netlink: 'syz.3.1221': attribute type 18 has an invalid length.
[  208.727976][ T7882] binder: 7881:7882 ioctl c0306201 0 returned -14
[  208.733046][ T7882] binder: 7881:7882 got transaction to invalid handle, 1
[  208.734419][ T7882] binder: 7882:7881 cannot find target node
[  208.735685][ T7882] binder: 7881:7882 transaction async to 0:0 failed 42/29201/-22, size 0-0 line 3062
[  208.761711][ T7884] nvmet: disable ns before setting buffered_io value.
[  208.763822][ T7884] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  208.773044][ T7884] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  208.788626][ T7884] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  208.793332][ T7884] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  208.801758][ T7884] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  208.883525][ T7891] netlink: 'syz.5.1229': attribute type 3 has an invalid length.
[  209.948973][ T7900] loop5: detected capacity change from 0 to 512
[  210.278112][ T7906] netlink: 'syz.0.1234': attribute type 16 has an invalid length.
[  210.278125][ T7906] netlink: 'syz.0.1234': attribute type 17 has an invalid length.
[  210.298544][ T7909] binder: 7907:7909 ioctl c0306201 0 returned -14
[  210.301583][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  210.303395][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  210.303536][ T7900] EXT4-fs (loop5): 1 orphan inode deleted
[  210.305599][ T7900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  210.305613][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  210.310948][ T7909] binder: 7907:7909 got transaction to invalid handle, 1
[  210.312338][ T7909] binder: 7909:7907 cannot find target node
[  210.313298][ T7909] binder: 7907:7909 transaction async to 0:0 failed 46/29201/-22, size 0-0 line 3062
[  210.348526][ T7913] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1236'.
[  210.372488][ T7915] nvmet: disable ns before setting buffered_io value.
[  210.398949][ T7917] nvmet: disable ns before setting buffered_io value.
[  210.408072][ T7917] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  210.423033][ T7917] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  210.428932][ T7917] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  210.439002][ T7917] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  210.441225][ T7917] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  210.450590][ T7923] loop0: detected capacity change from 0 to 256
[  210.465380][ T7923] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  210.589414][   T27] audit: type=1326 audit(210.580:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.1245" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff93d7a9a8 code=0x0
[  210.711101][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'.
[  210.712907][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'.
[  210.714603][ T7934] netlink: 'syz.0.1242': attribute type 18 has an invalid length.
[  210.889759][ T4769] EXT4-fs (loop5): unmounting filesystem.
[  211.275842][    C1] net_ratelimit: 55 callbacks suppressed
[  212.632414][ T7948] binder: 7947:7948 got transaction to invalid handle, 1
[  212.634336][ T7948] binder: 7948:7947 cannot find target node
[  212.635556][ T7948] binder: 7947:7948 transaction async to 0:0 failed 50/29201/-22, size 0-0 line 3062
[  212.663466][ T7950] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1251'.
[  212.698332][ T7957] nvmet: disable ns before setting buffered_io value.
[  212.700416][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  212.701220][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'.
[  212.702377][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  212.709865][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  212.711789][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  212.713382][ T7957] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  213.043304][ T7960] cfg80211: Invalid regulatory domain detected: BB
[  213.055634][   T27] audit: type=1326 audit(213.040:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.3.1258" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa417a9a8 code=0x0
[  213.131683][ T7968] loop1: detected capacity change from 0 to 32768
[  213.139692][ T7968] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1257 (7968)
[  213.188555][ T7972] loop5: detected capacity change from 0 to 256
[  213.222235][ T7972] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  213.298074][ T7968] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  213.303007][ T7968] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  213.307509][ T7968] BTRFS info (device loop1): force zlib compression, level 3
[  213.309345][ T7968] BTRFS info (device loop1): turning on flush-on-commit
[  213.310884][ T7968] BTRFS info (device loop1): max_inline at 4096
[  213.312206][ T7968] BTRFS info (device loop1): using free space tree
[  213.426721][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'.
[  213.428335][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'.
[  213.430013][ T7984] netlink: 'syz.5.1259': attribute type 18 has an invalid length.
[  213.712266][ T7968] BTRFS info (device loop1): enabling ssd optimizations
[  213.800808][ T4329] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  215.407001][ T8019] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1266'.
[  215.476740][ T8024] FAULT_INJECTION: forcing a failure.
[  215.476740][ T8024] name failslab, interval 1, probability 5, space 0, times 10000
[  215.483494][ T8024] CPU: 1 PID: 8024 Comm: syz.5.1269 Not tainted syzkaller #0
[  215.484703][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  215.486571][ T8024] Call trace:
[  215.487106][ T8024]  dump_backtrace+0x1c4/0x1f0
[  215.488012][ T8024]  show_stack+0x2c/0x3c
[  215.488704][ T8024]  __dump_stack+0x30/0x40
[  215.489531][ T8024]  dump_stack_lvl+0xf4/0x15c
[  215.490450][ T8024]  dump_stack+0x1c/0x5c
[  215.491238][ T8024]  should_fail_ex+0x3cc/0x524
[  215.492139][ T8024]  __should_failslab+0xc0/0x11c
[  215.493049][ T8024]  should_failslab+0x10/0x28
[  215.493867][ T8024]  kmem_cache_alloc+0x88/0x310
[  215.494762][ T8024]  dst_alloc+0xfc/0x16c
[  215.495550][ T8024]  ip_route_output_key_hash_rcu+0xfbc/0x1dfc
[  215.496574][ T8024]  ip_route_output_key_hash+0x1b0/0x2fc
[  215.497661][ T8024]  ip_route_output_flow+0x3c/0x158
[  215.498509][ T8024]  ip_route_newports+0x114/0x1ac
[  215.499430][ T8024]  tcp_v4_connect+0x9e8/0x1460
[  215.500711][ T8024]  __inet_stream_connect+0x1f8/0xc48
[  215.501731][ T8024]  tcp_sendmsg_fastopen+0x314/0x564
[  215.502676][ T8024]  tcp_sendmsg_locked+0x2c50/0x3164
[  215.502694][ T8024]  tcp_sendmsg+0x40/0x64
[  215.502706][ T8024]  inet_sendmsg+0x154/0x27c
[  215.503808][ T8024]  __sys_sendto+0x324/0x440
[  215.505472][ T8024]  __arm64_sys_sendto+0xe4/0x104
[  215.507377][ T8024]  invoke_syscall+0x98/0x290
[  215.508300][ T8024]  el0_svc_common+0x13c/0x258
[  215.509244][ T8024]  do_el0_svc+0x5c/0x134
[  215.510074][ T8024]  el0_svc+0x58/0x12c
[  215.510850][ T8024]  el0t_64_sync_handler+0x84/0xf0
[  215.511703][ T8024]  el0t_64_sync+0x18c/0x190
[  215.900697][   T27] audit: type=1326 audit(215.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.5.1272" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9077a9a8 code=0x0
[  216.315836][    C1] net_ratelimit: 44 callbacks suppressed
[  216.323107][ T8042] loop0: detected capacity change from 0 to 3904
[  216.378426][ T8044] Bluetooth: MGMT ver 1.22
[  216.380223][ T8042]  loop0:
[  216.403759][ T8046] loop1: detected capacity change from 0 to 256
[  216.477797][ T7674] I/O error, dev loop0, sector 3712 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.712224][ T8058] loop1: detected capacity change from 0 to 1024
[  216.714908][ T8058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  216.718582][ T8058] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  216.721085][ T8058] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  216.750037][ T8058] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1280: blocks 2-3 from inode overlap system zone
[  216.762695][ T8058] EXT4-fs (loop1): failed to initialize system zone (-117)
[  216.768662][ T8058] EXT4-fs (loop1): mount failed
[  217.251612][ T8076] loop3: detected capacity change from 0 to 256
[  217.313272][ T8078] loop0: detected capacity change from 0 to 3904
[  217.327692][ T8078]  loop0:
[  217.365630][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'.
[  217.383485][   T27] audit: type=1326 audit(217.370:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8079 comm="syz.4.1291" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  217.507990][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.516930][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.175561][ T8103] loop3: detected capacity change from 0 to 2048
[  218.212758][ T8103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  218.251178][ T8103] fs-verity: sha512 using implementation "sha512-ce"
[  218.312147][ T4328] EXT4-fs (loop3): unmounting filesystem.
[  218.372874][ T8112] loop3: detected capacity change from 0 to 256
[  218.492863][ T8115] loop0: detected capacity change from 0 to 3904
[  218.529441][ T8115]  loop0:
[  218.579070][ T8120] 9pnet_virtio: no channels available for device ./proc/file0
[  218.583727][ T8120] FAULT_INJECTION: forcing a failure.
[  218.583727][ T8120] name failslab, interval 1, probability 5, space 0, times 9998
[  218.596220][ T8120] CPU: 1 PID: 8120 Comm: syz.1.1306 Not tainted syzkaller #0
[  218.597687][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  218.599283][ T8120] Call trace:
[  218.599863][ T8120]  dump_backtrace+0x1c4/0x1f0
[  218.600677][ T8120]  show_stack+0x2c/0x3c
[  218.601404][ T8120]  __dump_stack+0x30/0x40
[  218.602192][ T8120]  dump_stack_lvl+0xf4/0x15c
[  218.602971][ T8120]  dump_stack+0x1c/0x5c
[  218.603702][ T8120]  should_fail_ex+0x3cc/0x524
[  218.604605][ T8120]  __should_failslab+0xc0/0x11c
[  218.605437][ T8120]  should_failslab+0x10/0x28
[  218.606373][ T8120]  kmem_cache_alloc+0x88/0x310
[  218.607440][ T8120]  skb_clone+0x194/0x308
[  218.608324][ T8120]  pfkey_sendmsg+0x3d4/0xe10
[  218.609234][ T8120]  ____sys_sendmsg+0x588/0x90c
[  218.610196][ T8120]  __sys_sendmsg+0x288/0x374
[  218.611188][ T8120]  __arm64_sys_sendmsg+0x80/0x94
[  218.612189][ T8120]  invoke_syscall+0x98/0x290
[  218.612920][ T8120]  el0_svc_common+0x13c/0x258
[  218.613724][ T8120]  do_el0_svc+0x5c/0x134
[  218.614356][ T8120]  el0_svc+0x58/0x12c
[  218.615020][ T8120]  el0t_64_sync_handler+0x84/0xf0
[  218.616018][ T8120]  el0t_64_sync+0x18c/0x190
[  218.772958][ T8129] loop3: detected capacity change from 0 to 512
[  218.790803][ T8129] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  218.853566][ T8129] EXT4-fs (loop3): 1 truncate cleaned up
[  218.858822][ T8129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  218.930972][ T4328] EXT4-fs (loop3): unmounting filesystem.
[  219.018652][ T8139] loop3: detected capacity change from 0 to 512
[  219.027849][ T8139] ext4: Unknown parameter 'obj_role'
[  219.469903][ T8145]  loop0:
[  219.948244][ T8163] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  220.019086][ T8168] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  220.035135][ T8167] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  220.043090][ T8167] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  220.055006][ T8167] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  220.066230][ T8167] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  220.508741][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'.
[  220.544739][ T8185] FAULT_INJECTION: forcing a failure.
[  220.544739][ T8185] name failslab, interval 1, probability 5, space 0, times 9997
[  220.558983][ T8185] CPU: 0 PID: 8185 Comm: syz.4.1334 Not tainted syzkaller #0
[  220.560482][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  220.562541][ T8185] Call trace:
[  220.563134][ T8185]  dump_backtrace+0x1c4/0x1f0
[  220.564017][ T8185]  show_stack+0x2c/0x3c
[  220.564836][ T8185]  __dump_stack+0x30/0x40
[  220.565654][ T8185]  dump_stack_lvl+0xf4/0x15c
[  220.566538][ T8185]  dump_stack+0x1c/0x5c
[  220.567281][ T8185]  should_fail_ex+0x3cc/0x524
[  220.568116][ T8185]  __should_failslab+0xc0/0x11c
[  220.569010][ T8185]  should_failslab+0x10/0x28
[  220.569819][ T8185]  __kmem_cache_alloc_node+0x7c/0x318
[  220.570808][ T8185]  __kmalloc+0xc4/0x180
[  220.571643][ T8185]  security_sk_alloc+0x54/0x140
[  220.572619][ T8185]  sk_prot_alloc+0xe0/0x1e8
[  220.573407][ T8185]  sk_alloc+0x44/0x3a0
[  220.574137][ T8185]  __netlink_create+0x80/0x2a8
[  220.574937][ T8185]  netlink_create+0x3b8/0x65c
[  220.575788][ T8185]  __sock_create+0x448/0x8a8
[  220.576561][ T8185]  __sys_socket+0xc0/0x1b0
[  220.577369][ T8185]  __arm64_sys_socket+0x7c/0x94
[  220.578318][ T8185]  invoke_syscall+0x98/0x290
[  220.579208][ T8185]  el0_svc_common+0x13c/0x258
[  220.580009][ T8185]  do_el0_svc+0x5c/0x134
[  220.580734][ T8185]  el0_svc+0x58/0x12c
[  220.581427][ T8185]  el0t_64_sync_handler+0x84/0xf0
[  220.582306][ T8185]  el0t_64_sync+0x18c/0x190
[  220.812321][ T8205] device syzkaller1 entered promiscuous mode
[  220.812830][ T8203] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  220.825524][ T8203] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  220.835271][ T8203] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  220.846672][ T8203] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  220.854099][ T8203] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  221.166651][ T8219] binder: tried to use weak ref as strong ref
[  221.172743][ T8219] binder: 8218:8219 Acquire 1 refcount change on invalid ref 0 ret -22
[  221.176877][ T8219] binder: 8218:8219 got transaction to invalid handle, 1
[  221.178436][ T8219] binder: 8219:8218 cannot find target node
[  221.183844][ T8219] binder: 8218:8219 transaction async to 0:0 failed 53/29201/-22, size 0-0 line 3062
[  221.190147][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'.
[  221.193641][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'.
[  221.249894][ T8221] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.251975][ T8221] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.253628][ T8221] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.255139][ T8221] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.298410][ T8223] nvmet: disable ns before setting buffered_io value.
[  221.354399][ T8225] set_capacity_and_notify: 3 callbacks suppressed
[  221.354404][ T8225] loop0: detected capacity change from 0 to 3904
[  221.356927][    C0] net_ratelimit: 38 callbacks suppressed
[  221.412148][ T8229] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  221.474877][ T8225]  loop0:
[  221.510758][ T8233] loop3: detected capacity change from 0 to 4096
[  221.521909][ T8234] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  221.828538][ T8234] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  221.841790][ T8234] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  221.851663][ T8234] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  221.855726][ T8234] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  221.892918][ T8233] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  221.900589][ T8237] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.916184][ T8233] NILFS (loop3): mounting fs with errors
[  222.792762][ T8254] binder: 8253:8254 ioctl 4018620d 0 returned -22
[  222.794276][ T8254] binder: tried to use weak ref as strong ref
[  222.796337][ T8254] binder: 8253:8254 Acquire 1 refcount change on invalid ref 0 ret -22
[  222.800164][ T8256] nvmet: disable ns before setting buffered_io value.
[  222.802584][ T8254] binder: 8253:8254 got transaction to invalid handle, 1
[  222.804062][ T8254] binder: 8254:8253 cannot find target node
[  222.807421][ T8254] binder: 8253:8254 transaction async to 0:0 failed 56/29201/-22, size 0-0 line 3062
[  222.860160][ T8260] loop0: detected capacity change from 0 to 256
[  222.870930][ T8260] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  222.975152][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  222.977959][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  222.979809][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  222.990846][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  222.997204][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  223.040132][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.041747][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.142278][ T8270] FAULT_INJECTION: forcing a failure.
[  223.142278][ T8270] name failslab, interval 1, probability 5, space 0, times 9996
[  223.144964][ T8270] CPU: 0 PID: 8270 Comm: syz.4.1369 Not tainted syzkaller #0
[  223.146367][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  223.148286][ T8270] Call trace:
[  223.148868][ T8270]  dump_backtrace+0x1c4/0x1f0
[  223.149703][ T8270]  show_stack+0x2c/0x3c
[  223.150498][ T8270]  __dump_stack+0x30/0x40
[  223.151255][ T8270]  dump_stack_lvl+0xf4/0x15c
[  223.152180][ T8270]  dump_stack+0x1c/0x5c
[  223.153021][ T8270]  should_fail_ex+0x3cc/0x524
[  223.153823][ T8270]  __should_failslab+0xc0/0x11c
[  223.154744][ T8270]  should_failslab+0x10/0x28
[  223.155621][ T8270]  kmem_cache_alloc+0x88/0x310
[  223.156546][ T8270]  __sigqueue_alloc+0x3e0/0x4e4
[  223.157443][ T8270]  __send_signal_locked+0x1d8/0xc88
[  223.158472][ T8270]  do_notify_parent+0x9bc/0xbe4
[  223.159460][ T8270]  release_task+0x11d0/0x1510
[  223.160375][ T8270]  do_exit+0x10bc/0x19ac
[  223.161178][ T8270]  do_group_exit+0x198/0x238
[  223.162031][ T8270]  get_signal+0x11f4/0x133c
[  223.162924][ T8270]  do_notify_resume+0x364/0x2c84
[  223.163842][ T8270]  el0_svc+0x9c/0x12c
[  223.164598][ T8270]  el0t_64_sync_handler+0x84/0xf0
[  223.165583][ T8270]  el0t_64_sync+0x18c/0x190
[  223.250782][ T8275] loop0: detected capacity change from 0 to 3904
[  223.931630][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.948670][ T8258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.543536][ T8303] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  224.545719][ T8303] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  224.547741][ T8303] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  224.549455][ T8303] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  224.555974][ T8303] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  224.591786][ T8258] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.595977][ T8258] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.600309][ T8258] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.604108][ T8258] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.651670][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.654400][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.807177][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'.
[  224.808935][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'.
[  224.813930][ T8290] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.815581][ T8290] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.817500][ T8290] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.819250][ T8290] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.374491][ T8320] binder: 8318:8320 ioctl 4018620d 0 returned -22
[  225.378066][ T8320] binder: tried to use weak ref as strong ref
[  225.382599][ T8320] binder: 8318:8320 Acquire 1 refcount change on invalid ref 0 ret -22
[  225.388371][ T8320] binder: 8318:8320 got transaction to invalid handle, 1
[  225.394854][ T8320] binder: 8320:8318 cannot find target node
[  225.396198][ T8320] binder: 8318:8320 transaction async to 0:0 failed 59/29201/-22, size 0-0 line 3062
[  225.883827][ T8330] nvmet: disable ns before setting buffered_io value.
[  225.893520][ T8330] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  225.899758][ T8330] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  225.905409][ T8330] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  225.910782][ T8330] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  225.919275][ T8330] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  226.031608][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.036161][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.313561][ T8342] FAULT_INJECTION: forcing a failure.
[  226.313561][ T8342] name failslab, interval 1, probability 5, space 0, times 9995
[  226.318012][ T8342] CPU: 1 PID: 8342 Comm: syz.0.1394 Not tainted syzkaller #0
[  226.319609][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  226.321512][ T8342] Call trace:
[  226.321520][ T8342]  dump_backtrace+0x1c4/0x1f0
[  226.321539][ T8342]  show_stack+0x2c/0x3c
[  226.323733][ T8342]  __dump_stack+0x30/0x40
[  226.324515][ T8342]  dump_stack_lvl+0xf4/0x15c
[  226.325326][ T8342]  dump_stack+0x1c/0x5c
[  226.326036][ T8342]  should_fail_ex+0x3cc/0x524
[  226.326916][ T8342]  __should_failslab+0xc0/0x11c
[  226.327858][ T8342]  should_failslab+0x10/0x28
[  226.328740][ T8342]  kmem_cache_alloc_node+0x8c/0x344
[  226.329756][ T8342]  alloc_vmap_area+0x13c/0x169c
[  226.330643][ T8342]  __get_vm_area_node+0x178/0x31c
[  226.331519][ T8342]  __vmalloc_node_range+0x1d4/0xe70
[  226.332471][ T8342]  vzalloc+0x9c/0xd4
[  226.333179][ T8342]  n_tty_open+0x24/0x174
[  226.334012][ T8342]  tty_ldisc_setup+0xc4/0x40c
[  226.334941][ T8342]  tty_init_dev+0x208/0x3f4
[  226.335810][ T8342]  ptmx_open+0xfc/0x2d4
[  226.336598][ T8342]  chrdev_open+0x3d0/0x51c
[  226.337341][ T8342]  do_dentry_open+0x738/0xf8c
[  226.338113][ T8342]  vfs_open+0x7c/0x90
[  226.338853][ T8342]  path_openat+0x1fc0/0x27a0
[  226.339779][ T8342]  do_filp_open+0x198/0x38c
[  226.340572][ T8342]  do_sys_openat2+0x134/0x3fc
[  226.341399][ T8342]  __arm64_sys_openat+0x11c/0x150
[  226.342274][ T8342]  invoke_syscall+0x98/0x290
[  226.343101][ T8342]  el0_svc_common+0x13c/0x258
[  226.343962][ T8342]  do_el0_svc+0x5c/0x134
[  226.344759][ T8342]  el0_svc+0x58/0x12c
[  226.345448][ T8342]  el0t_64_sync_handler+0x84/0xf0
[  226.346484][ T8342]  el0t_64_sync+0x18c/0x190
[  226.350794][ T8342] syz.0.1394: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  226.353672][ T8342] CPU: 1 PID: 8342 Comm: syz.0.1394 Not tainted syzkaller #0
[  226.355008][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  226.356752][ T8342] Call trace:
[  226.357377][ T8342]  dump_backtrace+0x1c4/0x1f0
[  226.358283][ T8342]  show_stack+0x2c/0x3c
[  226.359111][ T8342]  __dump_stack+0x30/0x40
[  226.359922][ T8342]  dump_stack_lvl+0xf4/0x15c
[  226.360752][ T8342]  dump_stack+0x1c/0x5c
[  226.361601][ T8342]  warn_alloc+0x214/0x324
[  226.362358][ T8342]  __vmalloc_node_range+0x24c/0xe70
[  226.363249][ T8342]  vzalloc+0x9c/0xd4
[  226.363921][ T8342]  n_tty_open+0x24/0x174
[  226.364728][ T8342]  tty_ldisc_setup+0xc4/0x40c
[  226.365527][ T8342]  tty_init_dev+0x208/0x3f4
[  226.366415][ T8342]  ptmx_open+0xfc/0x2d4
[  226.367233][ T8342]  chrdev_open+0x3d0/0x51c
[  226.368087][ T8342]  do_dentry_open+0x738/0xf8c
[  226.368986][ T8342]  vfs_open+0x7c/0x90
[  226.369751][ T8342]  path_openat+0x1fc0/0x27a0
[  226.370567][ T8342]  do_filp_open+0x198/0x38c
[  226.371461][ T8342]  do_sys_openat2+0x134/0x3fc
[  226.372300][ T8342]  __arm64_sys_openat+0x11c/0x150
[  226.373172][ T8342]  invoke_syscall+0x98/0x290
[  226.373968][ T8342]  el0_svc_common+0x13c/0x258
[  226.374823][ T8342]  do_el0_svc+0x5c/0x134
[  226.375615][ T8342]  el0_svc+0x58/0x12c
[  226.376369][ T8342]  el0t_64_sync_handler+0x84/0xf0
[  226.377257][ T8342]  el0t_64_sync+0x18c/0x190
[  226.385938][ T8342] Mem-Info:
[  226.386548][ T8342] active_anon:10670 inactive_anon:0 isolated_anon:0
[  226.386548][ T8342]  active_file:5301 inactive_file:2153 isolated_file:0
[  226.386548][ T8342]  unevictable:768 dirty:204 writeback:0
[  226.386548][ T8342]  slab_reclaimable:29198 slab_unreclaimable:100785
[  226.386548][ T8342]  mapped:32444 shmem:6713 pagetables:630
[  226.386548][ T8342]  sec_pagetables:0 bounce:0
[  226.386548][ T8342]  kernel_misc_reclaimable:0
[  226.386548][ T8342]  free:1419215 free_pcp:4104 free_cma:7360
[  226.403900][ T8342] Node 0 active_anon:37080kB inactive_anon:0kB active_file:21204kB inactive_file:8612kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:128476kB dirty:816kB writeback:0kB shmem:21252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8980kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no
[  226.410143][ T4694] net_ratelimit: 47 callbacks suppressed
[  226.427574][ T8342] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB
[  226.433157][ T8342] lowmem_reserve[]: 0 0 3532 3532 3532
[  226.434313][ T8342] Node 0 Normal free:2615884kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:31280kB inactive_anon:0kB active_file:21204kB inactive_file:8612kB unevictable:3072kB writepending:816kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:11632kB local_pcp:8792kB free_cma:0kB
[  226.440815][ T8342] lowmem_reserve[]: 0 0 0 0 0
[  226.441977][ T8342] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB
[  226.444905][ T8342] Node 0 Normal: 1015*4kB (UME) 1367*8kB (UME) 634*16kB (UME) 457*32kB (UME) 156*64kB (UME) 20*128kB (UME) 28*256kB (M) 14*512kB (ME) 17*1024kB (ME) 12*2048kB (ME) 612*4096kB (UM) = 2615380kB
[  226.449228][ T8342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.451283][ T8342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[  226.453074][ T8342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  226.454636][ T8342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[  226.457295][ T8342] 12017 total pagecache pages
[  226.458214][ T8342] 3 pages in swap cache
[  226.459257][ T8342] Free swap  = 124228kB
[  226.460132][ T8342] Total swap = 124996kB
[  226.460961][ T8342] 2097152 pages RAM
[  226.461885][ T8342] 0 pages HighMem/MovableOnly
[  226.463098][ T8342] 421949 pages reserved
[  226.463952][ T8342] 8192 pages cma reserved
[  226.465091][ T8342] 0 pages hwpoisoned
[  226.466603][ T8342] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  226.953922][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'.
[  226.955763][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  226.964300][ T8356] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.965936][ T8356] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.967419][ T8356] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.968782][ T8356] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.304449][ T8359] binder: 8358:8359 ioctl c0306201 0 returned -14
[  227.309429][ T8359] binder: 8358:8359 got transaction to invalid handle, 1
[  227.310941][ T8359] binder: 8359:8358 cannot find target node
[  227.312181][ T8359] binder: 8358:8359 transaction async to 0:0 failed 63/29201/-22, size 0-0 line 3062
[  227.431621][ T8367] nvmet: disable ns before setting buffered_io value.
[  227.434022][ T8367] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  227.463258][ T8369] FAULT_INJECTION: forcing a failure.
[  227.463258][ T8369] name failslab, interval 1, probability 5, space 0, times 9994
[  227.469094][ T8369] CPU: 1 PID: 8369 Comm: syz.4.1403 Not tainted syzkaller #0
[  227.470572][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  227.472556][ T8369] Call trace:
[  227.473135][ T8369]  dump_backtrace+0x1c4/0x1f0
[  227.474089][ T8369]  show_stack+0x2c/0x3c
[  227.474926][ T8369]  __dump_stack+0x30/0x40
[  227.475731][ T8369]  dump_stack_lvl+0xf4/0x15c
[  227.476635][ T8369]  dump_stack+0x1c/0x5c
[  227.477411][ T8369]  should_fail_ex+0x3cc/0x524
[  227.478231][ T8369]  __should_failslab+0xc0/0x11c
[  227.479150][ T8369]  should_failslab+0x10/0x28
[  227.479934][ T8369]  kmem_cache_alloc_node+0x8c/0x344
[  227.480970][ T8369]  __alloc_skb+0x128/0x728
[  227.481837][ T8369]  netlink_sendmsg+0x558/0x9d8
[  227.482771][ T8369]  ____sys_sendmsg+0x588/0x90c
[  227.483670][ T8369]  __sys_sendmsg+0x288/0x374
[  227.484537][ T8369]  __arm64_sys_sendmsg+0x80/0x94
[  227.485476][ T8369]  invoke_syscall+0x98/0x290
[  227.486347][ T8369]  el0_svc_common+0x13c/0x258
[  227.487258][ T8369]  do_el0_svc+0x5c/0x134
[  227.488102][ T8369]  el0_svc+0x58/0x12c
[  227.488835][ T8369]  el0t_64_sync_handler+0x84/0xf0
[  227.489780][ T8369]  el0t_64_sync+0x18c/0x190
[  227.501697][ T8367] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  227.503665][ T8367] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  227.505717][ T8367] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  227.510674][ T8367] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  228.443020][ T8388] binder: 8387:8388 ioctl c0306201 0 returned -14
[  228.448939][ T8388] binder: 8387:8388 got transaction to invalid handle, 1
[  228.450356][ T8388] binder: 8388:8387 cannot find target node
[  228.451420][ T8388] binder: 8387:8388 transaction async to 0:0 failed 67/29201/-22, size 0-0 line 3062
[  228.540669][ T8395] loop3: detected capacity change from 0 to 1024
[  228.868690][ T8395] hfsplus: invalid length 1280 has been corrected to 255
[  228.874706][ T8395] hfsplus: invalid length 1280 has been corrected to 255
[  228.976361][ T8402] nvmet: disable ns before setting buffered_io value.
[  228.979186][ T8402] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  228.981062][ T8402] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  228.983294][ T8402] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  229.016452][ T8402] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  229.018786][ T8402] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  229.442540][ T8408] loop4: detected capacity change from 0 to 256
[  229.455003][ T8408] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  229.509852][   T27] audit: type=1326 audit(229.500:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1420" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  229.635394][ T8418] loop3: detected capacity change from 0 to 256
[  229.963766][ T8418] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  229.982140][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'.
[  229.984075][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'.
[  231.517307][ T4694] net_ratelimit: 32 callbacks suppressed
[  232.477287][ T6189] device syz_tun left promiscuous mode
[  232.862287][    T9] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.940948][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  232.943687][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  232.948081][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  232.950307][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  232.952222][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  232.953726][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  232.981801][    T9] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.331703][    T9] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.338214][ T8451] loop4: detected capacity change from 0 to 256
[  233.353011][ T8451] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  233.413639][   T27] audit: type=1326 audit(233.400:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.4.1437" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  233.430281][    T9] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.533762][ T8444] chnl_net:caif_netlink_parms(): no params data found
[  233.583819][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.585362][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.591845][ T8444] device bridge_slave_0 entered promiscuous mode
[  233.595154][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.597343][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.599149][ T8444] device bridge_slave_1 entered promiscuous mode
[  233.662320][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.670576][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.696805][ T8444] team0: Port device team_slave_0 added
[  233.701617][ T8444] team0: Port device team_slave_1 added
[  233.728188][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.729548][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.735082][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.740899][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.742241][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.747105][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.806909][ T8474] loop0: detected capacity change from 0 to 256
[  233.843867][ T8474] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  234.479847][    T9] device ip6gretap0 left promiscuous mode
[  234.669059][ T8444] device hsr_slave_0 entered promiscuous mode
[  234.688052][ T8444] device hsr_slave_1 entered promiscuous mode
[  234.746485][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.747874][ T8444] Cannot create hsr debugfs directory
[  234.785637][ T8498] loop0: detected capacity change from 0 to 3904
[  234.857135][ T8498] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  234.859307][ T8498] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  234.861068][ T8498]  loop0:
[  234.932407][ T8503] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1443'.
[  235.036022][ T4333] Bluetooth: hci2: command 0x0409 tx timeout
[  235.400606][ T8444] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  235.845424][ T8444] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  236.307919][ T8444] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  236.321590][ T8542] nvmet: disable ns before setting buffered_io value.
[  236.344552][ T8544] loop4: detected capacity change from 0 to 512
[  236.346676][ T8544] ext4: Unknown parameter 'obj_role'
[  236.366170][ T8444] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  236.377451][ T7674] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.555853][    C0] net_ratelimit: 29 callbacks suppressed
[  236.583229][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.895138][ T8444] 8021q: adding VLAN 0 to HW filter on device team0
[  236.909880][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  236.911894][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.913603][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.916951][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.919810][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.921306][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.929430][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.933235][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.939474][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.940806][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.959260][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.012269][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.014323][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.042571][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.045330][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.057698][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.115888][ T4333] Bluetooth: hci2: command 0x041b tx timeout
[  237.314399][ T8590] nvmet: disable ns before setting buffered_io value.
[  237.318620][ T8590] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  237.325556][ T8590] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  237.374657][ T8595] nvmet: disable ns before setting buffered_io value.
[  237.410435][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.412456][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.414475][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.420720][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  237.426136][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  237.427885][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.440474][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.459251][ T8597] loop3: detected capacity change from 0 to 256
[  237.468567][ T8597] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  237.558442][    T9] device hsr_slave_0 left promiscuous mode
[  237.628657][    T9] device hsr_slave_1 left promiscuous mode
[  237.796349][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.798328][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.805194][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.807152][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.855290][    T9] device bridge_slave_1 left promiscuous mode
[  237.905085][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.991594][    T9] device bridge_slave_0 left promiscuous mode
[  238.008714][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.029480][ T8607] binder: 8606:8607 got transaction to invalid handle, 1
[  238.030758][ T8607] binder: 8607:8606 cannot find target node
[  238.030787][ T8607] binder: 8606:8607 transaction async to 0:0 failed 71/29201/-22, size 0-0 line 3062
[  238.055318][ T8609] loop0: detected capacity change from 0 to 512
[  238.069755][ T8609] ext4: Unknown parameter 'obj_role'
[  238.146783][    T9] device veth1_macvtap left promiscuous mode
[  238.149703][    T9] device veth0_macvtap left promiscuous mode
[  238.151131][    T9] device veth1_vlan left promiscuous mode
[  238.152553][    T9] device veth0_vlan left promiscuous mode
[  238.383800][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.432734][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.645512][ T8630] binder: 8629:8630 got transaction to invalid handle, 1
[  238.647288][ T8630] binder: 8630:8629 cannot find target node
[  238.648427][ T8630] binder: 8629:8630 transaction async to 0:0 failed 75/29201/-22, size 0-0 line 3062
[  239.143832][ T8646] loop4: detected capacity change from 0 to 256
[  239.193881][ T8646] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  239.196546][ T4337] Bluetooth: hci2: command 0x040f tx timeout
[  239.794866][ T8656] binder: 8655:8656 got transaction to invalid handle, 1
[  239.799629][ T8656] binder: 8656:8655 cannot find target node
[  239.800864][ T8656] binder: 8655:8656 transaction async to 0:0 failed 79/29201/-22, size 0-0 line 3062
[  239.845344][ T8658] loop0: detected capacity change from 0 to 128
[  239.861481][ T8658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  239.951611][ T8658] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)"
[  239.972873][ T4336] EXT4-fs (loop0): unmounting filesystem.
[  240.190599][   T27] audit: type=1326 audit(240.180:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0
[  240.909318][    T9] team0 (unregistering): Port device team_slave_1 removed
[  241.039378][ T8696] loop4: detected capacity change from 0 to 256
[  241.110638][ T8696] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  241.419862][ T4333] Bluetooth: hci2: command 0x0419 tx timeout
[  241.427341][    T9] team0 (unregistering): Port device team_slave_0 removed
[  241.725615][ T8707] loop0: detected capacity change from 0 to 3904
[  241.755962][ T5540] net_ratelimit: 33 callbacks suppressed
[  241.766770][ T8707] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  241.769004][ T8707] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  241.770341][ T8707]  loop0:
[  241.828164][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.942203][ T8717] binder: 8716:8717 tried to acquire reference to desc 0, got 1 instead
[  241.943874][ T8717] binder: 8716:8717 ioctl c0306201 0 returned -14
[  241.984973][ T7329] binder: undelivered transaction 84, process died.
[  242.032030][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.326927][ T8734] loop0: detected capacity change from 0 to 3904
[  242.378512][ T8734] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  242.380876][ T8734] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  242.383377][ T8734]  loop0:
[  242.494907][ T8738] loop0: detected capacity change from 0 to 256
[  242.510541][ T8738] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  242.513740][ T8738] 9pnet_fd: Insufficient options for proto=fd
[  243.634930][ T8757] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1524'.
[  244.062569][ T8761] loop0: detected capacity change from 0 to 3904
[  244.117766][ T8761] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  244.120927][ T8761] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  244.123944][ T8761]  loop0:
[  244.337664][    T9] bond0 (unregistering): Released all slaves
[  244.581858][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  244.583383][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'.
[  244.625112][ T8628] device ip6gretap0 entered promiscuous mode
[  244.686413][ T8628] device syz_tun entered promiscuous mode
[  244.726550][ T8628] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  244.727983][ T8628] Cannot create hsr debugfs directory
[  244.729286][ T8628] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  244.731271][ T8628] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  244.736855][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1525'.
[  244.758661][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.768400][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  244.769909][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  244.872122][   T27] audit: type=1326 audit(244.860:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.3.1534" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa417a9a8 code=0x0
[  244.992879][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.301632][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.373945][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.379807][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.382538][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.385189][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  245.391255][ T8444] device veth0_vlan entered promiscuous mode
[  245.399172][ T8444] device veth1_vlan entered promiscuous mode
[  245.438364][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  245.441535][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  245.443605][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.445480][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  245.451048][ T8444] device veth0_macvtap entered promiscuous mode
[  245.463668][ T8444] device veth1_macvtap entered promiscuous mode
[  245.495464][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.500031][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.503224][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.505643][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.508062][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.510493][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.513931][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.515536][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  245.521799][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  245.523544][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  245.525439][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  245.548789][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.555458][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.562845][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.565983][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.568190][ T8444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.570645][ T8444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.573232][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.575335][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  245.577842][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  245.604242][ T8444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.606358][ T8444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.608126][ T8444] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.610187][ T8444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.714772][ T5540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.716674][ T5540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.727963][ T8813] loop0: detected capacity change from 0 to 3904
[  245.750172][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  245.780322][ T8813] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  245.782207][ T8813] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  245.783425][ T8813]  loop0:
[  245.797495][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.799163][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.801045][   T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  245.882467][ T8825] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1541'.
[  246.047459][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'.
[  246.048934][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1543'.
[  246.374331][ T8848] loop4: detected capacity change from 0 to 256
[  246.389195][ T8848] exfat: Unknown parameter 'zero_size_dir'
[  246.500339][   T27] audit: type=1326 audit(246.490:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.4.1547" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  246.792570][ T8883] loop3: detected capacity change from 0 to 256
[  246.876585][ T4551] net_ratelimit: 58 callbacks suppressed
[  246.906514][ T8892] loop0: detected capacity change from 0 to 3904
[  246.964992][ T8892] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  246.968601][ T8892] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  246.972364][ T8892]  loop0:
[  246.983751][ T8896] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1553'.
[  247.054183][ T8903] loop6: detected capacity change from 0 to 256
[  247.058506][ T8903] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  247.086968][ T7675] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.171664][ T8911] loop6: detected capacity change from 0 to 2048
[  247.181859][ T7675] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.219284][ T8911] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  247.423169][ T8922] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1559: bg 0: block 345: padding at end of block bitmap is not set
[  247.432760][ T8920] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117
[  247.465408][ T8920] EXT4-fs (loop6): This should not happen!! Data will be lost
[  247.465408][ T8920] 
[  247.473161][ T6788] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  247.475664][ T6788] EXT4-fs (loop6): This should not happen!! Data will be lost
[  247.475664][ T6788] 
[  247.481214][ T6788] EXT4-fs (loop6): Total free blocks count 0
[  247.482442][ T6788] EXT4-fs (loop6): Free/Dirty block details
[  247.484853][ T6788] EXT4-fs (loop6): free_blocks=0
[  247.488915][ T6788] EXT4-fs (loop6): dirty_blocks=1424
[  247.491232][ T6788] EXT4-fs (loop6): Block reservation details
[  247.879076][ T8936] loop6: detected capacity change from 0 to 256
[  247.897109][ T8936] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  248.008166][ T8940] netlink: 'syz.1.1565': attribute type 72 has an invalid length.
[  248.125170][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1564'.
[  248.411857][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1566'.
[  248.463391][ T8950] loop3: detected capacity change from 0 to 256
[  248.474387][ T8950] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  248.490993][ T4333] Bluetooth: Wrong link type (-22)
[  248.522581][   T27] audit: type=1326 audit(248.510:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.4.1571" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  248.670343][ T8965] netlink: 'syz.0.1576': attribute type 72 has an invalid length.
[  248.845471][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  249.565737][ T8990] loop4: detected capacity change from 0 to 256
[  249.580138][ T8990] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  249.767762][ T9010] nvmet: disable ns before setting buffered_io value.
[  249.771203][ T9010] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  249.775495][ T9010] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  249.782146][ T9010] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  249.795789][ T9010] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  249.808075][ T9010] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  250.021612][ T9025] loop6: detected capacity change from 0 to 256
[  250.037348][ T9025] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  250.749598][ T9047] nvmet: disable ns before setting buffered_io value.
[  250.763532][ T9047] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  250.773204][ T9047] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  250.775226][ T9047] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  250.792780][ T9047] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  250.801630][ T9047] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  250.861072][ T9054] loop6: detected capacity change from 0 to 256
[  251.054913][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.061404][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  251.063162][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  251.072849][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  251.074495][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  251.373687][ T9070] __nla_validate_parse: 1 callbacks suppressed
[  251.373693][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1615'.
[  251.500438][ T9079] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  251.814147][ T9085] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1620'.
[  251.850529][ T9087] FAULT_INJECTION: forcing a failure.
[  251.850529][ T9087] name failslab, interval 1, probability 5, space 0, times 9993
[  251.853459][ T9087] CPU: 1 PID: 9087 Comm: syz.6.1622 Not tainted syzkaller #0
[  251.854901][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  251.856763][ T9087] Call trace:
[  251.857390][ T9087]  dump_backtrace+0x1c4/0x1f0
[  251.858299][ T9087]  show_stack+0x2c/0x3c
[  251.859055][ T9087]  __dump_stack+0x30/0x40
[  251.859852][ T9087]  dump_stack_lvl+0xf4/0x15c
[  251.860792][ T9087]  dump_stack+0x1c/0x5c
[  251.861589][ T9087]  should_fail_ex+0x3cc/0x524
[  251.862448][ T9087]  __should_failslab+0xc0/0x11c
[  251.863411][ T9087]  should_failslab+0x10/0x28
[  251.864335][ T9087]  kmem_cache_alloc+0x88/0x310
[  251.865323][ T9087]  __nf_conntrack_alloc+0xa4/0x3a4
[  251.866380][ T9087]  init_conntrack+0x214/0xf60
[  251.867294][ T9087]  nf_conntrack_in+0xa74/0x1934
[  251.868148][ T9087]  ipv4_conntrack_local+0x10c/0x210
[  251.869174][ T9087]  nf_hook_slow+0xc8/0x208
[  251.870043][ T9087]  nf_hook+0x1d0/0x338
[  251.870818][ T9087]  __ip_local_out+0x4b8/0x5fc
[  251.871632][ T9087]  __ip_queue_xmit+0xc38/0x1718
[  251.872479][ T9087]  ip_queue_xmit+0x5c/0x7c
[  251.873289][ T9087]  __tcp_transmit_skb+0x17bc/0x2bcc
[  251.874268][ T9087]  tcp_connect+0x2268/0x3c88
[  251.875180][ T9087]  tcp_v4_connect+0xbb4/0x1460
[  251.876139][ T9087]  __inet_stream_connect+0x1f8/0xc48
[  251.877141][ T9087]  tcp_sendmsg_fastopen+0x314/0x564
[  251.878119][ T9087]  tcp_sendmsg_locked+0x2c50/0x3164
[  251.878994][ T9087]  tcp_sendmsg+0x40/0x64
[  251.879755][ T9087]  inet_sendmsg+0x154/0x27c
[  251.880575][ T9087]  __sys_sendto+0x324/0x440
[  251.881416][ T9087]  __arm64_sys_sendto+0xe4/0x104
[  251.882373][ T9087]  invoke_syscall+0x98/0x290
[  251.883267][ T9087]  el0_svc_common+0x13c/0x258
[  251.884171][ T9087]  do_el0_svc+0x5c/0x134
[  251.885051][ T9087]  el0_svc+0x58/0x12c
[  251.885918][ T9087]  el0t_64_sync_handler+0x84/0xf0
[  251.887018][ T9087]  el0t_64_sync+0x18c/0x190
[  251.996133][    C1] net_ratelimit: 34 callbacks suppressed
[  252.236592][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'.
[  252.549196][ T9116] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1632'.
[  252.568230][ T9120] loop6: detected capacity change from 0 to 256
[  252.605525][   T27] audit: type=1326 audit(252.590:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  252.614527][   T27] audit: type=1326 audit(252.600:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  252.633337][   T27] audit: type=1326 audit(252.620:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  252.644562][   T27] audit: type=1326 audit(252.620:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  252.659211][   T27] audit: type=1326 audit(252.620:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  252.668301][   T27] audit: type=1326 audit(252.620:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.4.1634" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x7ffc0000
[  253.333270][ T9157] loop3: detected capacity change from 0 to 256
[  253.342192][ T9157] exfat: Unknown parameter '0xffffffffffffffff01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  253.544892][ T9173] loop3: detected capacity change from 0 to 256
[  254.141834][ T9190] loop4: detected capacity change from 0 to 256
[  254.663088][ T9200] loop4: detected capacity change from 0 to 32768
[  254.672454][ T9217] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  254.674322][ T9200] XFS (loop4): Mounting V5 Filesystem
[  254.888585][ T9200] XFS (loop4): Ending clean mount
[  254.942689][ T4340] XFS (loop4): Unmounting Filesystem
[  255.494842][ T9258] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  255.602157][ T9259] request_module fs-<NULL> succeeded, but still no fs?
[  255.631031][ T9269] binder: 9268:9269 tried to acquire reference to desc 0, got 1 instead
[  255.640408][ T4377] binder: undelivered transaction 89, process died.
[  255.892715][ T9294] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  255.925570][ T9298] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  256.044713][ T9302] binder: 9301:9302 tried to acquire reference to desc 0, got 1 instead
[  256.049139][ T9295] nvmet: disable ns before setting buffered_io value.
[  256.051297][ T9295] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  256.053465][ T9295] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  256.060265][ T9302] binder_alloc: 9301: pid 9301 spamming oneway? 2 buffers allocated for a total size of 5120
[  256.067758][ T9302] binder: 9301:9302 ioctl c0306201 0 returned -14
[  256.071589][ T4377] binder: undelivered TRANSACTION_COMPLETE
[  256.072793][ T4377] binder: undelivered TRANSACTION_COMPLETE
[  256.095483][ T4377] binder: undelivered transaction 95, process died.
[  256.101226][ T4377] binder: undelivered transaction 94, process died.
[  256.426627][ T9319] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  256.431509][ T9319] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  256.672697][ T9324] cfg80211: Invalid regulatory domain detected: BB
[  256.768496][ T9332] FAULT_INJECTION: forcing a failure.
[  256.768496][ T9332] name failslab, interval 1, probability 5, space 0, times 9992
[  256.775195][ T9332] CPU: 0 PID: 9332 Comm: syz.6.1712 Not tainted syzkaller #0
[  256.776647][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  256.778537][ T9332] Call trace:
[  256.779104][ T9332]  dump_backtrace+0x1c4/0x1f0
[  256.780048][ T9332]  show_stack+0x2c/0x3c
[  256.780867][ T9332]  __dump_stack+0x30/0x40
[  256.781724][ T9332]  dump_stack_lvl+0xf4/0x15c
[  256.782594][ T9332]  dump_stack+0x1c/0x5c
[  256.783415][ T9332]  should_fail_ex+0x3cc/0x524
[  256.784226][ T9332]  __should_failslab+0xc0/0x11c
[  256.785138][ T9332]  should_failslab+0x10/0x28
[  256.785919][ T9332]  __kmem_cache_alloc_node+0x7c/0x318
[  256.786782][ T9332]  __kmalloc_node_track_caller+0xb8/0x174
[  256.787724][ T9332]  kmemdup_nul+0x60/0xe0
[  256.788423][ T9332]  generic_parse_monolithic+0x210/0x2e8
[  256.789361][ T9332]  parse_monolithic_mount_data+0x78/0x8c
[  256.790326][ T9332]  do_new_mount+0x1f4/0x804
[  256.791177][ T9332]  path_mount+0x5ac/0xe6c
[  256.792020][ T9332]  __arm64_sys_mount+0x4a0/0x5a0
[  256.792922][ T9332]  invoke_syscall+0x98/0x290
[  256.793710][ T9332]  el0_svc_common+0x13c/0x258
[  256.794614][ T9332]  do_el0_svc+0x5c/0x134
[  256.795455][ T9332]  el0_svc+0x58/0x12c
[  256.796273][ T9332]  el0t_64_sync_handler+0x84/0xf0
[  256.797167][ T9332]  el0t_64_sync+0x18c/0x190
[  256.801829][ T9334] nvmet: disable ns before setting buffered_io value.
[  256.810716][ T9334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  256.812752][ T9334] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  257.048445][ T9357] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1721'.
[  257.116185][    C1] net_ratelimit: 38 callbacks suppressed
[  257.143577][ T9370] ip_tables: iptables: counters copy to user failed while replacing table
[  257.308334][   T27] audit: type=1326 audit(257.300:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.4.1726" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  257.320177][ T9385] binder: 9384:9385 tried to acquire reference to desc 0, got 1 instead
[  257.322035][ T9385] binder_alloc: 9384: pid 9384 spamming oneway? 2 buffers allocated for a total size of 5120
[  257.336134][ T9385] binder: 9384:9385 ioctl c0306201 0 returned -14
[  257.338219][ T4379] binder: undelivered TRANSACTION_COMPLETE
[  257.339396][ T4379] binder: undelivered TRANSACTION_COMPLETE
[  257.348377][ T4379] binder: undelivered transaction 101, process died.
[  257.349699][ T4379] binder: undelivered transaction 100, process died.
[  257.763371][ T9434] ip_tables: iptables: counters copy to user failed while replacing table
[  257.843540][ T9444] nvmet: disable ns before setting buffered_io value.
[  257.850872][ T9444] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  257.853961][ T9444] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  258.060024][ T9477] binder: 9476:9477 tried to acquire reference to desc 0, got 1 instead
[  258.062253][ T9477] binder_alloc: 9476: pid 9476 spamming oneway? 2 buffers allocated for a total size of 5120
[  258.065062][    T7] binder: undelivered TRANSACTION_COMPLETE
[  258.114376][ T9485] nvmet: disable ns before setting buffered_io value.
[  258.121247][ T9485] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  258.125399][ T9485] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  258.797594][   T27] audit: type=1326 audit(258.790:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.6.1766" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa297a9a8 code=0x0
[  258.803055][ T9532] binder: 9530:9532 tried to acquire reference to desc 0, got 1 instead
[  258.811748][ T9532] binder_alloc: 9530: pid 9530 spamming oneway? 2 buffers allocated for a total size of 5120
[  259.720214][ T9603] loop6: detected capacity change from 0 to 256
[  259.742071][ T9603] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  259.952646][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'.
[  259.954314][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1777'.
[  260.326860][   T27] audit: type=1326 audit(260.280:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.1785" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa417a9a8 code=0x0
[  260.709701][ T9643] loop4: detected capacity change from 0 to 32768
[  260.712940][ T9643] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1789 (9643)
[  260.717659][ T9643] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  260.719763][ T9643] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  260.721561][ T9643] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  260.723357][ T9643] BTRFS info (device loop4): use zstd compression, level 3
[  260.724602][ T9643] BTRFS info (device loop4): using free space tree
[  260.750226][ T9650] loop6: detected capacity change from 0 to 256
[  260.842779][ T9643] BTRFS info (device loop4): enabling ssd optimizations
[  261.075253][ T4340] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  261.147910][ T9678] FAULT_INJECTION: forcing a failure.
[  261.147910][ T9678] name failslab, interval 1, probability 5, space 0, times 9991
[  261.150960][ T9678] CPU: 1 PID: 9678 Comm: syz.3.1795 Not tainted syzkaller #0
[  261.152498][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  261.154438][ T9678] Call trace:
[  261.155046][ T9678]  dump_backtrace+0x1c4/0x1f0
[  261.156021][ T9678]  show_stack+0x2c/0x3c
[  261.156037][ T9678]  __dump_stack+0x30/0x40
[  261.156050][ T9678]  dump_stack_lvl+0xf4/0x15c
[  261.156061][ T9678]  dump_stack+0x1c/0x5c
[  261.156071][ T9678]  should_fail_ex+0x3cc/0x524
[  261.156082][ T9678]  __should_failslab+0xc0/0x11c
[  261.156092][ T9678]  should_failslab+0x10/0x28
[  261.156100][ T9678]  kmem_cache_alloc+0x88/0x310
[  261.156107][ T9678]  security_file_alloc+0x38/0x11c
[  261.156116][ T9678]  __alloc_file+0xac/0x234
[  261.156123][ T9678]  alloc_empty_file+0xa0/0x184
[  261.156130][ T9678]  alloc_file+0x64/0x564
[  261.156136][ T9678]  alloc_file_pseudo+0x16c/0x1f4
[  261.156143][ T9678]  sock_alloc_file+0xb4/0x234
[  261.159423][ T9678]  __sys_socket+0x138/0x1b0
[  261.161164][ T9678]  __arm64_sys_socket+0x7c/0x94
[  261.163884][ T9678]  invoke_syscall+0x98/0x290
[  261.165731][ T9678]  el0_svc_common+0x13c/0x258
[  261.167541][ T9678]  do_el0_svc+0x5c/0x134
[  261.169252][ T9678]  el0_svc+0x58/0x12c
[  261.171079][ T9678]  el0t_64_sync_handler+0x84/0xf0
[  261.172781][ T9678]  el0t_64_sync+0x18c/0x190
[  261.279934][ T9685] nvmet: disable ns before setting buffered_io value.
[  261.298414][ T9685] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  261.302853][ T9685] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  261.314595][ T9689] loop4: detected capacity change from 0 to 256
[  261.325561][ T9689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  261.515829][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'.
[  261.517344][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'.
[  261.839794][ T9699] loop3: detected capacity change from 0 to 256
[  261.992632][   T27] audit: type=1326 audit(261.980:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.0.1805" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0
[  262.338875][ T5983] net_ratelimit: 32 callbacks suppressed
[  262.467107][ T9721] nvmet: disable ns before setting buffered_io value.
[  262.469662][ T9721] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  262.472213][ T9721] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  262.495144][ T9723] FAULT_INJECTION: forcing a failure.
[  262.495144][ T9723] name failslab, interval 1, probability 5, space 0, times 9990
[  262.500505][ T9723] CPU: 1 PID: 9723 Comm: syz.4.1811 Not tainted syzkaller #0
[  262.501773][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  262.503629][ T9723] Call trace:
[  262.504227][ T9723]  dump_backtrace+0x1c4/0x1f0
[  262.505159][ T9723]  show_stack+0x2c/0x3c
[  262.505948][ T9723]  __dump_stack+0x30/0x40
[  262.506777][ T9723]  dump_stack_lvl+0xf4/0x15c
[  262.507644][ T9723]  dump_stack+0x1c/0x5c
[  262.508457][ T9723]  should_fail_ex+0x3cc/0x524
[  262.509294][ T9723]  __should_failslab+0xc0/0x11c
[  262.510198][ T9723]  should_failslab+0x10/0x28
[  262.511068][ T9723]  slab_pre_alloc_hook+0x6c/0x31c
[  262.511914][ T9723]  kmem_cache_alloc_lru+0x60/0x284
[  262.512786][ T9723]  __d_alloc+0x40/0x68c
[  262.513557][ T9723]  d_alloc_pseudo+0x28/0x8c
[  262.514436][ T9723]  alloc_file_pseudo+0xd8/0x1f4
[  262.515299][ T9723]  sock_alloc_file+0xb4/0x234
[  262.516160][ T9723]  __sys_socket+0x138/0x1b0
[  262.517019][ T9723]  __arm64_sys_socket+0x7c/0x94
[  262.517888][ T9723]  invoke_syscall+0x98/0x290
[  262.518713][ T9723]  el0_svc_common+0x13c/0x258
[  262.519604][ T9723]  do_el0_svc+0x5c/0x134
[  262.520391][ T9723]  el0_svc+0x58/0x12c
[  262.521048][ T9723]  el0t_64_sync_handler+0x84/0xf0
[  262.521943][ T9723]  el0t_64_sync+0x18c/0x190
[  262.814038][ T9733] loop6: detected capacity change from 0 to 256
[  262.892063][ T9739] loop3: detected capacity change from 0 to 256
[  262.901911][ T9742] nvmet: disable ns before setting buffered_io value.
[  262.902533][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  262.906473][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  262.908434][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  262.910582][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  262.912632][ T9742] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  262.937475][ T9744] loop6: detected capacity change from 0 to 256
[  262.940703][ T9739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  263.013591][ T9746] nvmet: disable ns before setting buffered_io value.
[  263.015756][ T9746] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  263.025258][ T9746] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  263.138657][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'.
[  263.140303][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'.
[  263.562050][   T27] audit: type=1326 audit(263.550:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.4.1827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb777a9a8 code=0x0
[  263.571192][ T9749] loop6: detected capacity change from 0 to 32768
[  263.577695][ T9749] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1822 (9749)
[  263.591852][ T9749] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  263.593638][ T9749] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  263.597168][ T9749] BTRFS info (device loop6): force zlib compression, level 3
[  263.598533][ T9749] BTRFS info (device loop6): turning on flush-on-commit
[  263.599817][ T9749] BTRFS info (device loop6): max_inline at 4096
[  263.601001][ T9749] BTRFS info (device loop6): using free space tree
[  263.989613][ T9749] BTRFS info (device loop6): enabling ssd optimizations
[  264.019040][ T8444] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  264.141279][ T9794] loop6: detected capacity change from 0 to 256
[  264.191260][ T9796] nvmet: disable ns before setting buffered_io value.
[  264.193667][ T9796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  264.195511][ T9796] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  264.197721][ T9796] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  264.200993][ T9796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  264.203652][ T9796] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  264.615796][ T9820] nvmet: disable ns before setting buffered_io value.
[  264.620177][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  264.622561][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  265.406495][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  265.408614][ T9820] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  265.474759][ T9829] nvmet: disable ns before setting buffered_io value.
[  265.480184][ T9829] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  265.482472][ T9829] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  265.507327][ T9831] ieee802154 phy0 wpan0: encryption failed: -22
[  265.635253][ T9844] set_capacity_and_notify: 1 callbacks suppressed
[  265.635258][ T9844] loop6: detected capacity change from 0 to 256
[  266.089777][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1857'.
[  266.103538][ T9862] nvmet: disable ns before setting buffered_io value.
[  266.105711][ T9862] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  266.107996][ T9862] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  267.140540][ T9889] nvmet: disable ns before setting buffered_io value.
[  267.142580][ T9889] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  267.144797][ T9889] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  267.252157][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.255565][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.262326][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'.
[  267.263902][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'.
[  267.353688][    C0] net_ratelimit: 29 callbacks suppressed
[  269.267530][ T9943] loop4: detected capacity change from 0 to 256
[  269.319139][ T9943] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1890'.
[  269.338182][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1892'.
[  269.340034][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1892'.
[  269.343196][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1892'.
[  269.385243][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  270.318173][ T9949] loop3: detected capacity change from 0 to 32768
[  270.368063][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1904'.
[  270.369794][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1904'.
[  270.390220][ T9949] 
[  270.390220][ T9949]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  270.390220][ T9949] 
[  270.470864][ T4328] 
[  270.470864][ T4328]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  270.470864][ T4328] 
[  270.480974][ T4328] 
[  270.480974][ T4328]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  270.480974][ T4328] 
[  270.571944][ T9984] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1906'.
[  270.653810][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'.
[  270.668171][ T9992] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  270.674277][ T9992] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  270.839586][T10018] FAULT_INJECTION: forcing a failure.
[  270.839586][T10018] name failslab, interval 1, probability 5, space 0, times 9989
[  270.842710][T10018] CPU: 0 PID: 10018 Comm: syz.3.1921 Not tainted syzkaller #0
[  270.844025][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  270.845907][T10018] Call trace:
[  270.846509][T10018]  dump_backtrace+0x1c4/0x1f0
[  270.847434][T10018]  show_stack+0x2c/0x3c
[  270.848253][T10018]  __dump_stack+0x30/0x40
[  270.849111][T10018]  dump_stack_lvl+0xf4/0x15c
[  270.850003][T10018]  dump_stack+0x1c/0x5c
[  270.850796][T10018]  should_fail_ex+0x3cc/0x524
[  270.851717][T10018]  __should_failslab+0xc0/0x11c
[  270.852509][T10018]  should_failslab+0x10/0x28
[  270.853285][T10018]  kmem_cache_alloc+0x88/0x310
[  270.854090][T10018]  mas_alloc_nodes+0x284/0x758
[  270.854921][T10018]  mas_preallocate+0x13c/0x310
[  270.855873][T10018]  __vma_adjust+0x26c/0x16fc
[  270.856713][T10018]  __split_vma+0x328/0x44c
[  270.857573][T10018]  do_mas_align_munmap+0x5f4/0xf28
[  270.858567][T10018]  mmap_region+0x6a0/0x1860
[  270.859337][T10018]  do_mmap+0xa64/0x1210
[  270.860056][T10018]  vm_mmap_pgoff+0x194/0x298
[  270.860877][T10018]  ksys_mmap_pgoff+0xd0/0x5a0
[  270.861694][T10018]  __arm64_sys_mmap+0x108/0x120
[  270.862557][T10018]  invoke_syscall+0x98/0x290
[  270.863365][T10018]  el0_svc_common+0x13c/0x258
[  270.864182][T10018]  do_el0_svc+0x5c/0x134
[  270.864971][T10018]  el0_svc+0x58/0x12c
[  270.865721][T10018]  el0t_64_sync_handler+0x84/0xf0
[  270.866611][T10018]  el0t_64_sync+0x18c/0x190
[  271.715550][T10025] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  271.719190][T10025] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  271.741942][T10027] loop3: detected capacity change from 0 to 256
[  271.808208][T10027] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1924'.
[  271.904375][T10033] loop4: detected capacity change from 0 to 256
[  271.995109][T10043] loop4: detected capacity change from 0 to 128
[  272.023597][T10043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  272.028411][T10043] System zones: 1-3, 19-19, 35-36
[  272.032950][T10043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  272.362386][T10061] loop3: detected capacity change from 0 to 128
[  272.476561][ T4417] net_ratelimit: 34 callbacks suppressed
[  272.974165][ T4340] EXT4-fs (loop4): unmounting filesystem.
[  273.071843][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.074424][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.120663][T10083] device bridge0 entered promiscuous mode
[  273.146573][T10083] device bridge0 left promiscuous mode
[  273.425437][T10106] batman_adv: batadv0: Adding interface: ip6gretap1
[  273.433302][T10106] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.441000][T10106] batman_adv: batadv0: Interface activated: ip6gretap1
[  273.991830][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.994437][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.401702][T10145] can0: slcan on ttyS3.
[  275.635402][T10172] loop6: detected capacity change from 0 to 256
[  275.693196][T10172] __nla_validate_parse: 5 callbacks suppressed
[  275.693206][T10172] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1980'.
[  275.796872][T10177] sctp: [Deprecated]: syz.1.1981 (pid 10177) Use of int in max_burst socket option.
[  275.796872][T10177] Use struct sctp_assoc_value instead
[  275.846478][T10142] can0 (unregistered): slcan off ttyS3.
[  275.934809][T10192] loop3: detected capacity change from 0 to 256
[  275.939847][T10192] exfat: Deprecated parameter 'utf8'
[  275.940954][T10192] exfat: Deprecated parameter 'namecase'
[  275.945501][T10192] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  277.859201][    C1] net_ratelimit: 18 callbacks suppressed
[  277.975096][T10245] batman_adv: batadv0: Adding interface: ip6gretap1
[  277.980704][T10245] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.985380][T10245] batman_adv: batadv0: Interface activated: ip6gretap1
[  278.565544][T10265] IPVS: Error connecting to the multicast addr
[  279.070975][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.076472][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.580147][T10294] loop3: detected capacity change from 0 to 256
[  280.580406][T10322] FAULT_INJECTION: forcing a failure.
[  280.580406][T10322] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  280.583187][T10322] CPU: 0 PID: 10322 Comm: syz.6.2028 Not tainted syzkaller #0
[  280.584708][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  280.586499][T10322] Call trace:
[  280.587131][T10322]  dump_backtrace+0x1c4/0x1f0
[  280.588048][T10322]  show_stack+0x2c/0x3c
[  280.588856][T10322]  __dump_stack+0x30/0x40
[  280.589697][T10322]  dump_stack_lvl+0xf4/0x15c
[  280.590646][T10322]  dump_stack+0x1c/0x5c
[  280.591474][T10322]  should_fail_ex+0x3cc/0x524
[  280.592420][T10322]  should_fail+0x14/0x24
[  280.593288][T10322]  should_fail_usercopy+0x20/0x30
[  280.594328][T10322]  strncpy_from_user+0x48/0x59c
[  280.595235][T10322]  getname_flags+0xec/0x458
[  280.595317][T10325] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  280.596237][T10322]  getname+0x28/0x38
[  280.596251][T10322]  __arm64_sys_acct+0x68/0x728
[  280.596265][T10322]  invoke_syscall+0x98/0x290
[  280.596277][T10322]  el0_svc_common+0x13c/0x258
[  280.596287][T10322]  do_el0_svc+0x5c/0x134
[  280.596297][T10322]  el0_svc+0x58/0x12c
[  280.596305][T10322]  el0t_64_sync_handler+0x84/0xf0
[  280.596313][T10322]  el0t_64_sync+0x18c/0x190
[  280.624643][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.630568][T10326] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  280.633874][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.636588][T10326] batman_adv: batadv0: Adding interface: ip6gretap1
[  280.638099][T10326] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.643333][T10326] batman_adv: batadv0: Interface activated: ip6gretap1
[  280.965675][T10340] loop4: detected capacity change from 0 to 256
[  280.990407][T10339] xt_hashlimit: size too large, truncated to 1048576
[  281.132850][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'.
[  281.828357][T10363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  281.831435][T10363] batman_adv: batadv0: Adding interface: ip6gretap2
[  281.832856][T10363] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.842951][T10363] batman_adv: batadv0: Interface activated: ip6gretap2
[  281.953577][T10374] loop4: detected capacity change from 0 to 256
[  282.044435][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.046907][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.676799][T10392] loop4: detected capacity change from 0 to 256
[  282.692738][T10392] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  282.730359][T10394] nvmet: disable ns before setting buffered_io value.
[  282.736415][T10394] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  282.741747][T10394] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  282.743696][T10394] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  282.746235][T10394] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  282.751064][T10394] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  282.852150][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'.
[  282.955929][ T7147] net_ratelimit: 27 callbacks suppressed
[  283.190936][T10400] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  283.200644][T10400] batman_adv: batadv0: Adding interface: ip6gretap1
[  283.201983][T10400] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.216455][T10400] batman_adv: batadv0: Interface activated: ip6gretap1
[  283.260861][T10406] nvmet: disable ns before setting buffered_io value.
[  283.270471][T10406] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  283.279653][T10406] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  283.642331][T10423] nvmet: disable ns before setting buffered_io value.
[  283.644572][T10423] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  283.647370][T10423] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  283.651487][T10423] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  283.653566][T10423] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  283.655755][T10423] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  283.763980][T10429] loop6: detected capacity change from 0 to 1024
[  283.863432][T10429] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  284.345396][T10441] nvmet: disable ns before setting buffered_io value.
[  284.353422][T10443] FAULT_INJECTION: forcing a failure.
[  284.353422][T10443] name fail_futex, interval 1, probability 0, space 0, times 0
[  284.362248][T10441] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  284.366503][T10443] CPU: 0 PID: 10443 Comm: syz.6.2072 Not tainted syzkaller #0
[  284.368131][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  284.370376][T10443] Call trace:
[  284.371090][T10443]  dump_backtrace+0x1c4/0x1f0
[  284.371935][T10443]  show_stack+0x2c/0x3c
[  284.372681][T10443]  __dump_stack+0x30/0x40
[  284.373489][T10443]  dump_stack_lvl+0xf4/0x15c
[  284.374275][T10443]  dump_stack+0x1c/0x5c
[  284.374982][T10443]  should_fail_ex+0x3cc/0x524
[  284.375812][T10443]  should_fail+0x14/0x24
[  284.376588][T10443]  get_futex_key+0x904/0xfb0
[  284.377425][T10443]  futex_wait_setup+0xbc/0x320
[  284.378284][T10443]  futex_wait+0x164/0x424
[  284.379049][T10443]  do_futex+0x2e8/0x340
[  284.379889][T10443]  __arm64_sys_futex+0x390/0x414
[  284.380896][T10443]  invoke_syscall+0x98/0x290
[  284.381809][T10443]  el0_svc_common+0x13c/0x258
[  284.382722][T10443]  do_el0_svc+0x5c/0x134
[  284.383570][T10443]  el0_svc+0x58/0x12c
[  284.384307][T10443]  el0t_64_sync_handler+0x84/0xf0
[  284.385155][T10443]  el0t_64_sync+0x18c/0x190
[  284.391797][T10441] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  284.453194][T10447] loop3: detected capacity change from 0 to 256
[  284.467114][T10447] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  284.603450][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'.
[  285.771740][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.777917][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.793148][T10481] nvmet: disable ns before setting buffered_io value.
[  285.795328][T10481] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  285.805640][T10481] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  285.862889][T10480] loop6: detected capacity change from 0 to 32768
[  285.904563][T10495] nvmet: disable ns before setting buffered_io value.
[  285.906888][T10495] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  285.908807][T10495] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  285.910981][T10495] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  285.913002][T10495] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  285.915187][T10495] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  285.919733][T10480] XFS (loop6): Mounting V5 Filesystem
[  285.942243][T10480] XFS (loop6): Ending clean mount
[  285.952924][T10480] XFS (loop6): Quotacheck needed: Please wait.
[  286.003980][T10480] XFS (loop6): Quotacheck: Done.
[  286.039333][T10507] loop3: detected capacity change from 0 to 256
[  286.050796][T10507] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  286.388618][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'.
[  286.744839][T10517] team0: Device ipip0 is up. Set it down before adding it as a team port
[  286.895411][T10523] nvmet: disable ns before setting buffered_io value.
[  287.178042][T10523] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  287.178281][T10523] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  287.207165][T10527] nvmet: disable ns before setting buffered_io value.
[  287.209489][T10527] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  287.211779][T10527] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  287.216489][T10527] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  287.218587][T10527] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  287.220446][T10527] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  287.233395][T10530] loop4: detected capacity change from 0 to 256
[  287.678336][T10539] loop3: detected capacity change from 0 to 32768
[  287.788869][T10539] XFS (loop3): Mounting V5 Filesystem
[  287.823162][T10539] XFS (loop3): Ending clean mount
[  287.825551][T10539] XFS (loop3): Quotacheck needed: Please wait.
[  287.880243][T10539] XFS (loop3): Quotacheck: Done.
[  288.228035][ T4328] XFS (loop3): Unmounting Filesystem
[  288.376315][T10566] nvmet: disable ns before setting buffered_io value.
[  288.393647][T10566] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  288.395768][T10566] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  288.407576][T10566] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  288.409910][T10566] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  288.415255][T10566] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  288.552009][ T4874] net_ratelimit: 43 callbacks suppressed
[  288.878657][ T8444] XFS (loop6): Unmounting Filesystem
[  289.002520][T10587] nvmet: disable ns before setting buffered_io value.
[  289.008780][T10587] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  289.011154][T10587] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  289.050410][T10589] loop4: detected capacity change from 0 to 512
[  289.063225][T10589] EXT4-fs: Ignoring removed nobh option
[  289.174549][T10589] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2123: invalid indirect mapped block 256 (level 2)
[  289.216108][T10589] EXT4-fs (loop4): 2 truncates cleaned up
[  289.229521][T10589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  289.956557][T10610] nvmet: disable ns before setting buffered_io value.
[  289.959683][ T4340] EXT4-fs (loop4): unmounting filesystem.
[  289.971904][T10610] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  289.974347][T10610] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  289.976418][T10610] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  289.994919][T10610] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  289.997048][T10610] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  290.086575][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.094865][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.203395][T10629] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2135'.
[  290.784980][T10643] loop3: detected capacity change from 0 to 512
[  290.786893][T10643] EXT4-fs: Ignoring removed nobh option
[  290.804356][T10643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2140: invalid indirect mapped block 256 (level 2)
[  290.811844][T10643] EXT4-fs (loop3): 2 truncates cleaned up
[  290.814276][T10643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  291.370921][T10661] loop6: detected capacity change from 0 to 256
[  291.505717][T10591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  291.861163][ T4328] EXT4-fs (loop3): unmounting filesystem.
[  291.926019][T10679] nvmet: disable ns before setting buffered_io value.
[  291.928129][T10679] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  291.930354][T10679] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  291.932506][T10679] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  291.942087][T10679] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  291.944140][T10679] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  292.009509][T10697] loop6: detected capacity change from 0 to 256
[  292.238051][T10707] loop6: detected capacity change from 0 to 1024
[  292.261881][T10707] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  292.268010][T10707] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  292.274120][T10707] JBD2: no valid journal superblock found
[  292.277242][T10707] EXT4-fs (loop6): error loading journal
[  293.019738][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2176'.
[  293.476529][T10767] loop3: detected capacity change from 0 to 256
[  293.611308][T10771] nvmet: disable ns before setting buffered_io value.
[  293.615984][T10771] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  293.625509][T10771] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  293.636483][T10771] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  293.656903][T10771] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  293.668362][T10771] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  293.863205][ T5983] net_ratelimit: 31 callbacks suppressed
[  294.302622][T10794] loop4: detected capacity change from 0 to 256
[  294.752108][T10806] cgroup: none used incorrectly
[  295.112160][T10818] loop6: detected capacity change from 0 to 128
[  295.135653][T10818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  295.137519][T10818] System zones: 1-3, 19-19, 35-36
[  295.146823][T10818] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  295.536564][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.545015][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.554270][T10832] loop4: detected capacity change from 0 to 256
[  295.562962][T10833] nvmet: disable ns before setting buffered_io value.
[  295.568401][T10833] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  295.577576][T10833] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  295.588285][T10833] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  295.590760][T10833] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  295.592903][T10833] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  296.050764][ T8444] EXT4-fs (loop6): unmounting filesystem.
[  296.859191][T10870] nvmet: disable ns before setting buffered_io value.
[  296.862058][T10870] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  296.864346][T10870] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  296.866565][T10870] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  296.868646][T10870] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  296.874846][T10870] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  297.035849][T10882] nvmet: disable ns before setting buffered_io value.
[  297.045751][T10882] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  297.053530][T10882] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  297.105139][T10892] nvmet: disable ns before setting buffered_io value.
[  297.107581][T10892] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  297.958564][T10892] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  297.965144][T10892] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  297.967115][T10892] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  297.991858][T10892] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  298.046284][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'.
[  298.349467][T10931] nvmet: disable ns before setting buffered_io value.
[  298.351452][T10931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  298.353164][T10931] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  298.355247][T10931] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  298.357139][T10931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  298.361908][T10931] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  298.789078][T10952] FAULT_INJECTION: forcing a failure.
[  298.789078][T10952] name failslab, interval 1, probability 5, space 0, times 9988
[  298.792084][T10952] CPU: 0 PID: 10952 Comm: syz.0.2259 Not tainted syzkaller #0
[  298.793772][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  298.795523][T10952] Call trace:
[  298.796097][T10952]  dump_backtrace+0x1c4/0x1f0
[  298.796919][T10952]  show_stack+0x2c/0x3c
[  298.797615][T10952]  __dump_stack+0x30/0x40
[  298.798323][T10952]  dump_stack_lvl+0xf4/0x15c
[  298.799418][T10952]  dump_stack+0x1c/0x5c
[  298.800374][T10952]  should_fail_ex+0x3cc/0x524
[  298.801250][T10952]  __should_failslab+0xc0/0x11c
[  298.802192][T10952]  should_failslab+0x10/0x28
[  298.803067][T10952]  kmem_cache_alloc_node+0x8c/0x344
[  298.804096][T10952]  __alloc_skb+0x128/0x728
[  298.804972][T10952]  sock_wmalloc+0xac/0x130
[  298.805867][T10952]  pppoe_sendmsg+0x1bc/0x64c
[  298.806824][T10952]  ____sys_sendmsg+0x588/0x90c
[  298.807733][T10952]  __sys_sendmmsg+0x320/0x7ec
[  298.808685][T10952]  __arm64_sys_sendmmsg+0xa4/0xc0
[  298.809670][T10952]  invoke_syscall+0x98/0x290
[  298.810539][T10952]  el0_svc_common+0x13c/0x258
[  298.811320][T10952]  do_el0_svc+0x5c/0x134
[  298.812195][T10952]  el0_svc+0x58/0x12c
[  298.812911][T10952]  el0t_64_sync_handler+0x84/0xf0
[  298.813905][T10952]  el0t_64_sync+0x18c/0x190
[  298.864209][T10962] nvmet: disable ns before setting buffered_io value.
[  298.867716][T10962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  298.874300][T10962] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  298.876483][T10962] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  298.879441][T10962] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  298.881725][T10962] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store
[  298.898834][ T5005] net_ratelimit: 27 callbacks suppressed
[  298.936981][T10970] nvmet: disable ns before setting buffered_io value.
[  298.941831][T10970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  298.944092][T10970] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  298.961925][T10964] netlink: 'syz.0.2264': attribute type 11 has an invalid length.
[  299.025418][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.030920][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.043574][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2269'.
[  299.045208][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2269'.
[  299.261126][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  299.888753][T10999] nvmet: disable ns before setting buffered_io value.
[  299.892544][T10999] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  299.894749][T10999] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  299.926701][T11003] netlink: 'syz.1.2279': attribute type 11 has an invalid length.
[  300.002885][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2282'.
[  300.164467][T11016] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2285'.
[  300.686511][T11033] netlink: 'syz.3.2292': attribute type 11 has an invalid length.
[  300.695612][T11031] nvmet: disable ns before setting buffered_io value.
[  300.697526][T11031] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  300.704616][T11031] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  300.713013][T11038] loop3: detected capacity change from 0 to 8
[  300.787158][T11043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2297'.
[  301.236058][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'.
[  301.282619][T11063] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2303'.
[  301.378044][T11065] netlink: 'syz.3.2304': attribute type 11 has an invalid length.
[  301.387119][T11067] nvmet: disable ns before setting buffered_io value.
[  301.394304][T11067] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  301.396431][T11067] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  301.476443][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2309'.
[  301.828992][T11084] raw_sendmsg: syz.6.2310 forgot to set AF_INET. Fix it!
[  302.318939][T11093] loop4: detected capacity change from 0 to 32768
[  302.329677][T11093] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2315 (11093)
[  302.332294][T11098] nvmet: disable ns before setting buffered_io value.
[  302.338144][T11098] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  302.351003][T11093] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  302.354371][T11098] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  302.358510][T11093] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  302.368097][T11093] BTRFS info (device loop4): turning on async discard
[  302.375472][T11093] BTRFS info (device loop4): using free space tree
[  302.484218][T11093] _btrfs_printk: 83 callbacks suppressed
[  302.505687][T11093] BTRFS info (device loop4): enabling ssd optimizations
[  302.528149][ T4340] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  302.975533][T11139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.985735][T11139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.052189][T11143] nvmet: disable ns before setting buffered_io value.
[  303.058805][T11143] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  303.060597][T11143] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  303.125883][T11151] loop3: detected capacity change from 0 to 256
[  303.160792][T11151] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  303.308917][T11161] __nla_validate_parse: 3 callbacks suppressed
[  303.308933][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2332'.
[  303.550596][T11163] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  303.553974][T11163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  303.571946][T11163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2335'.
[  303.610577][T11163] device syz_tun left promiscuous mode
[  303.671469][   T14] infiniband syz1: ib_query_port failed (-19)
[  303.794764][T11175] loop4: detected capacity change from 0 to 16
[  303.847156][T11175] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832
[  304.041172][   T39] net_ratelimit: 30 callbacks suppressed
[  304.113434][T11180] FAULT_INJECTION: forcing a failure.
[  304.113434][T11180] name failslab, interval 1, probability 5, space 0, times 9987
[  304.116647][T11180] CPU: 1 PID: 11180 Comm: syz.3.2339 Not tainted syzkaller #0
[  304.118009][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  304.119893][T11180] Call trace:
[  304.120507][T11180]  dump_backtrace+0x1c4/0x1f0
[  304.121316][T11180]  show_stack+0x2c/0x3c
[  304.122025][T11180]  __dump_stack+0x30/0x40
[  304.122732][T11180]  dump_stack_lvl+0xf4/0x15c
[  304.123578][T11180]  dump_stack+0x1c/0x5c
[  304.124306][T11180]  should_fail_ex+0x3cc/0x524
[  304.125174][T11180]  __should_failslab+0xc0/0x11c
[  304.126000][T11180]  should_failslab+0x10/0x28
[  304.126788][T11180]  __kmem_cache_alloc_node+0x7c/0x318
[  304.127694][T11180]  kmalloc_trace+0x48/0x94
[  304.128507][T11180]  percpu_ref_init+0xc8/0x2f0
[  304.129356][T11180]  ioctx_alloc+0x228/0x734
[  304.130284][T11180]  __arm64_sys_io_setup+0x134/0x30c
[  304.131260][T11180]  invoke_syscall+0x98/0x290
[  304.132120][T11180]  el0_svc_common+0x13c/0x258
[  304.132916][T11180]  do_el0_svc+0x5c/0x134
[  304.133724][T11180]  el0_svc+0x58/0x12c
[  304.134500][T11180]  el0t_64_sync_handler+0x84/0xf0
[  304.135442][T11180]  el0t_64_sync+0x18c/0x190
[  304.185164][T11184] nvmet: disable ns before setting buffered_io value.
[  304.193494][T11184] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  304.195606][T11184] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  304.245140][T11188] FAULT_INJECTION: forcing a failure.
[  304.245140][T11188] name failslab, interval 1, probability 5, space 0, times 9986
[  304.248744][T11188] CPU: 0 PID: 11188 Comm: syz.3.2343 Not tainted syzkaller #0
[  304.250234][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  304.252031][T11188] Call trace:
[  304.252654][T11188]  dump_backtrace+0x1c4/0x1f0
[  304.253486][T11188]  show_stack+0x2c/0x3c
[  304.254182][T11188]  __dump_stack+0x30/0x40
[  304.254899][T11188]  dump_stack_lvl+0xf4/0x15c
[  304.255661][T11188]  dump_stack+0x1c/0x5c
[  304.256373][T11188]  should_fail_ex+0x3cc/0x524
[  304.257185][T11188]  __should_failslab+0xc0/0x11c
[  304.258022][T11188]  should_failslab+0x10/0x28
[  304.258813][T11188]  __kmem_cache_alloc_node+0x7c/0x318
[  304.259835][T11188]  kmalloc_trace+0x48/0x94
[  304.260572][T11188]  raw_open+0x8c/0x458
[  304.261265][T11188]  misc_open+0x310/0x388
[  304.262111][T11188]  chrdev_open+0x3d0/0x51c
[  304.262946][T11188]  do_dentry_open+0x738/0xf8c
[  304.263930][T11188]  vfs_open+0x7c/0x90
[  304.264747][T11188]  path_openat+0x1fc0/0x27a0
[  304.265588][T11188]  do_filp_open+0x198/0x38c
[  304.266451][T11188]  do_sys_openat2+0x134/0x3fc
[  304.267325][T11188]  __arm64_sys_openat+0x11c/0x150
[  304.268253][T11188]  invoke_syscall+0x98/0x290
[  304.269122][T11188]  el0_svc_common+0x13c/0x258
[  304.270027][T11188]  do_el0_svc+0x5c/0x134
[  304.270862][T11188]  el0_svc+0x58/0x12c
[  304.271561][T11188]  el0t_64_sync_handler+0x84/0xf0
[  304.272500][T11188]  el0t_64_sync+0x18c/0x190
[  304.912173][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.916922][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.927614][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2346'.
[  304.929599][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2346'.
[  305.148926][T11080] block2mtd: error: cannot open device /dev
[  305.366930][T11210] nvmet: disable ns before setting buffered_io value.
[  305.369604][T11210] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  305.372068][T11210] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  306.507766][T11240] FAULT_INJECTION: forcing a failure.
[  306.507766][T11240] name fail_futex, interval 1, probability 0, space 0, times 0
[  306.512032][T11240] CPU: 1 PID: 11240 Comm: syz.0.2363 Not tainted syzkaller #0
[  306.513587][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  306.515499][T11240] Call trace:
[  306.516176][T11240]  dump_backtrace+0x1c4/0x1f0
[  306.517191][T11240]  show_stack+0x2c/0x3c
[  306.517955][T11240]  __dump_stack+0x30/0x40
[  306.518866][T11240]  dump_stack_lvl+0xf4/0x15c
[  306.519655][T11240]  dump_stack+0x1c/0x5c
[  306.520438][T11240]  should_fail_ex+0x3cc/0x524
[  306.521214][T11240]  should_fail+0x14/0x24
[  306.522031][T11240]  get_futex_key+0x96c/0xfb0
[  306.522817][T11240]  futex_wake+0x10c/0x458
[  306.523541][T11240]  do_futex+0x2c4/0x340
[  306.524380][T11240]  mm_release+0x190/0x274
[  306.525234][T11240]  exit_mm_release+0x30/0x40
[  306.526037][T11240]  exit_mm+0x50/0x290
[  306.526819][T11240]  do_exit+0x4d0/0x19ac
[  306.527612][T11240]  do_group_exit+0x198/0x238
[  306.528417][T11240]  get_signal+0x11f4/0x133c
[  306.529182][T11240]  do_notify_resume+0x364/0x2c84
[  306.530134][T11240]  el0_svc+0x9c/0x12c
[  306.530873][T11240]  el0t_64_sync_handler+0x84/0xf0
[  306.531806][T11240]  el0t_64_sync+0x18c/0x190
[  306.724035][T11266] nvmet: disable ns before setting buffered_io value.
[  306.726128][T11266] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  306.728934][T11266] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  307.086116][T11273] 
[  307.086606][T11273] ======================================================
[  307.086710][T11282] kcov: kcov_start: t = ffff0000d7405400, size = 524288, area = ffff800022f39000
[  307.087873][T11273] WARNING: possible circular locking dependency detected
[  307.091174][T11273] syzkaller #0 Not tainted
[  307.092013][T11273] ------------------------------------------------------
[  307.093438][T11273] syz.3.2379/11273 is trying to acquire lock:
[  307.093895][T11282] kcov: kcov_task_exit: t = ffff0000d7405400, kcov->t = ffff0000d7405400
[  307.094659][T11273] ffff800017fb6090 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x78/0x488
[  307.098833][T11273] 
[  307.098833][T11273] but task is already holding lock:
[  307.100318][T11273] ffff0001000aaee0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x310/0xee0
[  307.102427][T11273] 
[  307.102427][T11273] which lock already depends on the new lock.
[  307.102427][T11273] 
[  307.104595][T11273] 
[  307.104595][T11273] the existing dependency chain (in reverse order) is:
[  307.106257][T11273] 
[  307.106257][T11273] -> #3 (&sb->s_type->i_mutex_key#20){++++}-{3:3}:
[  307.108021][T11273]        down_write+0x5c/0x88
[  307.108870][T11273]        configfs_depend_item_unlocked+0x128/0x434
[  307.109959][T11273]        usbg_make_tpg+0x1c4/0x4ac
[  307.110920][T11273]        target_fabric_make_tpg+0x98/0x518
[  307.112153][T11273]        configfs_mkdir+0x3e0/0x884
[  307.113250][T11273]        vfs_mkdir+0x314/0x4d8
[  307.114218][T11273]        do_mkdirat+0x1b8/0x3ec
[  307.115118][T11273]        __arm64_sys_mkdirat+0x90/0xa8
[  307.116220][T11273]        invoke_syscall+0x98/0x290
[  307.117250][T11273]        el0_svc_common+0x13c/0x258
[  307.118240][T11273]        do_el0_svc+0x5c/0x134
[  307.119111][T11273]        el0_svc+0x58/0x12c
[  307.119951][T11273]        el0t_64_sync_handler+0x84/0xf0
[  307.120949][T11273]        el0t_64_sync+0x18c/0x190
[  307.121882][T11273] 
[  307.121882][T11273] -> #2 (tpg_instances_lock){+.+.}-{3:3}:
[  307.123384][T11273]        __mutex_lock_common+0x1a0/0x1f3c
[  307.124508][T11273]        mutex_lock_nested+0x38/0x44
[  307.125505][T11273]        tcm_alloc_inst+0x6c/0x190
[  307.126372][T11273]        usb_get_function_instance+0xe8/0x2dc
[  307.127521][T11273]        function_make+0x108/0x2f8
[  307.128486][T11273]        configfs_mkdir+0x3e0/0x884
[  307.129479][T11273]        vfs_mkdir+0x314/0x4d8
[  307.130398][T11273]        do_mkdirat+0x1b8/0x3ec
[  307.131383][T11273]        __arm64_sys_mkdirat+0x90/0xa8
[  307.132323][T11273]        invoke_syscall+0x98/0x290
[  307.133273][T11273]        el0_svc_common+0x13c/0x258
[  307.134354][T11273]        do_el0_svc+0x5c/0x134
[  307.135281][T11273]        el0_svc+0x58/0x12c
[  307.136203][T11273]        el0t_64_sync_handler+0x84/0xf0
[  307.137197][T11273]        el0t_64_sync+0x18c/0x190
[  307.138064][T11273] 
[  307.138064][T11273] -> #1 (func_lock){+.+.}-{3:3}:
[  307.138858][ T4316] nf_conntrack: normal packet for 00000000c8ef0d45
[  307.139442][T11273]        __mutex_lock_common+0x1a0/0x1f3c
[  307.139457][T11273]        mutex_lock_nested+0x38/0x44
[  307.142608][ T4316] tcp_conntracks: 
[  307.142856][T11273]        usb_get_function_instance+0x3c/0x2dc
[  307.143677][ T4316] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  307.144756][T11273]        function_make+0x108/0x2f8
[  307.146477][T11273]        configfs_mkdir+0x3e0/0x884
[  307.147332][T11273]        vfs_mkdir+0x314/0x4d8
[  307.148259][T11273]        do_mkdirat+0x1b8/0x3ec
[  307.149151][T11273]        __arm64_sys_mkdirat+0x90/0xa8
[  307.150081][T11273]        invoke_syscall+0x98/0x290
[  307.151065][T11273]        el0_svc_common+0x13c/0x258
[  307.152045][T11273]        do_el0_svc+0x5c/0x134
[  307.152950][T11273]        el0_svc+0x58/0x12c
[  307.153785][T11273]        el0t_64_sync_handler+0x84/0xf0
[  307.154883][T11273]        el0t_64_sync+0x18c/0x190
[  307.155791][T11273] 
[  307.155791][T11273] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  307.157432][T11273]        __lock_acquire+0x3504/0x7280
[  307.157964][    C1] nf_conntrack: normal packet for 00000000c8ef0d45
[  307.158503][T11273]        lock_acquire+0x210/0x63c
[  307.159661][    C1] tcp_conntracks: 
[  307.160661][T11273]        __mutex_lock_common+0x1a0/0x1f3c
[  307.161295][    C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3
[  307.162308][T11273]        mutex_lock_nested+0x38/0x44
[  307.164151][T11273]        uvcg_streaming_header_allow_link+0x78/0x488
[  307.165388][T11273]        configfs_symlink+0x468/0xee0
[  307.166415][T11273]        vfs_symlink+0x238/0x3b0
[  307.167292][T11273]        do_symlinkat+0x178/0x35c
[  307.168157][T11273]        __arm64_sys_symlinkat+0xa4/0xbc
[  307.169152][T11273]        invoke_syscall+0x98/0x290
[  307.170110][T11273]        el0_svc_common+0x13c/0x258
[  307.171130][T11273]        do_el0_svc+0x5c/0x134
[  307.172007][T11273]        el0_svc+0x58/0x12c
[  307.172858][T11273]        el0t_64_sync_handler+0x84/0xf0
[  307.173935][T11273]        el0t_64_sync+0x18c/0x190
[  307.174835][T11273] 
[  307.174835][T11273] other info that might help us debug this:
[  307.174835][T11273] 
[  307.176710][T11273] Chain exists of:
[  307.176710][T11273]   gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#20
[  307.176710][T11273] 
[  307.179323][T11273]  Possible unsafe locking scenario:
[  307.179323][T11273] 
[  307.180830][T11273]        CPU0                    CPU1
[  307.181904][T11273]        ----                    ----
[  307.182799][T11273]   lock(&sb->s_type->i_mutex_key#20);
[  307.183850][T11273]                                lock(tpg_instances_lock);
[  307.185273][T11273]                                lock(&sb->s_type->i_mutex_key#20);
[  307.186402][T11278] kcov: kcov_task_exit: t = ffff0000ed5ed400, kcov->t = ffff0000ed5ed400
[  307.186972][T11273]   lock(gadget_subsys.su_mutex);
[  307.189664][T11273] 
[  307.189664][T11273]  *** DEADLOCK ***
[  307.189664][T11273] 
[  307.191212][T11273] 2 locks held by syz.3.2379/11273:
[  307.192219][T11273]  #0: ffff0000c7b68460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  307.193898][T11273]  #1: ffff0001000aaee0 (&sb->s_type->i_mutex_key#20){++++}-{3:3}, at: configfs_symlink+0x310/0xee0
[  307.195978][T11273] 
[  307.195978][T11273] stack backtrace:
[  307.197152][T11273] CPU: 0 PID: 11273 Comm: syz.3.2379 Not tainted syzkaller #0
[  307.198603][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[  307.199185][T11284] kcov: kcov_start: t = ffff0000d63e8000, size = 524288, area = ffff800022f39000
[  307.200720][T11273] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000)
[  307.204112][T11273] Call trace:
[  307.204734][T11273]  dump_backtrace+0x1c4/0x1f0
[  307.205628][T11273]  show_stack+0x2c/0x3c
[  307.206430][T11273]  __dump_stack+0x30/0x40
[  307.207339][T11273]  dump_stack_lvl+0xf4/0x15c
[  307.208270][T11273]  dump_stack+0x1c/0x5c
[  307.209064][T11273]  print_circular_bug+0x148/0x1b0
[  307.210070][T11273]  check_noncircular+0x290/0x370
[  307.210179][T11287] kcov: kcov_start: t = ffff0000d21ed400, size = 524288, area = ffff800023549000
[  307.210983][T11273]  __lock_acquire+0x3504/0x7280
[  307.213948][T11273]  lock_acquire+0x210/0x63c
[  307.214799][T11273]  __mutex_lock_common+0x1a0/0x1f3c
[  307.215128][T11284] sctp: sctp_init_sock: sk:000000001a3a9ecf
[  307.215710][T11273]  mutex_lock_nested+0x38/0x44
[  307.215723][T11273]  uvcg_streaming_header_allow_link+0x78/0x488
[  307.217950][    C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  307.218741][T11273]  configfs_symlink+0x468/0xee0
[  307.221547][ T1578] nf_conntrack: new packet for 000000005edcd150
[  307.221690][T11273]  vfs_symlink+0x238/0x3b0
[  307.222939][ T1578] proto(17) != IPPROTO_TCP or too short (len = 156)
[  307.223715][T11273]  do_symlinkat+0x178/0x35c
[  307.225014][ T1578] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  307.225819][T11273]  __arm64_sys_symlinkat+0xa4/0xbc
[  307.227180][ T1578] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  307.228109][T11273]  invoke_syscall+0x98/0x290
[  307.228129][T11273]  el0_svc_common+0x13c/0x258
[  307.228138][T11273]  do_el0_svc+0x5c/0x134
[  307.232270][T11273]  el0_svc+0x58/0x12c
[  307.232632][T11287] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1390
[  307.233075][T11273]  el0t_64_sync_handler+0x84/0xf0
[  307.234373][   T24] nfc: nfc_urelease_event_work: portid 1390
[  307.235303][T11273]  el0t_64_sync+0x18c/0x190
[  307.237637][    C0] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7)
[  307.238098][T11284] usb usb5: usb auto-resume
[  307.240073][    C0] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  307.242487][T11287] kcov: kcov_task_exit: t = ffff0000d21ed400, kcov->t = ffff0000d21ed400
[  307.242941][    C0] tcp_conntracks: 
[  307.244202][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  307.246251][    C0] tcp_conntracks: 
[  307.246259][    C0] syn=0 ack=0 fin=0 rst=1 old=4 new=8
[  307.247866][    C0] tcp_conntracks: 
[  307.247881][    C0] syn=0 ack=0 fin=0 rst=1 old=8 new=8
[  307.250042][T11284] usb usb5: vhci_bus_resume
[  307.250125][T11288] kcov: kcov_start: t = ffff0000cebcd400, size = 524288, area = ffff80002b0af000
[  307.251009][T11284] hub 5-0:1.0: hub_resume
[  307.301496][T11289] kcov: kcov_start: t = ffff0000d51cd400, size = 524288, area = ffff80002b8b1000
[  307.398994][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.400474][    C0] kcov: kcov_start: t = ffff0000c09b3800, size = 262144, area = ffff80001fd2a000
[  307.402225][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 356
[  307.406521][   T62] nf_conntrack: normal packet for 00000000f88ec419
[  307.406571][ T4417] nf_conntrack: normal packet for 00000000ed493945
[  307.409134][ T4417] proto(17) != IPPROTO_TCP or too short (len = 156)
[  307.410787][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.412337][    C0] kcov: kcov_start: t = ffff0000d21e9c00, size = 262144, area = ffff80001fd2a000
[  307.414069][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 447
[  307.415708][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.417279][    C0] kcov: kcov_start: t = ffff0000d51cb800, size = 262144, area = ffff80001fd2a000
[  307.419096][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 563
[  307.421866][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.423509][    C0] kcov: kcov_start: t = ffff0000c09b3800, size = 262144, area = ffff80001fd2a000
[  307.425461][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 356
[  307.426969][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.428320][T11277] configfs: configfs_get_target_path: depth = 7, size = 70
[  307.428576][    C0] kcov: kcov_start: t = ffff0000d21e9c00, size = 262144, area = ffff80001fd2a000
[  307.430090][T11277] configfs: configfs_get_target_path: path = '../../../../../../../usb_gadget/g1/functions/uvc.0/streaming/header/h'
[  307.431573][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 443
[  307.435066][T11273] configfs: configfs_get_target_path: depth = 7, size = 76
[  307.435944][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.436726][T11273] configfs: configfs_get_target_path: path = '../../../../../../../usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u'
[  307.437930][    C0] kcov: kcov_start: t = ffff0000c09b3800, size = 262144, area = ffff80001fd2a000
[  307.437974][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 356
[  307.440925][T11277] configfs: configfs_get_target_path: depth = 7, size = 70
[  307.443194][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.443725][T11277] configfs: configfs_get_target_path: path = '../../../../../../../usb_gadget/g1/functions/uvc.0/streaming/header/h'
[  307.445075][    C0] kcov: kcov_start: t = ffff0000d21e9c00, size = 262144, area = ffff80001fd2a000
[  307.445119][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 453
[  307.449342][T11277] configfs: configfs_get_target_path: depth = 7, size = 68
[  307.451197][    C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.452494][T11292] kcov: kcov_start: t = ffff0000d51c8000, size = 524288, area = ffff8000248ea000
[  307.453785][    C0] kcov: kcov_start: t = ffff0000d21e9c00, size = 262144, area = ffff80001fd2a000
[  307.455738][T11277] configfs: configfs_get_target_path: path = '../../../../../../../usb_gadget/g1/functions/uvc.0/control/header/h'
[  307.457114][    C0] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 453
[  307.460118][ T4377] kcov: kcov_remote_start: handle = 100000000000005, context: task
[  307.463829][ T4377] kcov: kcov_start: t = ffff0000d06c9c00, size = 1048576, area = ffff8000344ce000
[  307.466094][ T4417] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings
[  307.468494][ T4417] cfg80211: Restoring regulatory settings
[  307.469422][T11290] kcov: kcov_start: t = ffff0000d51cb800, size = 524288, area = ffff80002394a000
[  307.469793][ T4417] cfg80211: Kicking the queue
[  307.471206][T11292] send_to_group: group=00000000c74ea057 mask=8 marks_mask=2008 marks_ignore_mask=0 data=000000008a2caf2a data_type=1 dir=0000000000000000 cookie=0
[  307.472110][ T4377] hub 5-0:1.0: state 7 ports 8 chg 0000 evt 0000
[  307.474749][T11292] inotify_handle_inode_event: group=00000000c74ea057 mark=00000000cb60d640 mask=8
[  307.476014][ T4377] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff8000344ce000 525823
[  307.477585][T11292] fsnotify_insert_event: group=00000000c74ea057 event=0000000086b7d845
[  307.480163][   T24] cfg80211: Calling CRDA to update world regulatory domain
[  307.481297][ T3939] get_one_event: group=00000000c74ea057 event=0000000086b7d845
[  307.482250][   T24] kobject: 'regulatory.0' (00000000e7c65371): kobject_uevent_env
[  307.483553][ T3939] fsnotify_remove_first_event: group=00000000c74ea057 event=0000000086b7d845
[  307.485039][   T24] kobject: 'regulatory.0' (00000000e7c65371): fill_kobj_path: path = '/devices/platform/regulatory.0'
[  307.486294][ T3939] inotify_read: group=00000000c74ea057 kevent=0000000086b7d845
[  307.489817][ T3939] copy_event_to_user: group=00000000c74ea057 event=0000000086b7d845
[  307.491744][ T3939] inotify_read: group=00000000c74ea057 kevent=0000000000000000
[  307.494211][T11272] sctp: sctp_close: sk:0000000041885ba4, timeout:0
[  307.495606][T11272] sctp: sctp_destroy_sock: sk:0000000041885ba4
[  307.497225][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  307.497631][ T3939] kobject: 'loop0' (00000000efd35bce): kobject_uevent_env
[  307.499130][T11273] kcov: kcov_task_exit: t = ffff0000d9608000, kcov->t = ffff0000d9608000
[  307.500317][ T3939] kobject: 'loop0' (00000000efd35bce): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  307.501694][T11277] kcov: kcov_task_exit: t = ffff0000ed5eb800, kcov->t = ffff0000ed5eb800
[  307.505613][ T7675] inotify_handle_inode_event: group=00000000c74ea057 mark=00000000cb60d640 mask=8000
[  307.507659][ T7675] fsnotify_insert_event: group=00000000c74ea057 event=00000000ba7da23f
[  307.514300][ T3939] get_one_event: group=00000000c74ea057 event=00000000ba7da23f
[  307.515854][ T3939] fsnotify_remove_first_event: group=00000000c74ea057 event=00000000ba7da23f
[  307.517472][ T3939] inotify_read: group=00000000c74ea057 kevent=00000000ba7da23f
[  307.519389][ T3939] copy_event_to_user: group=00000000c74ea057 event=00000000ba7da23f
[  307.521007][ T3939] inotify_read: group=00000000c74ea057 kevent=0000000000000000
[  307.537961][T11267] kcov: kcov_task_exit: t = ffff0000f3220000, kcov->t = ffff0000f3220000
[  307.538067][T11276] kcov: kcov_task_exit: t = ffff0000ed5e9c00, kcov->t = ffff0000ed5e9c00
[  307.539846][T11275] kcov: kcov_task_exit: t = ffff0000ed5e8000, kcov->t = ffff0000ed5e8000
[  307.548517][T11283] sctp: sctp_close: sk:000000001a3a9ecf, timeout:0
[  307.550009][T11283] sctp: sctp_destroy_sock: sk:000000001a3a9ecf
[  307.551402][T11284] kcov: kcov_task_exit: t = ffff0000d63e8000, kcov->t = ffff0000d63e8000
[  307.551418][T11290] kcov: kcov_task_exit: t = ffff0000d51cb800, kcov->t = ffff0000d51cb800
[  307.553114][T11292] kcov: kcov_task_exit: t = ffff0000d51c8000, kcov->t = ffff0000d51c8000
[  307.558164][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  307.597983][    C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 1
[  307.629888][    T7] free_ioctx: freeing 00000000d1d35cba
[  307.630938][    T7] aio_free_ring: pid(7) [0] page->count=1
[  307.678357][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.680068][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.681648][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 398
[  307.683134][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.684422][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.686336][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 398
[  307.687873][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.689398][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.691227][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 396
[  307.692612][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.694020][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.695708][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 398
[  307.697189][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.698848][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.700671][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 396
[  307.702517][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.703974][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.705505][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 396
[  307.706906][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.708554][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.710383][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 394
[  307.711898][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.713295][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.714950][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 398
[  307.716414][ T4377] hub 5-0:1.0: hub_suspend
[  307.717184][    C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq
[  307.718526][    C1] kcov: kcov_start: t = ffff0000c0a59c00, size = 262144, area = ffff80001fd2a000
[  307.720165][    C1] kcov: kcov_move_area: ffff8000334cc000 1048576 <= ffff80001fd2a000 241
[  307.721676][ T4377] usb usb5: bus auto-suspend, wakeup 1
[  307.722530][ T4377] usb usb5: vhci_bus_suspend
[  307.857901][    C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5)
[  307.857968][    C1] nf_conntrack: new packet for 000000005edcd150
[  307.860293][    C0] nf_conntrack: new packet for 000000008d0f7c55
[  307.861442][    C1] tcp_conntracks: 
[  307.862707][    C0] tcp_conntracks: 
[  307.863330][    C1] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  307.864016][    C0] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  307.864963][    C1] nf_nat: Already setup manip DST for ct 000000005edcd150 (status bits 0x100)
[  307.865981][    C0] nf_nat: Already setup manip DST for ct 000000008d0f7c55 (status bits 0x100)
[  307.867592][    C1] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  307.869473][    C0] nf_conntrack: nf_ct_destroy(000000008d0f7c55)
[  307.870464][    C1] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  307.871706][    C0] nf_conntrack: nf_ct_destroy: returning ct=000000008d0f7c55 to slab
[  307.873381][    C1] nf_conntrack: new packet for 000000005edcd150
[  307.875915][    C1] tcp_conntracks: 
[  307.875920][    C1] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  307.877860][    C1] nf_nat: Already setup manip DST for ct 000000005edcd150 (status bits 0x100)
[  307.879595][    C1] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  307.880884][    C1] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  307.882339][    C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[  307.910334][T11280] kcov: kcov_task_exit: t = ffff0000c92c9c00, kcov->t = ffff0000c92c9c00
[  307.910448][T11288] kcov: kcov_task_exit: t = ffff0000cebcd400, kcov->t = ffff0000cebcd400
[  307.912270][T11289] kcov: kcov_task_exit: t = ffff0000d51cd400, kcov->t = ffff0000d51cd400
[  308.497859][    C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2)
[  308.500073][    C1] nf_conntrack: new packet for 000000005edcd150
[  308.501310][    C1] tcp_conntracks: 
[  308.501326][    C1] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  308.503169][    C1] nf_nat: Already setup manip DST for ct 000000005edcd150 (status bits 0x100)
[  308.504988][    C1] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  308.506152][    C1] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  308.507961][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  308.737928][    T7] nf_conntrack: normal packet for 00000000a136bc10
[  309.057825][    C1] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5)
[  309.060030][ T4417] net_ratelimit: 34 callbacks suppressed
[  309.060036][ T4417] wireguard: wg2: Sending handshake initiation to peer 11 ([::1]:20001/0%0)
[  309.062953][ T4417] proto(17) != IPPROTO_TCP or too short (len = 156)
[  309.137826][    C1] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  309.140005][ T4417] wireguard: wg0: Sending handshake initiation to peer 19 ([::1]:20002/0%0)
[  309.146236][ T4417] nf_conntrack: new packet for 000000005edcd150
[  309.147247][ T4417] proto(17) != IPPROTO_TCP or too short (len = 156)
[  309.148315][ T4417] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  309.149315][ T4417] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  309.537806][    C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0)
[  309.539788][    C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0)
[  309.541667][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  309.543036][    C0] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0)
[  309.617824][    C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0)
[  309.619476][   T14] nf_conntrack: normal packet for 0000000036e37888
[  309.777789][    C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4)
[  309.780389][ T4417] wireguard: wg2: Sending handshake initiation to peer 12 (127.0.0.1:20002)
[  310.417799][    C0] nf_conntrack: new packet for 000000008d0f7c55
[  310.418935][    C0] tcp_conntracks: 
[  310.418949][    C0] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  310.420515][    C0] nf_nat: Already setup manip DST for ct 000000008d0f7c55 (status bits 0x100)
[  310.422071][    C0] nf_conntrack: nf_ct_destroy(000000008d0f7c55)
[  310.423006][    C0] nf_conntrack: nf_ct_destroy: returning ct=000000008d0f7c55 to slab
[  310.424643][    C0] addr is not unicast.
[  310.424702][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  310.425423][    C0] addr is not unicast.
[  310.427286][    C0] addr is not unicast.
[  310.427815][    C1] addr is not unicast.
[  310.427992][    C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  310.428822][    C1] addr is not unicast.
[  310.431356][    C1] addr is not unicast.
[  310.432247][    C1] addr is not unicast.
[  310.432480][ T4573] wireguard: wg0: Sending handshake initiation to peer 14 ([::1]:20003/0%0)
[  310.433079][    C1] addr is not unicast.
[  310.434562][ T4573] nf_conntrack: normal packet for 00000000f9815685
[  310.435177][    C1] addr is not unicast.
[  310.436208][ T4573] proto(17) != IPPROTO_TCP or too short (len = 156)
[  310.436838][    C1] addr is not unicast.
[  310.438731][    C1] addr is not unicast.
[  310.439486][    C1] addr is not unicast.
[  310.440250][    C1] addr is not unicast.
[  310.440961][    C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  310.442961][ T4573] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0)
[  310.442955][    C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 18)
[  310.444845][ T4573] proto(17) != IPPROTO_TCP or too short (len = 156)
[  310.448101][   T62] wireguard: wg1: Sending handshake initiation to peer 16 (127.0.0.1:20003)
[  310.449892][   T62] nf_conntrack: normal packet for 00000000540d1967
[  310.577902][   T24] nf_conntrack: normal packet for 00000000f359be8e
[  310.657788][ T4573] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings
[  310.659498][ T4573] cfg80211: Restoring regulatory settings
[  310.660981][ T4573] cfg80211: Kicking the queue
[  310.661967][    T7] cfg80211: Calling CRDA to update world regulatory domain
[  310.663417][    T7] kobject: 'regulatory.0' (00000000e7c65371): kobject_uevent_env
[  310.664912][    T7] kobject: 'regulatory.0' (00000000e7c65371): fill_kobj_path: path = '/devices/platform/regulatory.0'
[  310.667047][    T7] cfg80211: Pending regulatory request, waiting for it to be processed...
[  311.057713][    C1] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  311.059787][    C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 8)
[  311.059943][    T9] proto(17) != IPPROTO_TCP or too short (len = 156)
[  311.061912][    C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[  311.063395][ T4573] nf_conntrack: normal packet for 00000000d861b884
[  311.065241][    T9] proto(17) != IPPROTO_TCP or too short (len = 156)
[  311.066178][ T4573] proto(17) != IPPROTO_TCP or too short (len = 156)
[  311.137770][    C1] nf_conntrack: new packet for 000000008d0549aa
[  311.138989][    C1] tcp_conntracks: 
[  311.139002][    C1] syn=1 ack=0 fin=0 rst=0 old=0 new=1
[  311.140837][    C1] nf_nat: Already setup manip DST for ct 000000008d0549aa (status bits 0x100)
[  311.142300][    C1] nf_conntrack: nf_ct_destroy(000000008d0549aa)
[  311.143426][    C1] nf_conntrack: nf_ct_destroy: returning ct=000000008d0549aa to slab
[  311.617864][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  311.627715][    C0] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 17)
[  311.630210][   T62] nf_conntrack: normal packet for 00000000bdcedc15
[  311.697707][    C0] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6)
[  311.700134][ T4573] nf_conntrack: normal packet for 0000000036e37888
[  311.777800][    T7] nf_conntrack: normal packet for 00000000a136bc10
[  312.267664][    C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  312.270171][ T1578] nf_conntrack: new packet for 000000005edcd150
[  312.271261][ T1578] proto(17) != IPPROTO_TCP or too short (len = 156)
[  312.272387][ T1578] nf_conntrack: nf_ct_destroy(000000005edcd150)
[  312.273489][ T1578] nf_conntrack: nf_ct_destroy: returning ct=000000005edcd150 to slab
[  312.337645][    C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5)
[  312.337681][    C1] addr is not unicast.
[  312.339947][    C0] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 6)
[  312.342548][    C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7)
[  312.342692][    T9] nf_conntrack: normal packet for 00000000124f2920
[  312.344498][    C0] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9)
[  312.345747][    T9] proto(17) != IPPROTO_TCP or too short (len = 156)
[  312.350527][ T1578] nf_conntrack: normal packet for 00000000d7b600b9
[  312.351746][ T1578] proto(17) != IPPROTO_TCP or too short (len = 156)
[  312.657774][   T24] nf_conntrack: normal packet for 00000000f359be8e
[  312.977608][    C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  312.977613][    C0] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8)
[  312.981578][    C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[  312.983960][ T4573] nf_conntrack: normal packet for 0000000026130c27
[  312.983962][    T9] nf_conntrack: normal packet for 00000000ed493945
[  312.983980][    T9] proto(17) != IPPROTO_TCP or too short (len = 156)
[  312.985106][ T4573] proto(17) != IPPROTO_TCP or too short (len = 156)
[  312.988695][   T62] nf_conntrack: normal packet for 00000000f88ec419
[  313.617647][    C1] addr is not unicast.
[  313.618827][ T4377] nf_conntrack: normal packet for 00000000bd08f5bc
[  313.627569][    C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6)
[  313.697763][   T24] nf_conntrack: normal packet for 00000000f359be8e
[  313.857567][    T9] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings
[  313.859303][    T9] cfg80211: Restoring regulatory settings
[  313.860967][    T9] cfg80211: Kicking the queue
[  313.861889][    T7] cfg80211: Calling CRDA to update world regulatory domain
[  313.863263][    T7] kobject: 'regulatory.0' (00000000e7c65371): kobject_uevent_env
[  313.864620][    T7] kobject: 'regulatory.0' (00000000e7c65371): fill_kobj_path: path = '/devices/platform/regulatory.0'
[  313.866745][    T7] cfg80211: Pending regulatory request, waiting for it to be processed...
[  314.257537][    C1] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[  314.260049][ T1578] net_ratelimit: 29 callbacks suppressed
[  314.260058][ T1578] wireguard: wg2: Sending handshake initiation to peer 11 ([::1]:20001/0%0)
[  314.262874][ T1578] proto(17) != IPPROTO_TCP or too short (len = 156)
[  314.267558][    C0] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3)
[  314.269439][ T1578] wireguard: wg2: Sending handshake initiation to peer 24 (127.0.0.1:20002)
[  314.269448][    C0] wireguard: wg1: Sending keepalive packet to peer 4 (127.0.0.1:20003)
[  314.274636][    C1] wireguard: wg2: Receiving keepalive packet from peer 6 (127.0.0.1:20002)
[  314.737513][    C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0)
[  314.739450][    C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0)
[  314.740927][    C1] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0)
[  314.742507][   T14] nf_conntrack: normal packet for 0000000036e37888
[  314.742570][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  314.745088][    C1] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0)
[  314.817509][    C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0)
[  314.818994][    T7] nf_conntrack: normal packet for 00000000a136bc10
[  314.820266][    C0] wireguard: wg2: Receiving keepalive packet from peer 5 ([::1]:20001/0%0)
[  314.897504][    C1] wireguard: wg0: Handshake for peer 19 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  314.899681][ T4573] nf_conntrack: new packet for 000000008d0f7c55
[  314.900861][ T4573] proto(17) != IPPROTO_TCP or too short (len = 156)
[  314.902007][ T4573] nf_conntrack: nf_ct_destroy(000000008d0f7c55)
[  314.903074][ T4573] nf_conntrack: nf_ct_destroy: returning ct=000000008d0f7c55 to slab
[  315.537502][    C0] addr is not unicast.
[  315.537502][    C1] addr is not unicast.
[  315.537569][    C1] addr is not unicast.
[  315.538394][    C0] addr is not unicast.
[  315.539168][    C1] addr is not unicast.
[  315.539969][    C0] addr is not unicast.
[  315.540743][    C1] addr is not unicast.
[  315.541516][    C0] addr is not unicast.
[  315.542199][    C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5)
[  315.543010][    C0] addr is not unicast.
[  315.546716][    C0] addr is not unicast.
[  315.547543][    C0] nf_conntrack: new packet for 000000008d0f7c55
[  315.548545][    C0] tcp_conntracks: 
[  315.548559][    C0] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  315.550046][    C0] nf_nat: Already setup manip DST for ct 000000008d0f7c55 (status bits 0x100)
[  315.551797][    C0] nf_conntrack: nf_ct_destroy(000000008d0f7c55)
[  315.552926][    C0] nf_conntrack: nf_ct_destroy: returning ct=000000008d0f7c55 to slab
[  315.554073][   T62] nf_conntrack: clean_from_lists(00000000c38b084f)
[  315.556514][   T62] nf_conntrack: nf_ct_destroy(00000000c38b084f)
[  315.557655][   T62] nf_conntrack: nf_ct_destroy: returning ct=00000000c38b084f to slab
[  315.566291][   T62] nf_conntrack: clean_from_lists(00000000d191f310)
[  315.567403][   T62] nf_conntrack: nf_ct_destroy(00000000d191f310)
[  315.568724][   T62] nf_conntrack: nf_ct_destroy: returning ct=00000000d191f310 to slab
[  315.573440][   T62] nf_conntrack: clean_from_lists(000000002e48233d)
[  315.574544][   T62] nf_conntrack: nf_ct_destroy(000000002e48233d)
[  315.575621][   T62] nf_conntrack: nf_ct_destroy: returning ct=000000002e48233d to slab
[  315.580875][   T62] nf_conntrack: clean_from_lists(000000008de5ac2e)
[  315.582065][   T62] nf_conntrack: nf_ct_destroy(000000008de5ac2e)
[  315.583066][   T62] nf_conntrack: nf_ct_destroy: returning ct=000000008de5ac2e to slab
[  315.591016][ T1578] nf_conntrack: clean_from_lists(0000000083b11bce)
[  315.592330][ T1578] nf_conntrack: nf_ct_destroy(0000000083b11bce)
[  315.593490][ T1578] nf_conntrack: nf_ct_destroy: returning ct=0000000083b11bce to slab
[  315.598016][ T1578] nf_conntrack: clean_from_lists(0000000066d12d00)
[  315.599450][ T1578] nf_conntrack: nf_ct_destroy(0000000066d12d00)
[  315.600735][ T1578] nf_conntrack: nf_ct_destroy: returning ct=0000000066d12d00 to slab
[  315.603581][ T1578] nf_conntrack: clean_from_lists(00000000b7082300)
[  315.604664][ T1578] nf_conntrack: nf_ct_destroy(00000000b7082300)
[  315.605744][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000b7082300 to slab
[  315.607110][ T1578] nf_conntrack: clean_from_lists(00000000a39086fa)
[  315.608412][ T1578] nf_conntrack: nf_ct_destroy(00000000a39086fa)
[  315.609542][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000a39086fa to slab
[  315.613483][ T1578] nf_conntrack: clean_from_lists(00000000691ce94a)
[  315.614577][ T1578] nf_conntrack: nf_ct_destroy(00000000691ce94a)
[  315.615736][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000691ce94a to slab
[  315.622018][ T1578] nf_conntrack: clean_from_lists(00000000c2730e9e)
[  315.623164][ T1578] nf_conntrack: nf_ct_destroy(00000000c2730e9e)
[  315.624156][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000c2730e9e to slab
[  315.629837][ T1578] nf_conntrack: clean_from_lists(00000000a908844d)
[  315.630877][ T1578] nf_conntrack: nf_ct_destroy(00000000a908844d)
[  315.632073][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000a908844d to slab
[  315.645796][ T1578] nf_conntrack: clean_from_lists(000000003d2750dd)
[  315.647122][ T1578] nf_conntrack: nf_ct_destroy(000000003d2750dd)
[  315.648281][ T1578] nf_conntrack: nf_ct_destroy: returning ct=000000003d2750dd to slab
[  315.651825][ T1578] nf_conntrack: clean_from_lists(000000003d6a061e)
[  315.657299][ T1578] nf_conntrack: clean_from_lists(00000000a3064cdd)
[  315.658533][ T1578] nf_conntrack: nf_ct_destroy(00000000a3064cdd)
[  315.659883][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000a3064cdd to slab
[  315.662980][ T1578] nf_conntrack: clean_from_lists(0000000098829732)
[  315.664171][ T1578] nf_conntrack: nf_ct_destroy(0000000098829732)
[  315.665166][ T1578] nf_conntrack: nf_ct_destroy: returning ct=0000000098829732 to slab
[  315.675985][   T62] nf_conntrack: clean_from_lists(000000000b1fb347)
[  315.677046][   T62] nf_conntrack: nf_ct_destroy(000000000b1fb347)
[  315.678192][   T62] nf_conntrack: nf_ct_destroy: returning ct=000000000b1fb347 to slab
[  315.680981][   T62] nf_conntrack: clean_from_lists(000000007a21475e)
[  315.682603][   T62] nf_conntrack: nf_ct_destroy(000000007a21475e)
[  315.683685][   T62] nf_conntrack: nf_ct_destroy: returning ct=000000007a21475e to slab
[  315.688084][ T1578] nf_conntrack: clean_from_lists(00000000f8c3b9cf)
[  315.689328][ T1578] nf_conntrack: nf_ct_destroy(00000000f8c3b9cf)
[  315.690470][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000f8c3b9cf to slab
[  315.694370][ T1578] nf_conntrack: clean_from_lists(00000000158d94f6)
[  315.695469][ T1578] nf_conntrack: nf_ct_destroy(00000000158d94f6)
[  315.696468][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000158d94f6 to slab
[  315.711573][ T1578] nf_conntrack: clean_from_lists(0000000003b1552d)
[  315.712701][ T1578] nf_conntrack: nf_ct_destroy(0000000003b1552d)
[  315.713690][ T1578] nf_conntrack: nf_ct_destroy: returning ct=0000000003b1552d to slab
[  315.722491][ T1578] nf_conntrack: clean_from_lists(00000000df110e44)
[  315.723700][ T1578] nf_conntrack: nf_ct_destroy(00000000df110e44)
[  315.724837][ T1578] nf_conntrack: nf_ct_destroy: returning ct=00000000df110e44 to slab
[  315.756491][ T1578] nf_conntrack: clean_from_lists(00000000a6cc6568)
[  315.775479][ T1578] nf_conntrack: clean_from_lists(000000005863d9ee)
[  315.777647][   T24] nf_conntrack: normal packet for 00000000f359be8e
[  316.177426][    C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7)
[  316.177426][    C0] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  316.177468][    C1] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  316.179895][    C0] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 19)
[  316.182200][   T39] proto(17) != IPPROTO_TCP or too short (len = 156)
[  316.183820][    C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  316.186216][   T39] proto(17) != IPPROTO_TCP or too short (len = 156)
[  316.187378][    C0] wireguard: wg1: Retrying handshake with peer 40 (127.0.0.1:20003) because we stopped hearing back after 15 seconds
[  316.191655][   T39] proto(17) != IPPROTO_TCP or too short (len = 156)
[  316.192987][ T4573] nf_conntrack: normal packet for 00000000540d1967
[  316.194407][   T39] nf_conntrack: normal packet for 00000000f9815685
[  316.196264][   T39] proto(17) != IPPROTO_TCP or too short (len = 156)
[  316.737416][    C1] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 7)
[  316.739735][   T39] nf_conntrack: normal packet for 0000000036e37888
[  316.817393][    C1] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 18)
[  316.817393][    C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9)
[  316.817476][    C0] nf_conntrack: new packet for 0000000003b1552d
[  316.819897][ T1578] nf_conntrack: normal packet for 00000000bdcedc15
[  316.821534][    C0] tcp_conntracks: 
[  316.823857][    C0] syn=0 ack=1 fin=0 rst=0 old=0 new=3
[  316.824604][   T39] nf_conntrack: normal packet for 00000000d861b884
[  316.825428][    C0] nf_nat: Already setup manip DST for ct 0000000003b1552d (status bits 0x100)
[  316.826490][   T39] proto(17) != IPPROTO_TCP or too short (len = 156)
[  316.828134][    C0] nf_conntrack: nf_ct_destroy(0000000003b1552d)
[  316.830330][    C0] nf_conntrack: nf_ct_destroy: returning ct=0000000003b1552d to slab
[  316.831892][ T4377] nf_conntrack: normal packet for 00000000f359be8e
[  317.067428][   T62] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings
[  317.069006][   T62] cfg80211: Restoring regulatory settings
[  317.070596][   T62] cfg80211: Kicking the queue
[  317.071467][    T7] cfg80211: Calling CRDA to update world regulatory domain
[  317.072717][    T7] kobject: 'regulatory.0' (00000000e7c65371): kobject_uevent_env
[  317.073985][    T7] kobject: 'regulatory.0' (00000000e7c65371): fill_kobj_path: path = '/devices/platform/regulatory.0'
[  317.075820][    T7] cfg80211: Pending regulatory request, waiting for it to be processed...