last executing test programs:

1m27.258706978s ago: executing program 3:
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x0)
msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000040"], 0x8, 0x0)

1m26.757527953s ago: executing program 4:
syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, '.\x00'}})

1m26.23315128s ago: executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m26.005575825s ago: executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x402c5342, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x4, &(0x7f0000000480), 0x4)

1m24.874361903s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x12)

1m24.695797822s ago: executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x0, 0x2})
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x6, 0x10000, 0x824, 0x1000})

1m24.539735512s ago: executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x2000010e, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESDEC], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0xe}, 0x90)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.events\x00', 0x300, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

1m23.126061258s ago: executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0xb, &(0x7f0000000480), 0x4)

1m22.005696765s ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045505, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x1100, 0x0, 0x0, 0x10003})
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

1m21.876639013s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, '.\x00'}})

1m20.121542981s ago: executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700))
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)={0x14, r2, 0x515}, 0x14}}, 0x0)

1m19.615676163s ago: executing program 2:
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @private, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'tunl0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000380), 0x4)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r2, 0x0, r2)
write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [], 0xa, "267eba51a7d6aca861138b5a7491f0dd0ad623084380c5441971516ed6d0c99efe1b6a7124f08dfb993b0ad69cbe5a7f44dabaa0ad117873f87cd4049df5f2a4b540eb51c55188a102d15f577b1293025de3efaf42810dabab8f6e2b8cbd342b4ffd4732f1dd0604690209ba4e6ad6ff77f2b0de000ecb49a3b4db927ebd73381586b734cca376e4abc9538cecb3c3e51a65990e7fc923dd22a279c8ebc7bc"}, 0xaa)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r3 = socket$inet6(0xa, 0x0, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@local}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010102}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r3, &(0x7f00000000c0), 0x1c)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000100))

1m17.448697899s ago: executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x41, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = dup(r3)
ftruncate(r4, 0x400f80)
write$binfmt_script(r1, &(0x7f0000000180), 0xfcb8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

1m16.991974032s ago: executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
getsockname(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000180)={[{@user_xattr}, {@i_version}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$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")
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000))
r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r2, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file2\x00', 0x2000002, &(0x7f0000000040)=ANY=[], 0x1, 0x5ea6, &(0x7f00000085c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1830820, 0x0, 0xfd, 0x0, &(0x7f00000001c0))
rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x8, {0xffffffffffffffff}, {<r6=>0xffffffffffffffff}, 0x1, 0x101})
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r6, 0x0)

1m16.763212666s ago: executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8520006deb000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

1m16.622996455s ago: executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x46880)
r5 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r3, r5}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10)

1m16.603607624s ago: executing program 4:
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x147c42, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20044888, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0)
link(&(0x7f0000001240)='./bus\x00', &(0x7f0000000bc0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083008000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

1m15.890593706s ago: executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m15.462467447s ago: executing program 0:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000840))
writev(r0, &(0x7f0000000340), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x1c, 0x0, 0x70f, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="dcd782262a53e4f73e9c76716082eab41500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r4}, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmsg$can_raw(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000)
read$alg(r6, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x26f6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f00000002c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1f}, @jmp={0x5, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x38}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ab}, @jmp={0x5, 0x1, 0x5, 0x3, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_fd={0x18, 0x8}, @map_fd={0x18, 0xb}], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x90)

1m15.338424303s ago: executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
read$dsp(r3, &(0x7f00000000c0)=""/4096, 0x1000)

1m14.243333511s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, '.\x00'}})

1m12.540821257s ago: executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700))
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)={0x14, r2, 0x515}, 0x14}}, 0x0)

1m12.340965948s ago: executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x541b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
getpgrp(r2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x6000, @fd_index=0x2, 0x0, 0x20000000, 0x0, 0x0, 0x1, {0x2}})
r3 = memfd_secret(0x0)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x10000000)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))

1m10.550615923s ago: executing program 5:
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

1m5.31431562s ago: executing program 0:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x147c42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x8})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
link(&(0x7f0000001240)='./bus\x00', &(0x7f0000000bc0)='./file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

44.230149516s ago: executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$unix(0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$session_to_parent(0x12)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000140)=""/45, &(0x7f0000001400)=0x2d)
keyctl$session_to_parent(0x12)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a90800124b904cfc27929a3", 0x0, 0x1})
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

44.064015867s ago: executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20014, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adc0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179f6633b6958ebf998a0685bc5cdd1f97291328e1082f8faf482e15eb93996800"/207, @ANYRESDEC=0x0], 0xfd, 0xc34, &(0x7f0000001080)="$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")
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setns(0xffffffffffffffff, 0x66020000)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400027e)
r1 = io_uring_setup(0x6a0b, &(0x7f0000000200)={0x0, 0x0, 0x800})
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001680)={0x9, 0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/101, 0x65}], &(0x7f0000001640)}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001dc0)={0x1, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, 0x8}, 0x20)

41.718825701s ago: executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4)
msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x2}, 0x90)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r3 = dup(r1)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
dup3(r3, r4, 0x0)

38.013962136s ago: executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="a1", 0x1, 0x4080, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x80000001, 0x4}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)

34.660132402s ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

34.583923582s ago: executing program 1:
syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003380)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0)
r3 = dup2(r1, 0xffffffffffffffff)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x7, 0x700, 0x8000, 0x5d0, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x0, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, {[@end]}}}}})
getpeername$packet(r3, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c80))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20008004)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000000200", 0x2e)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800"/16, @ANYRES32=r6, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8a00000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r5, @ANYBLOB="000000000000009a32050000080000004608f0ffb0000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x11, 0x1, 0x8)
flock(0xffffffffffffffff, 0x4)

34.081715387s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0)

33.81559688s ago: executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x46880)
add_key$user(0x0, 0x0, &(0x7f0000000800), 0x0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r5}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x0)

32.791276176s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0xfff, 0x7}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r3, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4080, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x0, 0x4}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)

32.523689041s ago: executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110a38b410000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8520006deb000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))

0s ago: executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioprio_get$pid(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x9, 0x1)

kernel console output (not intermixed with test programs):

8 length: 249 > 2
[   81.889348][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.937933][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.946530][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.963535][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.975245][   T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   81.983635][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.697399][ T5113] chnl_net:caif_netlink_parms(): no params data found
[   82.799062][ T5119] chnl_net:caif_netlink_parms(): no params data found
[   82.887122][ T5110] chnl_net:caif_netlink_parms(): no params data found
[   83.085213][ T5120] chnl_net:caif_netlink_parms(): no params data found
[   83.112941][ T5112] chnl_net:caif_netlink_parms(): no params data found
[   83.185777][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.194503][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.203036][ T5119] bridge_slave_0: entered allmulticast mode
[   83.210578][ T5119] bridge_slave_0: entered promiscuous mode
[   83.251786][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.259015][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.267679][ T5113] bridge_slave_0: entered allmulticast mode
[   83.276630][ T5113] bridge_slave_0: entered promiscuous mode
[   83.316156][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.323593][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.331027][ T5119] bridge_slave_1: entered allmulticast mode
[   83.339769][ T5119] bridge_slave_1: entered promiscuous mode
[   83.382400][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.389629][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.398214][ T5113] bridge_slave_1: entered allmulticast mode
[   83.406756][ T5113] bridge_slave_1: entered promiscuous mode
[   83.458600][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.521773][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.595047][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.613801][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.693036][ T5133] chnl_net:caif_netlink_parms(): no params data found
[   83.714148][ T5119] team0: Port device team_slave_0 added
[   83.723150][   T53] Bluetooth: hci3: command tx timeout
[   83.729093][   T53] Bluetooth: hci1: command tx timeout
[   83.735065][ T5126] Bluetooth: hci4: command tx timeout
[   83.736689][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.748651][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.756570][ T5110] bridge_slave_0: entered allmulticast mode
[   83.764448][ T5110] bridge_slave_0: entered promiscuous mode
[   83.812018][ T5122] Bluetooth: hci0: command tx timeout
[   83.818013][   T53] Bluetooth: hci2: command tx timeout
[   83.837997][ T5119] team0: Port device team_slave_1 added
[   83.845146][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.853374][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.860625][ T5110] bridge_slave_1: entered allmulticast mode
[   83.869090][ T5110] bridge_slave_1: entered promiscuous mode
[   83.876951][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.884825][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.892443][ T5120] bridge_slave_0: entered allmulticast mode
[   83.899944][ T5120] bridge_slave_0: entered promiscuous mode
[   83.913170][ T5113] team0: Port device team_slave_0 added
[   83.932473][ T5113] team0: Port device team_slave_1 added
[   84.030523][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.038506][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.047021][ T5120] bridge_slave_1: entered allmulticast mode
[   84.051986][   T53] Bluetooth: hci5: command tx timeout
[   84.056124][ T5120] bridge_slave_1: entered promiscuous mode
[   84.118774][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.126007][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.153272][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.166030][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.174403][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.181914][ T5112] bridge_slave_0: entered allmulticast mode
[   84.189822][ T5112] bridge_slave_0: entered promiscuous mode
[   84.200006][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.207759][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.235365][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.289271][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.296756][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.324057][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.335694][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.343406][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.350733][ T5112] bridge_slave_1: entered allmulticast mode
[   84.358483][ T5112] bridge_slave_1: entered promiscuous mode
[   84.385011][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.393081][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.421174][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.437153][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.452464][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.465096][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.479801][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.591874][ T5120] team0: Port device team_slave_0 added
[   84.631009][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.692729][ T5120] team0: Port device team_slave_1 added
[   84.699543][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.707047][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.719945][ T5133] bridge_slave_0: entered allmulticast mode
[   84.727966][ T5133] bridge_slave_0: entered promiscuous mode
[   84.762334][ T5113] hsr_slave_0: entered promiscuous mode
[   84.769704][ T5113] hsr_slave_1: entered promiscuous mode
[   84.783489][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.810467][ T5110] team0: Port device team_slave_0 added
[   84.833080][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.840313][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.848626][ T5133] bridge_slave_1: entered allmulticast mode
[   84.856286][ T5133] bridge_slave_1: entered promiscuous mode
[   84.902437][ T5110] team0: Port device team_slave_1 added
[   84.926758][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.934312][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.961211][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.029040][ T5119] hsr_slave_0: entered promiscuous mode
[   85.037250][ T5119] hsr_slave_1: entered promiscuous mode
[   85.043936][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.052136][ T5119] Cannot create hsr debugfs directory
[   85.076859][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.084190][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.111464][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.153736][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.193067][ T5112] team0: Port device team_slave_0 added
[   85.204478][ T5112] team0: Port device team_slave_1 added
[   85.228756][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.236023][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.263934][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.312674][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.381132][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.388450][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.418255][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.482527][ T5133] team0: Port device team_slave_0 added
[   85.564100][ T5133] team0: Port device team_slave_1 added
[   85.570874][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.578222][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.605232][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.646218][ T5120] hsr_slave_0: entered promiscuous mode
[   85.653056][ T5120] hsr_slave_1: entered promiscuous mode
[   85.660116][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.667853][ T5120] Cannot create hsr debugfs directory
[   85.715366][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.723431][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.750679][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.811963][   T53] Bluetooth: hci1: command tx timeout
[   85.812371][ T5122] Bluetooth: hci4: command tx timeout
[   85.817411][   T53] Bluetooth: hci3: command tx timeout
[   85.869921][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.877021][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.903567][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.906788][   T53] Bluetooth: hci2: command tx timeout
[   85.914316][ T5122] Bluetooth: hci0: command tx timeout
[   85.935453][ T5110] hsr_slave_0: entered promiscuous mode
[   85.942814][ T5110] hsr_slave_1: entered promiscuous mode
[   85.949652][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.957382][ T5110] Cannot create hsr debugfs directory
[   86.029097][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.036290][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.069623][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.122042][ T5122] Bluetooth: hci5: command tx timeout
[   86.174928][ T5112] hsr_slave_0: entered promiscuous mode
[   86.183780][ T5112] hsr_slave_1: entered promiscuous mode
[   86.190213][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.198584][ T5112] Cannot create hsr debugfs directory
[   86.348308][ T5133] hsr_slave_0: entered promiscuous mode
[   86.356132][ T5133] hsr_slave_1: entered promiscuous mode
[   86.365018][ T5133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.373177][ T5133] Cannot create hsr debugfs directory
[   86.596672][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.610172][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.665645][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.716940][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.936255][ T5119] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   86.949746][ T5119] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   86.968410][ T5119] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   86.996981][ T5119] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.138283][ T5120] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.159068][ T5120] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.180184][ T5120] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.199943][ T5120] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.365236][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.377817][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.389860][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.403626][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.496546][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.633687][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.654013][ T5112] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.665866][ T5112] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.677194][ T5112] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.694903][ T5113] 8021q: adding VLAN 0 to HW filter on device team0
[   87.729815][ T5112] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.760877][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.768345][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.799998][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.807221][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.826792][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.882404][ T5122] Bluetooth: hci3: command tx timeout
[   87.887852][ T5122] Bluetooth: hci4: command tx timeout
[   87.888938][   T53] Bluetooth: hci1: command tx timeout
[   87.933088][ T5133] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.948490][ T5133] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.963088][   T53] Bluetooth: hci2: command tx timeout
[   87.963155][ T5122] Bluetooth: hci0: command tx timeout
[   87.970139][ T5119] 8021q: adding VLAN 0 to HW filter on device team0
[   88.000328][ T5133] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.017546][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.025169][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.062988][ T5120] 8021q: adding VLAN 0 to HW filter on device team0
[   88.084058][ T5133] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.097271][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.104485][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.144192][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.151420][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.202840][ T5122] Bluetooth: hci5: command tx timeout
[   88.216421][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.223826][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.333252][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.420594][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.513864][ T5110] 8021q: adding VLAN 0 to HW filter on device team0
[   88.595012][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.602314][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.700935][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.733301][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.740637][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.870318][ T5112] 8021q: adding VLAN 0 to HW filter on device team0
[   88.908622][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.000733][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.008056][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.115758][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.123082][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.310273][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.345875][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.378609][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.468254][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.488000][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.520931][ T5113] veth0_vlan: entered promiscuous mode
[   89.586825][ T5133] 8021q: adding VLAN 0 to HW filter on device team0
[   89.656973][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.664253][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.683836][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.691023][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.735645][ T5113] veth1_vlan: entered promiscuous mode
[   89.766299][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.961905][ T5122] Bluetooth: hci1: command tx timeout
[   89.967424][ T5122] Bluetooth: hci4: command tx timeout
[   89.977536][   T53] Bluetooth: hci3: command tx timeout
[   89.988875][ T5133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.000351][ T5133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.042074][ T5122] Bluetooth: hci2: command tx timeout
[   90.047703][ T5122] Bluetooth: hci0: command tx timeout
[   90.169075][ T5113] veth0_macvtap: entered promiscuous mode
[   90.183868][ T5119] veth0_vlan: entered promiscuous mode
[   90.198875][ T5110] veth0_vlan: entered promiscuous mode
[   90.239071][ T5119] veth1_vlan: entered promiscuous mode
[   90.258831][ T5113] veth1_macvtap: entered promiscuous mode
[   90.282055][ T5122] Bluetooth: hci5: command tx timeout
[   90.350830][ T5110] veth1_vlan: entered promiscuous mode
[   90.387939][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.450914][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.474246][ T5120] veth0_vlan: entered promiscuous mode
[   90.494506][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.509320][ T5120] veth1_vlan: entered promiscuous mode
[   90.520425][ T5119] veth0_macvtap: entered promiscuous mode
[   90.547101][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.577345][ T5119] veth1_macvtap: entered promiscuous mode
[   90.600917][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.610728][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.619937][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.628927][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.729006][ T5112] veth0_vlan: entered promiscuous mode
[   90.754216][ T5110] veth0_macvtap: entered promiscuous mode
[   90.768132][ T5110] veth1_macvtap: entered promiscuous mode
[   90.845236][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.857274][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.870113][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.904456][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.916243][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.927675][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.940423][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.953702][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.970865][ T5112] veth1_vlan: entered promiscuous mode
[   90.990137][ T5120] veth0_macvtap: entered promiscuous mode
[   91.024223][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.035193][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.048325][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.069426][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.083564][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.094117][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.105245][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.117845][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.128879][ T5133] veth0_vlan: entered promiscuous mode
[   91.154953][ T5120] veth1_macvtap: entered promiscuous mode
[   91.179976][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.188986][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.189276][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.198704][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.222932][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.225866][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.268484][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.279657][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.290210][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.300997][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.311279][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.322823][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.335146][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.350330][ T5119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.359450][ T5119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.368549][ T5119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.377592][ T5119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.414187][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.425211][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.435839][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.446382][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.458987][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.469546][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.482345][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.488509][    T8] cfg80211: failed to load regulatory.db
[   91.527462][ T5133] veth1_vlan: entered promiscuous mode
[   91.556046][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.564485][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.606135][ T5120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.615753][ T5120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.624883][ T5120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.634030][ T5120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.669807][ T5112] veth0_macvtap: entered promiscuous mode
[   91.827499][ T5112] veth1_macvtap: entered promiscuous mode
[   91.894008][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.905198][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.980542][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.988451][ T5133] veth0_macvtap: entered promiscuous mode
[   91.995570][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.057498][ T5133] veth1_macvtap: entered promiscuous mode
[   92.107957][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.124011][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.145155][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.159503][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.178759][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.191374][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.209252][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.222190][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.241471][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.257110][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.271396][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.360409][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.395318][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.405699][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.417845][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.428923][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.431243][ T5220] loop1: detected capacity change from 0 to 32768
[   92.440211][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.459531][ T5220] XFS: attr2 mount option is deprecated.
[   92.477118][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.489659][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.500571][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.514082][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.532049][ T5220] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.544195][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.576604][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.596442][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.608953][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.619492][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.629736][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.640341][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.644259][ T5220] XFS (loop1): Ending clean mount
[   92.650215][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.665841][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.675744][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.686671][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.699504][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.717679][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.728343][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.738764][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.739469][ T5220] XFS (loop1): Quotacheck needed: Please wait.
[   92.749390][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.749420][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.749446][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.749462][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.749483][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.749500][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.749518][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.754200][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.841367][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.856264][ T5220] XFS (loop1): Quotacheck: Done.
[   92.863339][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.881140][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.881153][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.901005][   T29] audit: type=1800 audit(1718921631.524:2): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   92.901284][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.932468][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.987365][ T5133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.013398][ T5133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.030086][ T5133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.041177][ T5133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.381799][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.412857][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.906840][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.941337][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.960590][ T5234] loop0: detected capacity change from 0 to 2048
[   93.999533][ T5234] =======================================================
[   93.999533][ T5234] WARNING: The mand mount option has been deprecated and
[   93.999533][ T5234]          and is ignored by this kernel. Remove the mand
[   93.999533][ T5234]          option from the mount to silence this warning.
[   93.999533][ T5234] =======================================================
[   94.085133][ T5234] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   94.120690][ T5234] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   94.183327][ T5234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.192423][ T5113] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   94.227622][ T2462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.259741][ T5236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[   94.273781][ T2462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.568196][ T2462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.612975][ T2462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.824716][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.846085][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.047631][ T5243] loop2: detected capacity change from 0 to 4096
[   95.090992][ T5247] loop0: detected capacity change from 0 to 64
[   95.134813][ T5243] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[   95.331355][ T5253] loop1: detected capacity change from 0 to 2048
[   95.478378][ T5253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.517024][ T5253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.890267][ T5243] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   96.130450][ T5243] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[   96.436399][ T5133] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22.
[   96.892569][ T5179] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.154783][ T5179] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   97.237760][ T5179] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.286723][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.365196][ T5179] usb 2-1: config 0 descriptor??
[   97.445457][ T5179] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   97.517685][ T5240] loop5: detected capacity change from 0 to 32768
[   98.334160][ T5277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   98.472741][ T5261] loop0: detected capacity change from 0 to 32768
[   98.572508][ T5261] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   98.776746][ T5261] XFS (loop0): Ending clean mount
[   98.802185][ T5261] XFS (loop0): Quotacheck needed: Please wait.
[   98.918296][ T5261] XFS (loop0): Quotacheck: Done.
[   99.016978][ T5272] loop5: detected capacity change from 0 to 32768
[   99.034154][ T5272] XFS: attr2 mount option is deprecated.
[   99.097490][ T5272] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.155242][ T5110] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   99.347355][ T5272] XFS (loop5): Ending clean mount
[   99.361279][ T5272] XFS (loop5): Quotacheck needed: Please wait.
[   99.476118][ T5272] XFS (loop5): Quotacheck: Done.
[   99.588485][   T29] audit: type=1800 audit(1718921638.204:3): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="loop5" ino=6150 res=0 errno=0
[   99.610276][ T5180] usb 2-1: USB disconnect, device number 2
[   99.632610][ T5308] loop3: detected capacity change from 0 to 64
[  100.213572][ T5311] loop1: detected capacity change from 0 to 2048
[  100.430723][ T5315] loop4: detected capacity change from 0 to 2048
[  100.661337][ T5315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.321189][ T5320] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.406950][ T5119] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.675080][ T5320] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  101.781869][ T5320] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  101.886357][ T5320] Remounting filesystem read-only
[  102.232584][ T5113] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  102.573622][ T5113] NILFS (loop1): discard dirty page: offset=36864, ino=19
[  102.580833][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  102.592408][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  102.727871][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  102.831689][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  102.838982][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  102.870220][ T5113] NILFS (loop1): discard dirty page: offset=40960, ino=19
[  102.915474][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  102.954532][ T5343] 9p: Unknown access argument 18446744073709551615: -34
[  102.963170][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.026376][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.052656][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.090743][ T5113] NILFS (loop1): discard dirty page: offset=45056, ino=19
[  103.122980][ T5348] loop4: detected capacity change from 0 to 512
[  103.123173][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.141427][ T5348] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.191676][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.206768][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.240359][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.264228][ T5113] NILFS (loop1): discard dirty page: offset=0, ino=18
[  103.312863][ T5348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002]
[  103.362511][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  103.369813][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.403069][ T5348] System zones: 1-12
[  103.437025][ T5348] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature
[  103.470569][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.475161][ T5354] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'.
[  103.508686][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.528020][ T5348] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[  103.553510][ T5113] NILFS (loop1): discard dirty page: offset=0, ino=6
[  103.590040][ T5113] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  103.611729][ T5113] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  103.612802][ T5354] geneve1 speed is unknown, defaulting to 1000
[  103.623809][ T5113] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  103.626180][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.642909][ T5113] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  103.721950][ T5113] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  103.725772][ T5354] geneve1 speed is unknown, defaulting to 1000
[  103.742921][ T5113] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  103.781622][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.810906][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.831706][ T5354] geneve1 speed is unknown, defaulting to 1000
[  103.853965][ T5348] Process accounting resumed
[  103.863168][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  103.896396][ T5361] loop2: detected capacity change from 0 to 4096
[  103.929598][ T5113] NILFS (loop1): discard dirty page: offset=0, ino=5
[  103.965213][ T5361] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  103.995969][ T5113] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  104.029330][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.082693][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.106190][ T5361] ntfs3: loop2: $Secure::$SII is corrupted.
[  104.113374][ T5361] ntfs3: loop2: Failed to initialize $Secure (-22).
[  104.159575][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.243243][ T5113] NILFS (loop1): discard dirty page: offset=0, ino=4
[  104.287898][ T5113] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  104.321339][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.327378][ T5120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.341968][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.365525][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.404159][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.423131][ T5346] loop3: detected capacity change from 0 to 40427
[  104.499291][ T5113] NILFS (loop1): discard dirty page: offset=0, ino=3
[  104.541106][ T5113] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  104.570728][ T5113] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  104.584001][ T5346] F2FS-fs (loop3): invalid crc value
[  104.613763][ T5113] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  104.650100][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.720937][ T5346] F2FS-fs (loop3): Found nat_bits in checkpoint
[  104.727536][ T5113] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  104.760023][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.828396][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.858326][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  104.908312][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  104.977398][ T5113] NILFS (loop1): discard dirty page: offset=98304, ino=3
[  105.003697][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  105.019323][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  105.064985][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  105.085086][ T5113] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  105.110019][ T5113] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  105.134706][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  105.140480][ T5346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  105.191597][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  105.206988][   T29] audit: type=1800 audit(1718921643.773:4): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0
[  105.246566][ T5113] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  105.279269][ T5113] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  105.288583][   T29] audit: type=1804 audit(1718921643.838:5): pid=5377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir908421768/syzkaller.8R9ZuC/5/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0
[  105.881596][ T5346] syz-executor.3: attempt to access beyond end of device
[  105.881596][ T5346] loop3: rw=2049, sector=45096, nr_sectors = 2952 limit=40427
[  105.912518][ T5346] syz-executor.3: attempt to access beyond end of device
[  105.912518][ T5346] loop3: rw=2049, sector=48048, nr_sectors = 264 limit=40427
[  106.120824][ T5112] syz-executor.3: attempt to access beyond end of device
[  106.120824][ T5112] loop3: rw=2049, sector=48312, nr_sectors = 8 limit=40427
[  106.223633][ T5112] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  106.343029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  107.034657][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  107.236206][ T5122] Bluetooth: hci4: command tx timeout
[  108.144164][ T5401] Zero length message leads to an empty skb
[  109.583844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.998167][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  110.345980][ T5354] infiniband syz0: set active
[  110.352989][ T5180] geneve1 speed is unknown, defaulting to 1000
[  110.403698][ T5354] infiniband syz0: added geneve1
[  110.426824][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.428916][ T5354] syz0: rxe_create_cq: returned err = -12
[  110.482098][ T5354] infiniband syz0: Couldn't create ib_mad CQ
[  110.488320][ T5354] infiniband syz0: Couldn't open port 1
[  110.725752][ T5354] RDS/IB: syz0: added
[  110.749216][ T5354] smc: adding ib device syz0 with port count 1
[  110.783648][ T5354] smc:    ib device syz0 port 1 has pnetid 
[  110.822232][ T5354] geneve1 speed is unknown, defaulting to 1000
[  110.870310][  T782] geneve1 speed is unknown, defaulting to 1000
[  110.932663][ T5425] sctp: [Deprecated]: syz-executor.5 (pid 5425) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.932663][ T5425] Use struct sctp_sack_info instead
[  112.148675][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  112.246043][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.398471][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.460444][ T5439] loop3: detected capacity change from 0 to 64
[  112.484492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.246599][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  122.333332][ T5439] hfs: unable to open extent tree
[  122.359554][ T5439] hfs: can't find a HFS filesystem on dev loop3
[  122.619739][ T5354] geneve1 speed is unknown, defaulting to 1000
[  122.926525][ T5458] loop1: detected capacity change from 0 to 512
[  123.040107][ T5458] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  123.079941][ T5458] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  123.092916][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.297901][ T5458] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  123.414924][ T5462] overlayfs: missing 'lowerdir'
[  123.515314][ T5462] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  123.603604][ T5113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.625255][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  123.660227][ T5354] geneve1 speed is unknown, defaulting to 1000
[  124.404177][ T5354] geneve1 speed is unknown, defaulting to 1000
[  124.529389][ T5457] loop3: detected capacity change from 0 to 32768
[  125.926927][ T5464] loop5: detected capacity change from 0 to 32768
[  126.053956][ T5464] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5464)
[  126.264454][ T5457] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  126.276111][ T5464] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  126.354787][ T5457] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  126.366887][ T5354] geneve1 speed is unknown, defaulting to 1000
[  126.375836][ T5464] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  126.434141][ T5457] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  126.438763][ T5464] BTRFS info (device loop5): using free-space-tree
[  126.501031][ T5464] workqueue: max_active 2340 requested for btrfs-worker is out of range, clamping between 1 and 512
[  126.539495][ T5457] bcachefs (loop3): bch2_fs_recovery(): error EINTR
[  126.546316][ T5457] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  126.549947][ T5464] workqueue: max_active 2340 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  126.570190][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  126.572264][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  126.633725][ T5457] bcachefs (loop3): shutting down
[  126.667999][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  126.683209][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  126.700210][ T5457] bcachefs (loop3): shutdown complete
[  126.753295][ T5464] workqueue: max_active 2340 requested for btrfs-endio is out of range, clamping between 1 and 512
[  126.814146][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  126.814592][ T5464] workqueue: max_active 2340 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  126.910854][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  126.911343][ T5464] workqueue: max_active 2340 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  126.923410][ T5469] loop4: detected capacity change from 0 to 32768
[  127.023049][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  127.031537][ T5464] workqueue: max_active 2340 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  127.116569][ T5469] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR
[  127.227853][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  127.327560][ T5464] workqueue: max_active 2340 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  127.330461][ T5354] geneve1 speed is unknown, defaulting to 1000
[  127.428124][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  127.448178][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  127.459508][ T5464] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  127.502176][ T5464] BTRFS error (device loop5): open_ctree failed
[  127.589347][ T5499] loop1: detected capacity change from 0 to 32768
[  127.613866][ T5499] XFS: attr2 mount option is deprecated.
[  127.820257][ T5499] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.081012][ T5499] XFS (loop1): Ending clean mount
[  129.521402][ T5499] XFS (loop1): Quotacheck needed: Please wait.
[  129.664917][ T5499] XFS (loop1): Quotacheck: Done.
[  129.717913][ T5534] loop4: detected capacity change from 0 to 2048
[  129.826889][ T5113] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.920581][ T5534]  loop4: p1 p3 < > p4 < p5 >
[  129.925836][ T5534] loop4: partition table partially beyond EOD, truncated
[  129.935624][ T5534] loop4: p1 size 33024 extends beyond EOD, truncated
[  130.278381][ T5536] loop5: detected capacity change from 0 to 4096
[  130.300001][ T5536] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  130.305776][ T5534] loop4: p3 start 4284289 is beyond EOD, truncated
[  130.439100][ T5534] loop4: p5 size 33024 extends beyond EOD, truncated
[  130.442106][ T5536] ntfs3: loop5: It is recommened to use chkdsk.
[  131.262258][ T5119] ntfs3: loop5: failed to convert "076c" to macceltic
[  131.422180][ T5178] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  131.643667][ T5262] udevd[5262]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  131.698825][ T5178] usb 3-1: config 0 has no interfaces?
[  131.707524][ T5172] udevd[5172]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  131.737591][ T5175] udevd[5175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  131.762176][ T5178] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  131.801624][ T5178] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  131.826902][ T5178] usb 3-1: Manufacturer: syz
[  131.848675][ T5178] usb 3-1: config 0 descriptor??
[  131.928285][ T5548] overlayfs: missing 'lowerdir'
[  132.052917][ T5547] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  132.097846][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.118790][ T5178] usb 3-1: USB disconnect, device number 2
[  132.344150][  T782] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  132.572162][  T782] usb 4-1: Using ep0 maxpacket: 8
[  132.599729][  T782] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  132.626257][  T782] usb 4-1: config 0 has no interface number 0
[  132.661900][  T782] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  132.682804][ T2438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.724138][  T782] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  132.760488][  T782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.833552][  T782] usb 4-1: config 0 descriptor??
[  132.911339][  T782] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  133.014784][ T5173] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  133.106471][ T2438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.253222][ T5173] usb 2-1: Using ep0 maxpacket: 32
[  133.286534][ T5173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.318213][ T5181] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  133.322079][ T2438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.338579][ T5173] usb 2-1: config 0 has no interfaces?
[  133.364176][ T5173] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=32.f8
[  133.381217][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.425499][ T5173] usb 2-1: Product: syz
[  133.466630][ T5173] usb 2-1: Manufacturer: syz
[  133.496127][ T5173] usb 2-1: SerialNumber: syz
[  133.526201][ T5173] usb 2-1: config 0 descriptor??
[  133.582088][ T5181] usb 3-1: not running at top speed; connect to a high speed hub
[  133.611088][ T5181] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.648186][ T2438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.654005][ T5181] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.713606][ T5181] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  133.747166][ T5181] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  133.799568][ T5173] usb 2-1: USB disconnect, device number 3
[  133.810141][ T5181] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.847728][ T5181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.890135][ T5181] usb 3-1: Product: syz
[  133.917011][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  133.918084][ T5181] usb 3-1: Manufacturer: syz
[  133.931244][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.942223][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.952554][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.970105][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  133.977241][ T5181] usb 3-1: SerialNumber: syz
[  133.992137][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.266984][ T5181] cdc_ncm 3-1:1.0: bind() failure
[  134.282712][ T5180] usb 4-1: USB disconnect, device number 2
[  134.345544][ T5561] geneve1 speed is unknown, defaulting to 1000
[  134.374439][ T5180] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  134.430520][ T2438] bridge_slave_1: left allmulticast mode
[  134.455079][ T5181] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  134.470307][ T2438] bridge_slave_1: left promiscuous mode
[  134.493184][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.504387][ T5181] cdc_ncm 3-1:1.1: bind() failure
[  134.575929][ T2438] bridge_slave_0: left allmulticast mode
[  134.599436][ T5181] usb 3-1: USB disconnect, device number 3
[  134.618476][ T2438] bridge_slave_0: left promiscuous mode
[  134.655047][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.778594][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  134.787975][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  135.019218][ T5177] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  135.075991][   T29] audit: type=1326 audit(1718921671.334:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84ba27cf29 code=0x0
[  135.160928][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  135.180075][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  135.189456][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  135.362952][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  135.406068][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  135.418899][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.178373][ T5177] usb 2-1: Using ep0 maxpacket: 32
[  136.186036][ T5177] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  136.195153][ T5177] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  136.203936][ T5177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  136.216674][ T5177] usb 2-1: config 1 has no interface number 0
[  136.223189][ T5177] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.252347][ T5122] Bluetooth: hci0: command tx timeout
[  136.265657][ T2438] infiniband syz0: set down
[  136.273555][ T5177] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  136.323593][ T5177] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  136.353850][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.397344][ T5177] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  136.630511][ T5177] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  137.216180][   T12] smc: removing ib device syz0
[  137.281164][ T5177] usb 2-1: USB disconnect, device number 4
[  137.293391][ T5177] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  137.431934][ T5579] loop4: detected capacity change from 0 to 40427
[  137.485766][ T5579] F2FS-fs (loop4): invalid crc value
[  137.533353][ T5579] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.594803][ T5587] loop2: detected capacity change from 0 to 32768
[  137.662441][ T2438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.693338][ T5579] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.701897][ T2438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.711665][ T5587] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  137.720614][ T5122] Bluetooth: hci4: command tx timeout
[  137.737351][ T2438] bond0 (unregistering): Released all slaves
[  137.748702][   T29] audit: type=1800 audit(1718921673.807:7): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  137.783433][   T45] geneve1 speed is unknown, defaulting to 1000
[  137.904422][ T5587] XFS (loop2): Ending clean mount
[  138.113122][ T5579] syz-executor.4: attempt to access beyond end of device
[  138.113122][ T5579] loop4: rw=2049, sector=45096, nr_sectors = 6216 limit=40427
[  138.135077][ T5178] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  138.179719][ T5178] XFS (loop2): Unmount and run xfs_repair
[  138.207468][ T5178] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  138.258745][ T5178] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  138.273024][ T5178] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  138.283858][ T5120] syz-executor.4: attempt to access beyond end of device
[  138.283858][ T5120] loop4: rw=2049, sector=51312, nr_sectors = 8 limit=40427
[  138.296502][ T5178] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  138.331153][ T5178] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  138.342711][ T5120] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  138.361031][ T5178] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  138.400747][ T5178] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  138.481538][ T5178] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  138.507662][ T5122] Bluetooth: hci0: command tx timeout
[  138.523068][ T5617] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  138.538150][ T5178] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  138.556067][ T5617] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  138.602206][ T5587] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  138.631028][ T5587] XFS (loop2): page discard on page ffffea00015e9400, inode 0x429, pos 0.
[  138.647171][ T5201] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  138.664598][ T5201] XFS (loop2): Unmount and run xfs_repair
[  138.681420][ T5201] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  138.695860][ T5201] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  138.732639][ T5201] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  138.756979][ T5201] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  138.822187][ T5201] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  138.856576][ T5201] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  138.946807][ T5201] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.018178][ T5201] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.090684][ T5201] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.145440][ T5587] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  139.180170][ T5587] XFS (loop2): page discard on page ffffea0001df4e00, inode 0x429, pos 32768.
[  139.229075][ T5201] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  139.283373][ T5201] XFS (loop2): Unmount and run xfs_repair
[  139.348373][ T5201] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  139.356632][ T5201] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  139.419837][ T5201] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  139.613517][ T5201] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  139.622564][ T5201] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  139.632053][ T5201] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.641673][ T5201] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.654343][ T5201] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.664988][ T5201] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  139.674042][ T5587] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  139.777394][ T5587] XFS (loop2): page discard on page ffffea00015f0c80, inode 0x429, pos 49152.
[  139.799003][ T5587] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  139.965520][ T5587] XFS (loop2): Unmount and run xfs_repair
[  139.991960][ T5122] Bluetooth: hci4: command tx timeout
[  140.059373][ T5587] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  140.067526][ T5587] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  140.077119][ T5587] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  140.166416][ T5587] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  140.197833][ T5587] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  140.230796][ T5587] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.253129][ T5587] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.278154][ T5587] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.303938][ T5587] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.325354][ T5587] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  140.338464][ T5587] XFS (loop2): page discard on page ffffea00015e93c0, inode 0x429, pos 57344.
[  140.418181][ T5177] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  140.456266][ T5177] XFS (loop2): Unmount and run xfs_repair
[  140.467677][ T5177] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  140.488054][ T5177] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  140.557488][ T5177] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  140.580654][ T5177] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  140.625716][ T5177] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  140.662017][ T5177] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.690267][ T5177] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.703589][ T5177] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.716679][ T5177] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  140.733515][ T5587] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  140.746514][ T5587] XFS (loop2): page discard on page ffffea0001662300, inode 0x429, pos 61440.
[  140.759132][ T5122] Bluetooth: hci0: command tx timeout
[  140.937418][ T5587] syz-executor.2 (5587) used greatest stack depth: 18520 bytes left
[  141.100533][   T45] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  141.125796][   T45] XFS (loop2): Unmount and run xfs_repair
[  141.133300][   T45] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  141.141738][   T45] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  141.194666][   T45] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  141.252116][   T45] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  141.356352][   T45] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  141.376337][   T45] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  141.388348][   T45] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  141.424521][   T45] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  141.469504][   T45] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  141.527483][ T5446] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  141.559189][ T5446] XFS (loop2): page discard on page ffffea00015e5800, inode 0x42a, pos 0.
[  141.594034][   T45] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  141.659357][   T45] XFS (loop2): Unmount and run xfs_repair
[  141.683782][   T45] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  141.733056][   T45] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  141.743064][   T45] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  141.785850][   T45] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  141.808072][   T45] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  141.921584][   T45] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  141.991227][   T45] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.085593][   T45] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.151766][   T45] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.226455][ T5122] Bluetooth: hci4: command tx timeout
[  142.236575][   T62] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  142.248135][ T5655] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  142.305195][   T62] XFS (loop2): page discard on page ffffea00015e5a00, inode 0x42a, pos 32768.
[  142.316005][ T5655] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  142.317260][ T5655] bridge0: port 3(syz_tun) entered blocking state
[  142.368652][ T5655] bridge0: port 3(syz_tun) entered disabled state
[  142.407810][    T9] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  142.419328][ T5655] syz_tun: entered allmulticast mode
[  142.437598][    T9] XFS (loop2): Unmount and run xfs_repair
[  142.481496][ T5655] syz_tun: entered promiscuous mode
[  142.490625][    T9] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  142.508177][ T5655] bridge0: port 3(syz_tun) entered blocking state
[  142.515278][ T5655] bridge0: port 3(syz_tun) entered forwarding state
[  142.524953][    T9] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  142.559722][    T9] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  142.568838][    T9] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  142.620243][ T5567] chnl_net:caif_netlink_parms(): no params data found
[  142.624792][    T9] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  142.689760][    T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.741067][    T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.746342][ T5561] chnl_net:caif_netlink_parms(): no params data found
[  142.825319][    T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.855678][    T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  142.882178][   T62] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  143.004028][ T5122] Bluetooth: hci0: command tx timeout
[  143.015999][   T62] XFS (loop2): page discard on page ffffea0001dfb380, inode 0x42a, pos 49152.
[  143.106082][    T9] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  143.163588][    T9] XFS (loop2): Unmount and run xfs_repair
[  143.191121][    T9] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  143.221174][ T5669] loop1: detected capacity change from 0 to 512
[  143.243854][ T5669] EXT4-fs: Ignoring removed i_version option
[  143.256684][    T9] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  143.261171][ T5669] EXT4-fs: Ignoring removed nobh option
[  143.283609][ T5669] EXT4-fs: Ignoring removed mblk_io_submit option
[  143.290690][    T9] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  143.316822][ T5663] smc: net device lo applied user defined pnetid SYZ2
[  143.337723][    T9] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  143.367290][ T5665] smc: net device lo erased user defined pnetid SYZ2
[  143.405266][ T5669] EXT4-fs (loop1): failed to initialize system zone (-117)
[  143.412721][ T5669] EXT4-fs (loop1): mount failed
[  143.419111][    T9] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  143.437258][    T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  143.446183][    T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  143.460737][    T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  143.472818][    T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  143.511926][   T62] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  143.548083][   T62] XFS (loop2): page discard on page ffffea0001aadd80, inode 0x42a, pos 57344.
[  143.596364][ T5176] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 
[  143.615122][ T5176] XFS (loop2): Unmount and run xfs_repair
[  143.644675][ T5176] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  143.906655][ T5176] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  143.915812][ T5176] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  143.924911][ T5176] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  143.935609][ T5176] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  143.944475][ T5176] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  143.989821][ T5176] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  144.015471][ T5176] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  144.052453][ T5176] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  144.088067][   T62] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74
[  144.131258][   T62] XFS (loop2): page discard on page ffffea0001aaddc0, inode 0x42a, pos 61440.
[  144.168002][ T5133] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  144.253806][ T5133] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  144.282997][ T5201] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  144.478638][ T5122] Bluetooth: hci4: command tx timeout
[  144.542353][ T5201] usb 5-1: Using ep0 maxpacket: 32
[  144.550960][ T5201] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.562008][ T5201] usb 5-1: config 0 has no interfaces?
[  144.571425][ T5201] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  144.626722][ T5201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.673425][ T5201] usb 5-1: Product: syz
[  144.677691][ T5201] usb 5-1: Manufacturer: syz
[  144.690284][ T5201] usb 5-1: SerialNumber: syz
[  144.707630][ T5201] usb 5-1: config 0 descriptor??
[  144.846229][ T5669] loop1: detected capacity change from 0 to 32768
[  145.035649][ T5698] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.054803][ T5669] jfs_mkdir: dtInsert returned -EIO
[  145.064790][ T2438] hsr_slave_0: left promiscuous mode
[  145.081044][ T5669] ERROR: (device loop1): jfs_mkdir: 
[  145.081044][ T5669] 
[  145.096176][ T2438] hsr_slave_1: left promiscuous mode
[  145.111353][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.119464][ T5669] ERROR: (device loop1): remounting filesystem as read-only
[  145.138757][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.200531][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.229150][ T5669] jfs_lookup: iget failed on inum 4
[  145.240050][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.555261][ T2438] veth1_macvtap: left promiscuous mode
[  145.576995][ T2438] veth0_macvtap: left promiscuous mode
[  145.604296][ T2438] veth1_vlan: left promiscuous mode
[  145.612812][ T2438] veth0_vlan: left promiscuous mode
[  145.724947][   T29] audit: type=1800 audit(1718921681.155:8): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0
[  146.250312][ T5711] loop2: detected capacity change from 0 to 256
[  147.245221][ T5176] usb 5-1: USB disconnect, device number 2
[  148.230263][ T2438] team0 (unregistering): Port device team_slave_1 removed
[  148.289210][ T2438] team0 (unregistering): Port device team_slave_0 removed
[  148.943543][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.959540][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.971352][ T5567] bridge_slave_0: entered allmulticast mode
[  148.986723][ T5567] bridge_slave_0: entered promiscuous mode
[  149.012257][ T5720] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  149.022625][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  149.034786][ T5724] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  149.044913][ T5739] input: syz0 as /devices/virtual/input/input5
[  149.099264][ T5726] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  149.402962][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.472574][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.499858][ T5561] bridge_slave_0: entered allmulticast mode
[  149.543688][ T5561] bridge_slave_0: entered promiscuous mode
[  150.442809][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.469069][ T5201] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  150.477346][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.503897][ T5561] bridge_slave_1: entered allmulticast mode
[  150.576669][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  150.580997][ T5561] bridge_slave_1: entered promiscuous mode
[  150.648571][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.671621][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.692685][ T5201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.706686][ T5567] bridge_slave_1: entered allmulticast mode
[  150.725498][ T5201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.743675][ T5567] bridge_slave_1: entered promiscuous mode
[  150.754296][ T5201] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  150.801034][ T5201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.886081][ T5201] usb 5-1: config 0 descriptor??
[  151.060318][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.117764][ T5756] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  151.345523][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.418243][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.452495][ T5755] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  151.652783][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.201093][ T5567] team0: Port device team_slave_0 added
[  152.282941][ T5765] loop1: detected capacity change from 0 to 2048
[  152.314536][ T5765] NILFS (loop1): invalid segment: Sequence number mismatch
[  152.322470][ T5765] NILFS (loop1): trying rollback from an earlier position
[  152.368587][ T5765] NILFS (loop1): recovery complete
[  152.416151][ T5767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.740200][ T5561] team0: Port device team_slave_0 added
[  153.760379][ T5561] team0: Port device team_slave_1 added
[  153.845740][ T5201] usbhid 5-1:0.0: can't add hid device: -71
[  153.858807][ T5567] team0: Port device team_slave_1 added
[  153.877228][ T5201] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  153.947029][ T5201] usb 5-1: USB disconnect, device number 3
[  154.257516][ T5780] loop1: detected capacity change from 0 to 256
[  154.358713][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.397085][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.500590][ T5567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.644517][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.687451][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.800947][ T5567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.850180][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.873040][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.985284][ T5561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.040927][ T5788] wireguard0: entered promiscuous mode
[  155.048948][ T5788] wireguard0: entered allmulticast mode
[  155.242265][ T5795] loop4: detected capacity change from 0 to 128
[  155.328118][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.362604][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.506977][ T5561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.748722][ T5801] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'.
[  156.823942][ T5567] hsr_slave_0: entered promiscuous mode
[  156.834735][ T5804] loop4: detected capacity change from 0 to 128
[  156.861606][ T5567] hsr_slave_1: entered promiscuous mode
[  156.905084][ T5567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.926748][ T5567] Cannot create hsr debugfs directory
[  158.154971][ T2462] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.369926][ T5801] geneve1 speed is unknown, defaulting to 1000
[  158.516691][ T5561] hsr_slave_0: entered promiscuous mode
[  158.535296][ T5561] hsr_slave_1: entered promiscuous mode
[  158.547514][ T5561] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.565418][ T5561] Cannot create hsr debugfs directory
[  158.620164][ T2462] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.680747][ T5801] geneve1 speed is unknown, defaulting to 1000
[  158.862153][ T2462] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.913589][ T5801] geneve1 speed is unknown, defaulting to 1000
[  159.162393][ T2462] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.410286][ T5810] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  159.592915][ T5812] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  161.691027][ T5836] loop4: detected capacity change from 0 to 2048
[  161.720949][ T5836] NILFS (loop4): invalid segment: Sequence number mismatch
[  161.729494][ T5836] NILFS (loop4): trying rollback from an earlier position
[  161.766900][ T5836] NILFS (loop4): recovery complete
[  161.776664][ T2462] bridge_slave_1: left allmulticast mode
[  161.795401][ T5839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.826524][ T2462] bridge_slave_1: left promiscuous mode
[  161.832574][ T2462] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.141135][ T5801] infiniband syz0: set active
[  162.145977][ T5801] infiniband syz0: added geneve1
[  162.155805][ T5801] syz0: rxe_create_cq: returned err = -12
[  162.164282][ T5801] infiniband syz0: Couldn't create ib_mad CQ
[  162.173417][ T5801] infiniband syz0: Couldn't open port 1
[  162.968855][ T2462] bridge_slave_0: left allmulticast mode
[  163.005533][ T2462] bridge_slave_0: left promiscuous mode
[  163.011461][ T2462] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.085010][ T5801] RDS/IB: syz0: added
[  163.089095][ T5801] smc: adding ib device syz0 with port count 1
[  163.145448][ T5801] smc:    ib device syz0 port 1 has pnetid 
[  164.786890][ T2462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.823264][ T2462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.843174][ T2462] bond0 (unregistering): Released all slaves
[  164.923045][  T782] geneve1 speed is unknown, defaulting to 1000
[  164.954463][ T5801] geneve1 speed is unknown, defaulting to 1000
[  164.960824][ T5201] geneve1 speed is unknown, defaulting to 1000
[  165.049475][ T5855] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  165.132577][ T5854] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  165.917765][ T5869] loop4: detected capacity change from 0 to 512
[  166.742825][ T5801] geneve1 speed is unknown, defaulting to 1000
[  167.817442][   T29] audit: type=1804 audit(1718921701.516:9): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1018223202/syzkaller.yXdCkW/34/bus" dev="sda1" ino=1944 res=1 errno=0
[  167.916424][ T5886] overlay: ./bus is not a directory
[  167.985685][   T29] audit: type=1804 audit(1718921701.534:10): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1018223202/syzkaller.yXdCkW/34/bus" dev="sda1" ino=1944 res=1 errno=0
[  168.011869][   T29] audit: type=1804 audit(1718921701.544:11): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1018223202/syzkaller.yXdCkW/34/bus" dev="sda1" ino=1944 res=1 errno=0
[  168.042220][ T5567] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  168.082140][   T29] audit: type=1804 audit(1718921701.553:12): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1018223202/syzkaller.yXdCkW/34/bus" dev="sda1" ino=1944 res=1 errno=0
[  168.112057][ T5567] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  168.232965][ T5567] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  168.476933][ T5894] syz-executor.3[5894] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  168.477131][ T5894] syz-executor.3[5894] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  168.667824][ T5801] geneve1 speed is unknown, defaulting to 1000
[  168.668384][ T5897] loop2: detected capacity change from 0 to 1024
[  168.692067][ T5567] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  168.785210][ T5897] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  168.849147][ T5897] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  168.963448][ T5897] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  169.014010][ T5897] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  169.851653][ T5801] geneve1 speed is unknown, defaulting to 1000
[  170.101987][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.202045][   T29] audit: type=1326 audit(1718921703.768:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.319898][   T29] audit: type=1326 audit(1718921703.768:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.350015][ T5561] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  170.481180][   T29] audit: type=1326 audit(1718921703.768:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.585163][ T5567] 8021q: adding VLAN 0 to HW filter on device team0
[  170.607157][   T29] audit: type=1326 audit(1718921703.768:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.632126][ T5561] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  170.659922][   T29] audit: type=1326 audit(1718921703.768:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.684846][   T29] audit: type=1326 audit(1718921703.814:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ba27cf29 code=0x7ffc0000
[  170.695608][ T5561] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  170.764556][ T5561] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  170.813124][ T5801] geneve1 speed is unknown, defaulting to 1000
[  170.828726][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.836113][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.874967][ T5925] mmap: syz-executor.3 (5925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  171.139737][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.147090][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.599012][ T5935] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  173.021541][ T5935] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  173.481962][ T5942] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  174.211917][ T5935] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  174.317345][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.367565][ T5561] 8021q: adding VLAN 0 to HW filter on device team0
[  174.421100][  T782] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.428565][  T782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.505995][ T5948] loop3: detected capacity change from 0 to 8
[  174.514817][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.522042][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.835955][ T5948] SQUASHFS error: lzo decompression failed, data probably corrupt
[  174.844552][ T5948] SQUASHFS error: Failed to read block 0x91: -5
[  174.851329][ T5948] SQUASHFS error: Unable to read metadata cache entry [8f]
[  174.859237][ T5948] SQUASHFS error: Unable to read inode 0x11f
[  174.915784][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.691266][ T5948] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  175.923176][ T5801] geneve1 speed is unknown, defaulting to 1000
[  176.221983][ T5963] loop3: detected capacity change from 0 to 16
[  176.342883][ T5963] erofs: (device loop3): mounted with root inode @ nid 36.
[  176.602342][ T5801] geneve1 speed is unknown, defaulting to 1000
[  177.523949][ T5949] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  177.665836][ T5561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.903741][ T5567] veth0_vlan: entered promiscuous mode
[  178.066820][ T5561] veth0_vlan: entered promiscuous mode
[  178.115651][ T5567] veth1_vlan: entered promiscuous mode
[  178.185392][ T5561] veth1_vlan: entered promiscuous mode
[  178.354615][ T5561] veth0_macvtap: entered promiscuous mode
[  178.477783][ T5561] veth1_macvtap: entered promiscuous mode
[  179.541687][ T2462] hsr_slave_0: left promiscuous mode
[  179.563362][ T5982] overlayfs: failed to resolve './file2': -2
[  179.593030][ T2462] hsr_slave_1: left promiscuous mode
[  179.628939][ T2462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.789129][ T2462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.845132][ T2462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.875198][ T2462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.962269][ T2462] veth1_macvtap: left promiscuous mode
[  179.968086][ T2462] veth0_macvtap: left promiscuous mode
[  179.974216][ T2462] veth1_vlan: left promiscuous mode
[  179.979900][ T2462] veth0_vlan: left promiscuous mode
[  181.110605][ T5176] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  181.164007][ T6007] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  181.356233][ T5176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.385441][ T5176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.407923][ T5176] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  181.417381][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.461250][ T5176] usb 3-1: config 0 descriptor??
[  181.521919][ T6017] process 'syz-executor.3' launched './file1' with NULL argv: empty string added
[  181.605975][ T6019] loop3: detected capacity change from 0 to 128
[  182.052189][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  182.052218][   T29] audit: type=1800 audit(1718921714.687:116): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048601 res=0 errno=0
[  182.736328][ T2462] team0 (unregistering): Port device team_slave_1 removed
[  182.948241][ T2462] team0 (unregistering): Port device team_slave_0 removed
[  185.425961][ T6031] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'.
[  185.439634][ T6031] rdma_rxe: rxe_newlink: failed to add geneve1
[  185.536279][ T5567] veth0_macvtap: entered promiscuous mode
[  185.568242][ T6007] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  185.602530][ T6010] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  185.625855][ T6010] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  185.635659][ T6010] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  185.744627][ T5567] veth1_macvtap: entered promiscuous mode
[  185.814362][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.829251][ T5176] usbhid 3-1:0.0: can't add hid device: -71
[  185.839925][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.878563][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.889233][ T5176] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  185.901694][ T5176] usb 3-1: USB disconnect, device number 4
[  185.936276][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.952603][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.210864][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.221227][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.231890][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.155072][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.269062][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.337580][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.377350][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.410761][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.425615][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.437447][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.447545][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.458441][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.470782][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.481751][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.535590][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.600130][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.650941][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.888852][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.904519][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.917536][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.928210][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.938605][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.673446][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.758652][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.955319][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.973733][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.003987][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.034055][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.080944][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.113639][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.155466][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.200358][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.244253][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.264999][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.279446][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.329214][ T5561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.381705][ T5561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.393082][ T5561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.434319][ T5561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.487169][ T5567] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.539160][ T5567] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.559512][ T5567] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.579653][ T5567] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.911042][ T6065] loop4: detected capacity change from 0 to 256
[  190.021266][ T6065] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  190.058680][ T6065] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  190.117301][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.147911][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.264882][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.315939][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.424321][ T5446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.432729][ T5446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.622880][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.676825][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.873272][ T6078] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  190.898294][ T6078] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  190.913919][ T6078] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  191.051574][ T6083] hub 9-0:1.0: USB hub found
[  191.077502][ T6083] hub 9-0:1.0: 8 ports detected
[  192.154962][ T6097] loop3: detected capacity change from 0 to 512
[  192.594092][ T6097] ext4: Unknown parameter 'appraise_type'
[  192.811406][ T6108] loop2: detected capacity change from 0 to 256
[  192.848777][ T6097] trusted_key: encrypted_key: keylen parameter is missing
[  192.913004][ T6108] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  192.962508][   T29] audit: type=1326 audit(1718921724.766:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x0
[  192.964582][ T6108] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  193.050700][ T6112] loop4: detected capacity change from 0 to 2048
[  193.178783][ T6112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.321782][ T5120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.452030][ T6089] loop0: detected capacity change from 0 to 32768
[  193.458514][ T6085] loop5: detected capacity change from 0 to 32768
[  193.638529][ T6085] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  193.660860][ T6089] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open
[  193.671657][ T6085] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  193.679898][ T6140] hub 9-0:1.0: USB hub found
[  193.684955][ T6140] hub 9-0:1.0: 8 ports detected
[  193.691754][ T6089] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  193.914724][ T6085] bcachefs (loop5): alloc_read... done
[  193.940313][ T6085] bcachefs (loop5): stripes_read... done
[  193.963583][ T6085] bcachefs (loop5): snapshots_read... done
[  194.003860][ T6085] bcachefs (loop5): journal_replay... done
[  194.028374][ T6085] bcachefs (loop5): resume_logged_ops... done
[  194.137218][ T6085] bcachefs (loop5): going read-write
[  194.195437][ T6085] bcachefs (loop5): done starting filesystem
[  194.244246][ T6155] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  194.270094][ T6155] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  194.284886][ T6155] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  194.667040][ T6085] syz-executor.5 (6085) used greatest stack depth: 13520 bytes left
[  194.750313][ T5567] bcachefs (loop5): shutting down
[  194.779776][ T5567] bcachefs (loop5): going read-only
[  194.806159][ T5567] bcachefs (loop5): finished waiting for writes to stop
[  194.889747][ T5567] bcachefs (loop5): flushing journal and stopping allocators, journal seq 13
[  195.037476][ T5567] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 14
[  195.074517][ T5567] bcachefs (loop5): shutdown complete, journal seq 15
[  195.160896][ T5567] bcachefs (loop5): marking filesystem clean
[  196.105998][ T5567] bcachefs (loop5): shutdown complete
[  196.392927][   T29] audit: type=1326 audit(1718921727.932:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x0
[  196.570597][ T5177] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  197.678110][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  197.705148][ T6195] loop2: detected capacity change from 0 to 128
[  197.716887][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  197.743348][ T5177] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  197.771264][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.808003][ T5177] usb 1-1: config 0 descriptor??
[  197.821351][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  197.998619][   T29] audit: type=1800 audit(1718921729.418:119): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048614 res=0 errno=0
[  198.360246][   T29] audit: type=1326 audit(1718921729.723:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.407408][   T29] audit: type=1326 audit(1718921729.723:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.518685][   T29] audit: type=1326 audit(1718921729.732:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.577967][   T29] audit: type=1326 audit(1718921729.732:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.633500][   T29] audit: type=1326 audit(1718921729.732:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.746152][   T29] audit: type=1326 audit(1718921729.732:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  198.809983][   T29] audit: type=1326 audit(1718921729.732:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x7ffc0000
[  199.046939][ T6217] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  199.080906][ T6217] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  199.123845][ T6217] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  201.412243][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  201.482038][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  202.827109][ T5177] usb 1-1: USB disconnect, device number 2
[  203.688863][ T6236] syz-executor.2 (6236): attempted to duplicate a private mapping with mremap.  This is not supported.
[  204.026725][ T6246] loop5: detected capacity change from 0 to 512
[  204.137006][ T6248] hub 9-0:1.0: USB hub found
[  204.156663][ T6248] hub 9-0:1.0: 8 ports detected
[  204.169028][ T6246] EXT4-fs: Ignoring removed i_version option
[  204.197860][ T6246] EXT4-fs: Ignoring removed nobh option
[  204.257545][ T6246] EXT4-fs: Ignoring removed mblk_io_submit option
[  204.581402][ T6246] EXT4-fs (loop5): failed to initialize system zone (-117)
[  204.626313][ T6246] EXT4-fs (loop5): mount failed
[  204.758472][ T6262] loop1: detected capacity change from 0 to 4096
[  204.835875][ T6263] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.919320][ T6257] loop4: detected capacity change from 0 to 4096
[  205.148937][ T6266] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.355009][   T29] audit: type=1800 audit(1718921736.202:127): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0
[  205.458667][   T29] audit: type=1804 audit(1718921736.239:128): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3590057516/syzkaller.H14zmW/58/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  208.258559][ T5180] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  208.443078][ T5180] usb 2-1: device descriptor read/64, error -71
[  208.770562][ T5180] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  208.966510][ T5180] usb 2-1: device descriptor read/64, error -71
[  209.133753][ T5180] usb usb2-port1: attempt power cycle
[  209.627096][ T5180] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  209.684187][ T5180] usb 2-1: device descriptor read/8, error -71
[  209.992023][ T5180] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  210.050657][ T5180] usb 2-1: device descriptor read/8, error -71
[  210.212271][ T5180] usb usb2-port1: unable to enumerate USB device
[  210.328402][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  213.516664][ T6307] loop1: detected capacity change from 0 to 32768
[  213.627386][ T6307] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  213.643802][ T6307] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  213.740927][ T6307] bcachefs (loop1): alloc_read... done
[  213.746551][ T6307] bcachefs (loop1): stripes_read... done
[  213.752368][ T6307] bcachefs (loop1): snapshots_read... done
[  213.772775][ T6307] bcachefs (loop1): journal_replay... done
[  213.778967][ T6307] bcachefs (loop1): resume_logged_ops... done
[  213.806841][ T6307] bcachefs (loop1): going read-write
[  213.844775][ T6307] bcachefs (loop1): done starting filesystem
[  214.689667][ T4484] Bluetooth: hci2: command 0x0406 tx timeout
[  214.696014][ T5129] Bluetooth: hci5: command 0x0406 tx timeout
[  214.702159][ T5129] Bluetooth: hci1: command 0x0406 tx timeout
[  214.709740][ T5129] Bluetooth: hci3: command 0x0406 tx timeout
[  215.072879][ T5113] bcachefs (loop1): shutting down
[  215.084538][ T5113] bcachefs (loop1): going read-only
[  215.092305][ T5113] bcachefs (loop1): finished waiting for writes to stop
[  215.119657][ T5113] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  215.146040][ T5113] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  215.188324][ T5113] bcachefs (loop1): shutdown complete, journal seq 12
[  215.221127][ T5113] bcachefs (loop1): marking filesystem clean
[  215.367034][ T5113] bcachefs (loop1): shutdown complete
[  215.625407][ T6321] loop0: detected capacity change from 0 to 4096
[  215.723834][ T6322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.849323][   T29] audit: type=1800 audit(1718921745.894:129): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0
[  215.919371][   T29] audit: type=1804 audit(1718921745.940:130): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1097695746/syzkaller.6Ylcem/8/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  216.756416][   T29] audit: type=1326 audit(1718921746.734:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x0
[  217.985544][   T29] audit: type=1326 audit(1718921747.869:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x0
[  223.686512][ T5177] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  223.855891][ T5177] usb 2-1: device descriptor read/64, error -71
[  224.181077][ T5177] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  224.358562][ T5177] usb 2-1: device descriptor read/64, error -71
[  224.512894][ T5177] usb usb2-port1: attempt power cycle
[  225.003572][ T5177] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  225.045014][ T5177] usb 2-1: device descriptor read/8, error -71
[  225.355303][ T5177] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  225.400369][ T5177] usb 2-1: device descriptor read/8, error -71
[  225.550500][ T5177] usb usb2-port1: unable to enumerate USB device
[  227.888775][   T29] audit: type=1326 audit(1718921757.007:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f137567cf29 code=0x0
[  237.142087][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.156726][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.170860][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.179492][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.201170][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  237.215779][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.413076][   T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.423630][   T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.432389][   T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.442327][   T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.456031][   T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  237.464632][   T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.865617][ T5178] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  239.049420][ T5178] usb 2-1: device descriptor read/64, error -71
[  239.352818][ T5178] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  239.473480][   T53] Bluetooth: hci6: command tx timeout
[  239.490611][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  239.502297][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  239.511138][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  239.529010][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  239.537765][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  239.545592][ T5122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  239.564216][ T5178] usb 2-1: device descriptor read/64, error -71
[  239.712824][ T5178] usb usb2-port1: attempt power cycle
[  239.734407][ T5122] Bluetooth: hci7: command tx timeout
[  240.189606][ T5178] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  240.244458][ T5178] usb 2-1: device descriptor read/8, error -71
[  240.555914][ T5178] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  240.602032][ T5178] usb 2-1: device descriptor read/8, error -71
[  240.756172][ T5178] usb usb2-port1: unable to enumerate USB device
[  241.725680][ T5122] Bluetooth: hci6: command tx timeout
[  241.812334][ T5122] Bluetooth: hci8: command tx timeout
[  241.998187][ T5122] Bluetooth: hci7: command tx timeout
[  242.338277][ T6415] loop1: detected capacity change from 0 to 128
[  242.572726][   T29] audit: type=1800 audit(1718921770.556:134): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048619 res=0 errno=0
[  243.624437][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  243.635054][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  243.642945][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  243.655617][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  243.663639][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  243.672614][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  243.841962][ T6421] loop1: detected capacity change from 0 to 256
[  243.979159][ T5122] Bluetooth: hci6: command tx timeout
[  244.076490][ T5122] Bluetooth: hci8: command tx timeout
[  244.250540][ T5122] Bluetooth: hci7: command tx timeout
[  245.891088][ T5122] Bluetooth: hci9: command tx timeout
[  246.232818][ T5122] Bluetooth: hci6: command tx timeout
[  246.327780][ T5122] Bluetooth: hci8: command tx timeout
[  246.340243][ T6429] loop1: detected capacity change from 0 to 8192
[  246.429156][ T6429]  loop1: p1 p2 p3
[  246.448799][ T6429] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  246.492831][ T5122] Bluetooth: hci7: command tx timeout
[  248.162622][ T5122] Bluetooth: hci9: command tx timeout
[  248.573334][ T5122] Bluetooth: hci8: command tx timeout
[  248.677545][   T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  248.692194][   T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  248.702308][   T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  248.721595][   T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  248.733067][   T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  248.749377][   T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  250.393261][   T53] Bluetooth: hci9: command tx timeout
[  251.010917][   T53] Bluetooth: hci10: command tx timeout
[  252.647114][   T53] Bluetooth: hci9: command tx timeout
[  253.253669][   T53] Bluetooth: hci10: command tx timeout
[  255.507045][   T53] Bluetooth: hci10: command tx timeout
[  257.765767][   T53] Bluetooth: hci10: command tx timeout
[  267.917726][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  267.924183][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  270.169754][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  270.171226][ T5122] Bluetooth: hci0: command 0x0406 tx timeout
[  281.526747][ T5122] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  281.537526][ T5122] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  281.549294][ T5122] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  281.558354][ T5122] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  281.568787][ T5122] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  281.576414][ T5122] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  283.762996][ T5122] Bluetooth: hci11: command tx timeout
[  286.016157][ T5122] Bluetooth: hci11: command tx timeout
[  288.269513][ T5122] Bluetooth: hci11: command tx timeout
[  290.522878][ T5122] Bluetooth: hci11: command tx timeout
[  307.999890][ T5126] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  308.020507][ T5126] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  308.040921][ T5124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  308.055392][ T5124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  308.071480][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  308.083548][ T5124] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  308.092674][   T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  308.103981][   T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  308.111334][ T5124] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  308.130836][ T5122] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  308.141156][ T5122] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  308.148741][ T5122] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  309.874379][ T5126] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  309.885137][ T5126] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  309.893817][ T5126] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  309.904061][ T5126] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  309.914735][ T5126] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  309.927461][ T5126] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  310.371641][ T5122] Bluetooth: hci12: command tx timeout
[  310.372227][ T5126] Bluetooth: hci13: command tx timeout
[  312.191794][ T5122] Bluetooth: hci14: command tx timeout
[  312.625093][ T5122] Bluetooth: hci13: command tx timeout
[  312.643616][ T5122] Bluetooth: hci12: command tx timeout
[  313.750818][ T5126] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  313.761895][ T5126] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  313.782217][ T5126] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  313.792121][ T5126] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  313.800376][ T5126] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  313.808047][ T5126] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  314.445023][ T5126] Bluetooth: hci14: command tx timeout
[  314.878773][ T5126] Bluetooth: hci12: command tx timeout
[  314.878795][ T5122] Bluetooth: hci13: command tx timeout
[  316.094380][ T5126] Bluetooth: hci15: command tx timeout
[  316.698867][ T5126] Bluetooth: hci14: command tx timeout
[  317.132290][ T5126] Bluetooth: hci13: command tx timeout
[  317.132428][ T5122] Bluetooth: hci12: command tx timeout
[  318.345198][ T5122] Bluetooth: hci15: command tx timeout
[  318.952628][ T5122] Bluetooth: hci14: command tx timeout
[  318.991107][ T5126] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  319.002117][ T5126] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  319.017265][ T5126] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  319.027192][ T5126] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  319.039945][ T5126] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  319.057786][ T5126] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  320.598993][ T5122] Bluetooth: hci15: command tx timeout
[  321.295020][ T5122] Bluetooth: hci16: command tx timeout
[  322.863090][ T5122] Bluetooth: hci15: command tx timeout
[  323.559724][ T5122] Bluetooth: hci16: command tx timeout
[  325.799750][ T5122] Bluetooth: hci16: command tx timeout
[  328.052975][ T5122] Bluetooth: hci16: command tx timeout
[  334.475202][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  334.482125][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  352.403848][ T5126] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  352.414731][ T5126] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  352.423535][ T5126] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  352.440820][ T5126] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  352.448881][ T5126] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  352.459904][ T5126] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  354.662103][ T5126] Bluetooth: hci17: command tx timeout
[  356.915234][ T5126] Bluetooth: hci17: command tx timeout
[  359.168719][ T5126] Bluetooth: hci17: command tx timeout
[  361.424299][ T5126] Bluetooth: hci17: command tx timeout
[  366.363331][   T30] INFO: task syz-executor.4:6256 blocked for more than 143 seconds.
[  366.371390][   T30]       Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0
[  366.389432][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  366.399696][   T30] task:syz-executor.4  state:D stack:24672 pid:6256  tgid:6256  ppid:5120   flags:0x00004006
2024/06/20 22:18:04 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  366.423319][   T30] Call Trace:
[  366.434839][   T30]  <TASK>
[  366.437850][   T30]  __schedule+0x17e8/0x4a20
[  366.480582][   T30]  ? __pfx___schedule+0x10/0x10
[  366.485733][   T30]  ? __pfx_lock_release+0x10/0x10
[  366.491153][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  366.503344][   T30]  ? schedule+0x90/0x320
[  366.508035][   T30]  schedule+0x14b/0x320
[  366.512331][   T30]  schedule_preempt_disabled+0x13/0x30
[  366.538546][   T30]  __mutex_lock+0x6a4/0xd70
[  366.543283][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  366.557525][   T30]  ? __mutex_lock+0x527/0xd70
[  366.562379][   T30]  ? tun_chr_close+0x3e/0x1b0
[  366.567221][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  366.590190][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  366.595960][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  366.611704][   T30]  ? __fput+0x3a4/0x8b0
[  366.615981][   T30]  ? __fput+0x3fa/0x8b0
[  366.620193][   T30]  tun_chr_close+0x3e/0x1b0
[  366.644178][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  366.649400][   T30]  __fput+0x408/0x8b0
[  366.653437][   T30]  task_work_run+0x251/0x310
[  366.676804][   T30]  ? __pfx_task_work_run+0x10/0x10
[  366.682189][   T30]  syscall_exit_to_user_mode+0x168/0x370
[  366.698432][   T30]  do_syscall_64+0x100/0x230
[  366.703138][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  366.708839][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.730943][   T30] RIP: 0033:0x7f0e40a7cf29
[  366.735475][   T30] RSP: 002b:00007ffde30f8728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  366.763465][   T30] RAX: 0000000000000000 RBX: 00007f0e40bb5980 RCX: 00007f0e40a7cf29
[  366.771549][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  366.796258][   T30] RBP: 00007f0e40bb5980 R08: 00000000819d6e27 R09: 0000001a00000000
[  366.804506][   T30] R10: 0000000080000000 R11: 0000000000000246 R12: 00000000000304e0
[  366.828436][   T30] R13: 00007f0e40bb412c R14: 0000000000000032 R15: 00007f0e40bb5980
[  366.836502][   T30]  </TASK>
[  366.861180][   T30] INFO: task syz-executor.3:6267 blocked for more than 143 seconds.
[  366.869227][   T30]       Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0
[  366.895320][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  366.915238][   T30] task:syz-executor.3  state:D stack:24672 pid:6267  tgid:6267  ppid:5112   flags:0x00004006
[  366.925702][   T30] Call Trace:
[  366.947493][   T30]  <TASK>
[  366.950508][   T30]  __schedule+0x17e8/0x4a20
[  366.955088][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  366.977026][   T30]  ? __pfx___schedule+0x10/0x10
[  366.990829][   T30]  ? __pfx_lock_release+0x10/0x10
[  366.995908][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  367.001432][   T30]  ? schedule+0x90/0x320
[  367.023480][   T30]  schedule+0x14b/0x320
[  367.027743][   T30]  schedule_preempt_disabled+0x13/0x30
[  367.033283][   T30]  __mutex_lock+0x6a4/0xd70
[  367.056193][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.062118][   T30]  ? __mutex_lock+0x527/0xd70
[  367.077519][   T30]  ? tun_chr_close+0x3e/0x1b0
[  367.084812][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  367.099790][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.105540][   T30]  tun_chr_close+0x3e/0x1b0
[  367.120842][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  367.126037][   T30]  __fput+0x408/0x8b0
[  367.130076][   T30]  task_work_run+0x251/0x310
[  367.142631][   T30]  ? __pfx_task_work_run+0x10/0x10
[  367.147825][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  367.164235][   T30]  syscall_exit_to_user_mode+0x168/0x370
[  367.169988][   T30]  do_syscall_64+0x100/0x230
[  367.174644][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  367.207574][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.213587][   T30] RIP: 0033:0x7f0d2107cf29
[  367.218041][   T30] RSP: 002b:00007fff31c13ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  367.240420][   T30] RAX: 0000000000000000 RBX: 00007f0d211b5980 RCX: 00007f0d2107cf29
[  367.248499][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  367.272683][   T30] RBP: 00007f0d211b5980 R08: 00000000897b4010 R09: 0000000c00000000
[  367.280753][   T30] R10: 0000000080000000 R11: 0000000000000246 R12: 00000000000306f4
[  367.305106][   T30] R13: 00007f0d211b405c R14: 0000000000000032 R15: 00007f0d211b5980
[  367.313191][   T30]  </TASK>
[