last executing test programs:

1m29.231535023s ago: executing program 3 (id=1143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)

1m29.172700994s ago: executing program 3 (id=1145):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)

1m28.352805365s ago: executing program 3 (id=1148):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x40}, 0x8)

1m28.197683427s ago: executing program 3 (id=1150):
socket(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20)

1m28.04862032s ago: executing program 3 (id=1152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x38, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

1m27.890147811s ago: executing program 3 (id=1154):
unshare(0x20000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

1m12.817426497s ago: executing program 32 (id=1154):
unshare(0x20000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

5.735039712s ago: executing program 1 (id=1617):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, 0x0)
connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)}, 0x9e9f}], 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)

5.592436394s ago: executing program 4 (id=1618):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.524427835s ago: executing program 4 (id=1620):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0)

5.384628186s ago: executing program 4 (id=1622):
pipe2$9p(&(0x7f0000000240), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0x1, 0x50ed, &(0x7f0000005180)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, 0x0, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x3db1)

4.702599586s ago: executing program 1 (id=1624):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe})
syz_open_dev$sndmidi(0x0, 0x1, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tracing={0x0, 0xfffffffd}}, 0x20)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x10b100)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xdff}, 0x1c)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
socket$inet(0x2, 0x3, 0xfe)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
fallocate(0xffffffffffffffff, 0x3, 0x7, 0x10000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='tar'], 0x13)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

4.010362345s ago: executing program 4 (id=1625):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xb3a, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x14000040, 0x0, 0x0)

3.007599259s ago: executing program 1 (id=1628):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.762179722s ago: executing program 2 (id=1629):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000005c0)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r2, 0x2b, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="bcafed3c000000", @ANYRES16, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}}, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ba5bf73c289a9e095f9d03ffb460c8f74b196445ed3f82766e493d37a2da988050f329826bca2f2e59bb7025570088e4490b0400a5f85f970878338700f5b5a9dfc992ad9891b6510d4b08f2979fd2791fe6d418f716162128f8c5f341deae23736a7d8e0bb36b05b776c8c51b7bd94ac7e67e56e412bc60aa9f7b32c0f1ba3c80d981bb2df9600dbd5635ad5bd7bd45735956dc22b2f5cd20f7c44eb5ed753208c00efe7bbfa3786fab86df18ec475f8cc165", @ANYRES16, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

2.568643435s ago: executing program 2 (id=1630):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0)

2.428567437s ago: executing program 1 (id=1631):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'vlan0\x00', @multicast})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
writev(r3, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r8, 0x0, 0x80, 0x4)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80800)
read(r2, &(0x7f0000000240)=""/233, 0xe9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$rxrpc(r7, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}})
write(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r10, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000"], 0x120}}, 0x0)

2.423893227s ago: executing program 2 (id=1632):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, 0x0)
connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)}, 0x9e9f}], 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)

2.228408399s ago: executing program 4 (id=1633):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fallocate(r1, 0x4, 0xffffffff7fffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x7, 0x7, 0x6, 0x1, 0xcf, 0x7]}})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "90fc37852a192ea1b376efee14a7aa1c3009929129c42d06f5e30377f2428d08", 0x2c0b, 0x6, 0x1, 0x5}, 0x3c)
fallocate(r3, 0x61, 0x80000000, 0x80000000)
ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={<r4=>0x0, @in6={{0xa, 0x6, 0x8, @private0}}}, &(0x7f00000001c0)=0x84)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000780)=0x5, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000003c0)=@req={0x1, 0x6, 0x3, 0x10}, 0x10)
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r7=>r2, {0x1d}}, './file0\x00'})
bind$alg(r7, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffffffffffff, "529e4df0409435512b2f286b0b6a3a98e314639f862f580110c6706377af1500", 0x6, 0x8, 0x9, 0xb0e}, 0x3c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0)
fallocate(r5, 0x3, 0x4, 0x4)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0xffffffff, 0x4}}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r4, 0x3, 0x10, 0x4b6, 0x5}, &(0x7f0000000240)=0x18)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905890eca"], 0x0)

1.788581405s ago: executing program 0 (id=1636):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000cb6a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040)

1.754275386s ago: executing program 0 (id=1637):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r1, 0x0, 0x10da)

1.614358778s ago: executing program 0 (id=1638):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000005c0)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r2, 0x2b, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="bcafed3c000000", @ANYRES16, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}}, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ba5bf73c289a9e095f9d03ffb460c8f74b196445ed3f82766e493d37a2da988050f329826bca2f2e59bb7025570088e4490b0400a5f85f970878338700f5b5a9dfc992ad9891b6510d4b08f2979fd2791fe6d418f716162128f8c5f341deae23736a7d8e0bb36b05b776c8c51b7bd94ac7e67e56e412bc60aa9f7b32c0f1ba3c80d981bb2df9600dbd5635ad5bd7bd45735956dc22b2f5cd20f7c44eb5ed753208c00efe7bbfa3786fab86df18ec475f8cc165", @ANYRES16, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

1.48058666s ago: executing program 0 (id=1639):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.46827339s ago: executing program 2 (id=1640):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0)

1.405699821s ago: executing program 1 (id=1641):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xb3a, 0x4)
sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x14000040, 0x0, 0x0)

1.256175753s ago: executing program 0 (id=1642):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket(0xa, 0x801, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x11000)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ptrace(0x10, 0x0)
getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)

928.305647ms ago: executing program 2 (id=1643):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @empty, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0)
r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

608.338772ms ago: executing program 0 (id=1644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="13ea8bdc725d"})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xc}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x3}], 0x1, 0x0, 0x0)

427.787284ms ago: executing program 4 (id=1645):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980)

92.573848ms ago: executing program 1 (id=1646):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r1, 0x0, 0x10da)

0s ago: executing program 2 (id=1647):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000005c0)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r2, 0x2b, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="bcafed3c000000", @ANYRES16, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}}, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ba5bf73c289a9e095f9d03ffb460c8f74b196445ed3f82766e493d37a2da988050f329826bca2f2e59bb7025570088e4490b0400a5f85f970878338700f5b5a9dfc992ad9891b6510d4b08f2979fd2791fe6d418f716162128f8c5f341deae23736a7d8e0bb36b05b776c8c51b7bd94ac7e67e56e412bc60aa9f7b32c0f1ba3c80d981bb2df9600dbd5635ad5bd7bd45735956dc22b2f5cd20f7c44eb5ed753208c00efe7bbfa3786fab86df18ec475f8cc165", @ANYRES16, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts.
[   80.771020][ T5758] cgroup: Unknown subsys name 'net'
[   80.943451][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.695130][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.434807][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.444158][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.453541][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.455487][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.467943][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.475771][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.479045][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.490979][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.494416][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.498677][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.513451][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.516189][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.540530][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.554823][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.564841][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.565274][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.572449][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.582903][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.587967][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.602577][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.611974][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.634579][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.644324][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.651755][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.132302][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   85.241182][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   85.266386][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   85.369199][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   85.421962][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.429956][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.437835][ T5767] bridge_slave_0: entered allmulticast mode
[   85.445502][ T5767] bridge_slave_0: entered promiscuous mode
[   85.456068][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.463344][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.470612][ T5767] bridge_slave_1: entered allmulticast mode
[   85.477870][ T5767] bridge_slave_1: entered promiscuous mode
[   85.511065][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.518558][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.526244][ T5770] bridge_slave_0: entered allmulticast mode
[   85.533298][ T5770] bridge_slave_0: entered promiscuous mode
[   85.586592][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.593755][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.602113][ T5770] bridge_slave_1: entered allmulticast mode
[   85.610007][ T5770] bridge_slave_1: entered promiscuous mode
[   85.645843][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.653106][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.660497][ T5769] bridge_slave_0: entered allmulticast mode
[   85.668847][ T5769] bridge_slave_0: entered promiscuous mode
[   85.702613][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.716156][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.725842][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.733099][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.740474][ T5769] bridge_slave_1: entered allmulticast mode
[   85.748661][ T5769] bridge_slave_1: entered promiscuous mode
[   85.822640][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.837072][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.868890][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.881325][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.917738][ T5767] team0: Port device team_slave_0 added
[   85.927597][ T5767] team0: Port device team_slave_1 added
[   85.945500][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.952737][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.960590][ T5768] bridge_slave_0: entered allmulticast mode
[   85.967884][ T5768] bridge_slave_0: entered promiscuous mode
[   86.016928][ T5769] team0: Port device team_slave_0 added
[   86.025663][ T5769] team0: Port device team_slave_1 added
[   86.032932][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.040679][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.048903][ T5768] bridge_slave_1: entered allmulticast mode
[   86.057947][ T5768] bridge_slave_1: entered promiscuous mode
[   86.068868][ T5770] team0: Port device team_slave_0 added
[   86.078762][ T5770] team0: Port device team_slave_1 added
[   86.142796][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.150125][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.176666][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.229566][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.237068][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.264542][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.276412][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.283395][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.314050][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.336422][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.343598][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.370392][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.383660][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.391650][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.417714][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.432922][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.443297][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.450794][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.477057][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.511831][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.558258][ T5767] hsr_slave_0: entered promiscuous mode
[   86.565060][ T5767] hsr_slave_1: entered promiscuous mode
[   86.605120][ T5774] Bluetooth: hci1: command tx timeout
[   86.644968][ T5768] team0: Port device team_slave_0 added
[   86.659270][ T5768] team0: Port device team_slave_1 added
[   86.681302][ T5769] hsr_slave_0: entered promiscuous mode
[   86.684762][ T5774] Bluetooth: hci0: command tx timeout
[   86.688719][   T50] Bluetooth: hci2: command tx timeout
[   86.693281][ T5778] Bluetooth: hci3: command tx timeout
[   86.704486][ T5769] hsr_slave_1: entered promiscuous mode
[   86.710827][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.718988][ T5769] Cannot create hsr debugfs directory
[   86.791167][ T5770] hsr_slave_0: entered promiscuous mode
[   86.798627][ T5770] hsr_slave_1: entered promiscuous mode
[   86.807080][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.815189][ T5770] Cannot create hsr debugfs directory
[   86.869929][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.878384][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.906327][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.919730][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.927840][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.954419][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.159397][ T5768] hsr_slave_0: entered promiscuous mode
[   87.166731][ T5768] hsr_slave_1: entered promiscuous mode
[   87.173178][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.181589][ T5768] Cannot create hsr debugfs directory
[   87.525352][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.562282][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.587325][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.602288][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.675896][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.698121][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.719377][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.743292][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.857061][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.869154][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.891992][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.927191][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.990554][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.004846][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.017517][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.030374][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.116247][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.178797][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   88.215981][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.223334][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.262902][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.270118][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.317854][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.333839][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.368629][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   88.419906][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   88.432383][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.439606][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.460417][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.480820][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.488178][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.498523][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.506252][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.541326][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.548604][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.651784][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   88.674666][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.681869][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.690343][   T50] Bluetooth: hci1: command tx timeout
[   88.740653][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.748276][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.764251][   T50] Bluetooth: hci3: command tx timeout
[   88.769728][   T50] Bluetooth: hci0: command tx timeout
[   88.776157][   T50] Bluetooth: hci2: command tx timeout
[   89.082275][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.179121][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.258173][ T5769] veth0_vlan: entered promiscuous mode
[   89.310824][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.322587][ T5769] veth1_vlan: entered promiscuous mode
[   89.383179][ T5767] veth0_vlan: entered promiscuous mode
[   89.429682][ T5767] veth1_vlan: entered promiscuous mode
[   89.470724][ T5769] veth0_macvtap: entered promiscuous mode
[   89.480820][ T5768] veth0_vlan: entered promiscuous mode
[   89.489804][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.507224][ T5769] veth1_macvtap: entered promiscuous mode
[   89.558540][ T5768] veth1_vlan: entered promiscuous mode
[   89.580668][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.603801][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.618549][ T5767] veth0_macvtap: entered promiscuous mode
[   89.653179][ T5767] veth1_macvtap: entered promiscuous mode
[   89.676895][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.687178][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.697650][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.707018][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.741297][ T5770] veth0_vlan: entered promiscuous mode
[   89.771868][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.786406][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.800593][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.812226][ T5770] veth1_vlan: entered promiscuous mode
[   89.842082][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.853066][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.866516][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.894586][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.903378][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.913865][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.924718][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.954585][ T5768] veth0_macvtap: entered promiscuous mode
[   89.987778][ T5768] veth1_macvtap: entered promiscuous mode
[   90.000509][ T5770] veth0_macvtap: entered promiscuous mode
[   90.036918][ T5770] veth1_macvtap: entered promiscuous mode
[   90.095150][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.105878][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.116199][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.127835][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.139767][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.170331][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.181478][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.192699][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.203623][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.216831][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.238779][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.249352][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.259875][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.272930][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.283371][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.295162][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.307277][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.357762][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.370423][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.380367][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.391967][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.402243][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.412949][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.425461][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.434918][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.443661][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.454410][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.463169][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.478214][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.488513][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.512380][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.521918][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.532816][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.543060][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.638237][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.663515][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.719491][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.744538][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.764216][   T50] Bluetooth: hci1: command tx timeout
[   90.776673][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.789922][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.844542][   T50] Bluetooth: hci2: command tx timeout
[   90.845014][ T5774] Bluetooth: hci0: command tx timeout
[   90.850290][   T50] Bluetooth: hci3: command tx timeout
[   90.899163][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.922402][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.028876][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.054834][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.140798][ T5866] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.184547][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.202679][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.205959][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.210816][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.653205][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   91.694466][ T5873] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.706996][ T5874] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.802079][ T5876] =======================================================
[   91.802079][ T5876] WARNING: The mand mount option has been deprecated and
[   91.802079][ T5876]          and is ignored by this kernel. Remove the mand
[   91.802079][ T5876]          option from the mount to silence this warning.
[   91.802079][ T5876] =======================================================
[   92.496911][   T55] cfg80211: failed to load regulatory.db
[   92.601777][ T5874] dummy0: entered promiscuous mode
[   92.611751][ T5874] vlan2: entered promiscuous mode
[   92.831218][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[   92.845117][ T5774] Bluetooth: hci1: command tx timeout
[   92.972770][ T5778] Bluetooth: hci2: command tx timeout
[   92.980159][ T5778] Bluetooth: hci0: command tx timeout
[   93.039588][ T5774] Bluetooth: hci3: command tx timeout
[   93.186284][ T5885] block device autoloading is deprecated and will be removed.
[   94.535125][ T5900] syz.1.11[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   95.293221][ T5900] loop1: detected capacity change from 0 to 512
[   95.556458][ T5900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.570154][ T5900] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.714475][ T5905] netlink: 'syz.1.11': attribute type 13 has an invalid length.
[   95.722259][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'.
[   96.665847][ T5911] loop2: detected capacity change from 0 to 1024
[   96.850577][ T5914] loop3: detected capacity change from 0 to 2048
[   96.864624][ T5914] EXT4-fs: Ignoring removed bh option
[   97.413954][    C0] sched: RT throttling activated
[   98.432007][ T5911] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data
[   99.705932][ T5914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.867836][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.898718][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.230092][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'.
[  103.797846][ T5951] loop3: detected capacity change from 0 to 512
[  103.984485][ T5948] loop0: detected capacity change from 0 to 1024
[  104.089443][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.102684][ T5951] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.192850][ T5951] virtiofs: Unknown parameter 'always 1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 18	nlmon0    :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 20	batadv0   :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 21	vxcan0    :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 22	vxcan1    :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 23	veth0     :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 24	veth1     :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 25	wg0       :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 26	wg1       :     1      V3
[  104.192850][ T5951] 				010000E0     1 0:00000000		0
[  104.192850][ T5951] 27	wg2       :     1      '
[  104.293247][ T5951] netlink: 'syz.3.22': attribute type 13 has an invalid length.
[  104.301053][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'.
[  104.594134][ T5948] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  105.438123][ T5960] loop1: detected capacity change from 0 to 2048
[  105.446408][ T5960] EXT4-fs: Ignoring removed bh option
[  108.478641][ T5960] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  108.721199][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.940783][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'.
[  108.997963][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[  111.541681][ T5986] loop1: detected capacity change from 0 to 1024
[  111.677196][ T5986] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data
[  111.744455][ T5993] 8021q: VLANs not supported on gre0
[  112.949204][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'.
[  112.999741][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[  114.294538][ T6009] loop2: detected capacity change from 0 to 2048
[  114.305497][ T6009] EXT4-fs: Ignoring removed bh option
[  114.702603][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.089700][   T27] audit: type=1800 audit(1751414613.253:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=15 res=0 errno=0
[  115.111954][ T6009] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  115.128983][ T6009] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  115.141940][ T6009] EXT4-fs (loop2): This should not happen!! Data will be lost
[  115.141940][ T6009] 
[  115.151774][ T6009] EXT4-fs (loop2): Total free blocks count 0
[  115.157826][ T6009] EXT4-fs (loop2): Free/Dirty block details
[  115.163802][ T6009] EXT4-fs (loop2): free_blocks=2415919104
[  115.169713][ T6009] EXT4-fs (loop2): dirty_blocks=656
[  115.174988][ T6009] EXT4-fs (loop2): Block reservation details
[  115.180992][ T6009] EXT4-fs (loop2): i_reserved_data_blocks=41
[  115.449487][ T6019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.41'.
[  116.598657][   T34] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.161296][ T6030] loop0: detected capacity change from 0 to 1024
[  117.225100][ T6030] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  118.459842][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'.
[  118.476692][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[  119.324474][ T6049] Zero length message leads to an empty skb
[  120.039254][ T6053] loop3: detected capacity change from 0 to 2048
[  120.047495][ T6053] EXT4-fs: Ignoring removed bh option
[  123.366654][ T6053] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  123.811689][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'.
[  124.881805][ T6077] loop1: detected capacity change from 0 to 1024
[  125.046739][ T6077] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data
[  128.012849][ T6096] loop0: detected capacity change from 0 to 2048
[  128.024374][ T6096] EXT4-fs: Ignoring removed bh option
[  128.142252][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.395918][   T27] audit: type=1800 audit(1751414626.693:3): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="file1" dev="loop0" ino=15 res=0 errno=0
[  128.420169][ T6096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  128.435823][ T6096] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  128.448537][ T6096] EXT4-fs (loop0): This should not happen!! Data will be lost
[  128.448537][ T6096] 
[  128.458336][ T6096] EXT4-fs (loop0): Total free blocks count 0
[  128.464448][ T6096] EXT4-fs (loop0): Free/Dirty block details
[  128.470423][ T6096] EXT4-fs (loop0): free_blocks=2415919104
[  128.476254][ T6096] EXT4-fs (loop0): dirty_blocks=656
[  128.481628][ T6096] EXT4-fs (loop0): Block reservation details
[  128.487722][ T6096] EXT4-fs (loop0): i_reserved_data_blocks=41
[  128.687559][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'.
[  129.121507][ T6104] netlink: 'syz.3.65': attribute type 14 has an invalid length.
[  129.600241][ T6109] netlink: 11 bytes leftover after parsing attributes in process `syz.2.68'.
[  130.200413][   T34] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  130.990180][ T6122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.73'.
[  131.522866][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'.
[  131.654216][ T6133] netlink: 11 bytes leftover after parsing attributes in process `syz.1.79'.
[  132.381618][ T6138] loop0: detected capacity change from 0 to 2048
[  132.391542][ T6138] EXT4-fs: Ignoring removed bh option
[  133.333384][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  133.443566][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  134.284863][ T6136] x_tables: duplicate underflow at hook 4
[  134.305047][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.332144][   T27] audit: type=1800 audit(1751414632.823:4): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.77" name="file1" dev="loop0" ino=15 res=0 errno=0
[  134.393206][ T6137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  134.408361][ T6137] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  134.420938][ T6137] EXT4-fs (loop0): This should not happen!! Data will be lost
[  134.420938][ T6137] 
[  134.430742][ T6137] EXT4-fs (loop0): Total free blocks count 0
[  134.436863][ T6137] EXT4-fs (loop0): Free/Dirty block details
[  134.442787][ T6137] EXT4-fs (loop0): free_blocks=2415919104
[  134.449067][ T6137] EXT4-fs (loop0): dirty_blocks=656
[  134.454523][ T6137] EXT4-fs (loop0): Block reservation details
[  134.460532][ T6137] EXT4-fs (loop0): i_reserved_data_blocks=41
[  134.575184][ T6136] bridge0: port 3(syz_tun) entered blocking state
[  134.609433][ T6136] bridge0: port 3(syz_tun) entered disabled state
[  134.634410][ T6136] syz_tun: entered allmulticast mode
[  135.143013][ T6136] syz_tun: entered promiscuous mode
[  135.166178][ T3478] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  135.186569][ T6136] bridge0: port 3(syz_tun) entered blocking state
[  135.193497][ T6136] bridge0: port 3(syz_tun) entered forwarding state
[  135.863207][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'.
[  136.811430][ T6183] loop0: detected capacity change from 0 to 2048
[  136.822629][ T6183] EXT4-fs: Ignoring removed bh option
[  137.066713][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.322329][ T6183] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  137.338112][ T6183] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  137.350663][ T6183] EXT4-fs (loop0): This should not happen!! Data will be lost
[  137.350663][ T6183] 
[  137.360706][ T6183] EXT4-fs (loop0): Total free blocks count 0
[  137.366874][ T6183] EXT4-fs (loop0): Free/Dirty block details
[  137.372854][ T6183] EXT4-fs (loop0): free_blocks=2415919104
[  137.378716][ T6183] EXT4-fs (loop0): dirty_blocks=656
[  137.384107][ T6183] EXT4-fs (loop0): Block reservation details
[  137.390172][ T6183] EXT4-fs (loop0): i_reserved_data_blocks=41
[  137.601775][   T27] audit: type=1800 audit(1751414635.603:5): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="file1" dev="loop0" ino=15 res=0 errno=0
[  138.033345][ T6190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.93'.
[  138.875850][   T48] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  139.960628][ T6204] netlink: 'syz.3.98': attribute type 14 has an invalid length.
[  140.404948][ T6217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  141.696336][ T6228] loop3: detected capacity change from 0 to 2048
[  141.703811][ T6228] EXT4-fs: Ignoring removed bh option
[  144.524467][ T6228] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  145.062482][ T6235] x_tables: duplicate underflow at hook 4
[  145.176540][ T6239] loop3: detected capacity change from 0 to 1024
[  145.197806][ T6239] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  145.277128][ T5781] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  146.409440][ T6254] netlink: 'syz.3.112': attribute type 14 has an invalid length.
[  146.767083][ T6260] netlink: 48 bytes leftover after parsing attributes in process `syz.3.114'.
[  148.121348][ T6270] loop1: detected capacity change from 0 to 2048
[  148.128864][ T6270] EXT4-fs: Ignoring removed bh option
[  151.508617][ T6270] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  151.969275][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'.
[  152.365936][ T6284] loop2: detected capacity change from 0 to 1024
[  152.429254][ T6284] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data
[  153.422734][ T6289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.124'.
[  155.664905][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[  156.348859][ T6325] loop2: detected capacity change from 0 to 2048
[  156.360000][ T6325] EXT4-fs: Ignoring removed bh option
[  156.468472][ T6325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.706949][   T27] audit: type=1800 audit(1751414655.013:6): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.131" name="file1" dev="loop2" ino=15 res=0 errno=0
[  156.750870][ T6325] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  156.766711][ T6325] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  156.779274][ T6325] EXT4-fs (loop2): This should not happen!! Data will be lost
[  156.779274][ T6325] 
[  156.789095][ T6325] EXT4-fs (loop2): Total free blocks count 0
[  156.795226][ T6325] EXT4-fs (loop2): Free/Dirty block details
[  156.801195][ T6325] EXT4-fs (loop2): free_blocks=2415919104
[  156.807040][ T6325] EXT4-fs (loop2): dirty_blocks=656
[  156.812316][ T6325] EXT4-fs (loop2): Block reservation details
[  156.818428][ T6325] EXT4-fs (loop2): i_reserved_data_blocks=41
[  157.133816][ T6330] loop0: detected capacity change from 0 to 1024
[  157.195520][ T6330] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  157.747490][ T6337] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'.
[  158.426242][ T3478] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  161.266773][ T6362] bond_slave_0: entered promiscuous mode
[  161.272670][ T6362] bond_slave_1: entered promiscuous mode
[  161.299414][ T6362] vlan2: entered promiscuous mode
[  161.316408][ T6362] bond0: entered promiscuous mode
[  161.392540][ T6365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.147'.
[  161.904232][ T6376] loop2: detected capacity change from 0 to 2048
[  161.915787][ T6376] EXT4-fs: Ignoring removed bh option
[  162.100881][ T6376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.346337][ T6376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  162.361912][ T6376] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  162.374536][ T6376] EXT4-fs (loop2): This should not happen!! Data will be lost
[  162.374536][ T6376] 
[  162.384411][ T6376] EXT4-fs (loop2): Total free blocks count 0
[  162.390537][ T6376] EXT4-fs (loop2): Free/Dirty block details
[  162.396573][ T6376] EXT4-fs (loop2): free_blocks=2415919104
[  162.402430][ T6376] EXT4-fs (loop2): dirty_blocks=656
[  162.514010][ T6376] EXT4-fs (loop2): Block reservation details
[  162.520123][ T6376] EXT4-fs (loop2): i_reserved_data_blocks=41
[  162.615796][   T27] audit: type=1800 audit(1751414660.653:7): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.148" name="file1" dev="loop2" ino=15 res=0 errno=0
[  164.448139][ T3478] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  165.343824][ T6402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.157'.
[  166.394345][ T6436] loop3: detected capacity change from 0 to 2048
[  166.405918][ T6436] EXT4-fs: Ignoring removed bh option
[  166.512878][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.799150][ T6436] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  166.814845][ T6436] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  166.828482][ T6436] EXT4-fs (loop3): This should not happen!! Data will be lost
[  166.828482][ T6436] 
[  166.838546][ T6436] EXT4-fs (loop3): Total free blocks count 0
[  166.845020][ T6436] EXT4-fs (loop3): Free/Dirty block details
[  166.851017][ T6436] EXT4-fs (loop3): free_blocks=2415919104
[  166.856893][ T6436] EXT4-fs (loop3): dirty_blocks=656
[  166.862182][ T6436] EXT4-fs (loop3): Block reservation details
[  166.868515][ T6436] EXT4-fs (loop3): i_reserved_data_blocks=41
[  167.104023][   T27] audit: type=1800 audit(1751414665.073:8): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.166" name="file1" dev="loop3" ino=15 res=0 errno=0
[  168.682759][ T6449] syz.2.170 uses obsolete (PF_INET,SOCK_PACKET)
[  168.971782][ T1125] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  170.205685][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'.
[  170.246579][ T6476] netlink: 64 bytes leftover after parsing attributes in process `syz.0.178'.
[  170.494382][ T6484] team_slave_0: entered promiscuous mode
[  170.500530][ T6484] team_slave_1: entered promiscuous mode
[  170.508020][ T6484] vlan2: entered promiscuous mode
[  170.513100][ T6484] team0: entered promiscuous mode
[  170.590097][ T6487] x_tables: duplicate underflow at hook 4
[  170.599727][ T6487] bridge0: port 3(syz_tun) entered blocking state
[  170.611953][ T6487] bridge0: port 3(syz_tun) entered disabled state
[  170.619323][ T6487] syz_tun: entered allmulticast mode
[  170.627184][ T6487] syz_tun: entered promiscuous mode
[  170.633037][ T6487] bridge0: port 3(syz_tun) entered blocking state
[  170.640450][ T6487] bridge0: port 3(syz_tun) entered forwarding state
[  172.207032][ T6526] x_tables: duplicate underflow at hook 4
[  172.217514][ T6525] team_slave_0: entered promiscuous mode
[  172.223249][ T6525] team_slave_1: entered promiscuous mode
[  172.229484][ T6525] vlan2: entered promiscuous mode
[  172.235401][ T6525] team0: entered promiscuous mode
[  172.266664][ T6526] bridge0: port 3(syz_tun) entered blocking state
[  172.273246][ T6526] bridge0: port 3(syz_tun) entered disabled state
[  172.281825][ T6526] syz_tun: entered allmulticast mode
[  172.291470][ T6526] syz_tun: entered promiscuous mode
[  172.297667][ T6526] bridge0: port 3(syz_tun) entered blocking state
[  172.304347][ T6526] bridge0: port 3(syz_tun) entered forwarding state
[  173.330258][ T6540] loop1: detected capacity change from 0 to 2048
[  173.343470][ T6540] EXT4-fs: Ignoring removed bh option
[  175.266851][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.447063][   T27] audit: type=1800 audit(1751414673.803:9): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.202" name="file1" dev="loop1" ino=15 res=0 errno=0
[  175.476010][ T6540] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  175.491809][ T6540] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  175.504366][ T6540] EXT4-fs (loop1): This should not happen!! Data will be lost
[  175.504366][ T6540] 
[  175.514109][ T6540] EXT4-fs (loop1): Total free blocks count 0
[  175.520184][ T6540] EXT4-fs (loop1): Free/Dirty block details
[  175.527316][ T6540] EXT4-fs (loop1): free_blocks=2415919104
[  175.533120][ T6540] EXT4-fs (loop1): dirty_blocks=656
[  175.538695][ T6540] EXT4-fs (loop1): Block reservation details
[  175.544933][ T6540] EXT4-fs (loop1): i_reserved_data_blocks=41
[  176.359258][ T6554] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.799918][ T6559] x_tables: duplicate underflow at hook 4
[  176.808438][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'.
[  176.941908][ T1125] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  177.048273][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'.
[  177.245031][ T6570] vlan2: entered promiscuous mode
[  177.317473][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'.
[  180.978105][ T6599] x_tables: duplicate underflow at hook 4
[  180.999639][ T6599] bridge0: port 3(syz_tun) entered blocking state
[  181.012482][ T6599] bridge0: port 3(syz_tun) entered disabled state
[  181.019424][ T6599] syz_tun: entered allmulticast mode
[  181.044624][ T6599] syz_tun: entered promiscuous mode
[  181.068414][ T6599] bridge0: port 3(syz_tun) entered blocking state
[  181.075132][ T6599] bridge0: port 3(syz_tun) entered forwarding state
[  181.398753][ T6609] vlan2: entered promiscuous mode
[  182.699224][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[  182.782742][ T6630] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  183.613353][ T6639] x_tables: duplicate underflow at hook 4
[  184.129747][ T6652] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  185.159677][ T6667] x_tables: duplicate underflow at hook 4
[  185.196980][ T6668] (null): rxe_set_mtu: Set mtu to 1024
[  185.219899][ T6668] dummy0 speed is unknown, defaulting to 1000
[  185.297225][ T6668] dummy0 speed is unknown, defaulting to 1000
[  185.317996][ T6668] dummy0 speed is unknown, defaulting to 1000
[  185.829647][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.243'.
[  186.572354][ T6668] infiniband syz0: set active
[  186.585554][    T8] dummy0 speed is unknown, defaulting to 1000
[  186.602847][ T6668] infiniband syz0: added dummy0
[  186.607266][ T6687] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  186.627130][ T6668] syz0: rxe_create_cq: returned err = -12
[  186.654530][ T6668] infiniband syz0: Couldn't create ib_mad CQ
[  186.667668][ T6668] infiniband syz0: Couldn't open port 1
[  186.733244][ T6668] RDS/IB: syz0: added
[  186.743660][ T6668] smc: adding ib device syz0 with port count 1
[  186.763390][ T6668] smc:    ib device syz0 port 1 has pnetid 
[  186.773799][ T1188] dummy0 speed is unknown, defaulting to 1000
[  186.796850][ T6668] dummy0 speed is unknown, defaulting to 1000
[  188.049600][ T6668] dummy0 speed is unknown, defaulting to 1000
[  188.282898][ T6700] x_tables: duplicate underflow at hook 4
[  188.529735][ T6668] dummy0 speed is unknown, defaulting to 1000
[  189.072754][ T6668] dummy0 speed is unknown, defaulting to 1000
[  189.397588][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[  189.496156][ T6702] dummy0 speed is unknown, defaulting to 1000
[  189.571461][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'.
[  191.110719][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[  191.203703][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'.
[  191.380006][ T6775] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  192.220223][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.301'.
[  192.459375][ T6810] syzkaller0: entered promiscuous mode
[  192.465039][ T6810] syzkaller0: entered allmulticast mode
[  193.823009][ T6834] Cannot find set identified by id 2 to match
[  194.610468][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  194.617528][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  194.986223][ T6817] team_slave_0: entered promiscuous mode
[  194.991994][ T6817] team_slave_1: entered promiscuous mode
[  194.998334][ T6817] vlan2: entered promiscuous mode
[  195.003489][ T6817] team0: entered promiscuous mode
[  195.287044][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.320'.
[  195.288264][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'.
[  195.316168][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'.
[  195.353533][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'.
[  195.756790][ T6863] team_slave_0: entered promiscuous mode
[  195.762719][ T6863] team_slave_1: entered promiscuous mode
[  195.769453][ T6863] vlan2: entered promiscuous mode
[  195.775011][ T6863] team0: entered promiscuous mode
[  195.804106][   T50] Bluetooth: hci0: command tx timeout
[  196.034055][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'.
[  196.562907][ T6888] loop2: detected capacity change from 0 to 2048
[  196.570257][ T6888] EXT4-fs: Ignoring removed bh option
[  197.537351][ T6888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.771241][ T6888] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  197.786873][ T6888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28
[  197.799587][ T6888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  197.799587][ T6888] 
[  197.809470][ T6888] EXT4-fs (loop2): Total free blocks count 0
[  197.815592][ T6888] EXT4-fs (loop2): Free/Dirty block details
[  197.821563][ T6888] EXT4-fs (loop2): free_blocks=2415919104
[  197.827422][ T6888] EXT4-fs (loop2): dirty_blocks=656
[  197.832877][ T6888] EXT4-fs (loop2): Block reservation details
[  197.838969][ T6888] EXT4-fs (loop2): i_reserved_data_blocks=41
[  198.034182][   T27] audit: type=1800 audit(1751414696.073:10): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.334" name="file1" dev="loop2" ino=15 res=0 errno=0
[  198.560205][ T6900] dummy0 speed is unknown, defaulting to 1000
[  198.844744][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'.
[  199.211745][ T6913] vlan2: entered promiscuous mode
[  199.371814][  T991] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  199.520395][   T50] Bluetooth: hci0: link tx timeout
[  199.527330][   T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  199.927412][ T6932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'.
[  200.340113][ T6939] Cannot find set identified by id 2 to match
[  200.459800][ T5774] Bluetooth: hci0: link tx timeout
[  200.469547][ T5774] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.569721][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  201.613098][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  201.671636][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  203.236434][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[  205.479012][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'.
[  206.163169][ T7087] vlan2: entered promiscuous mode
[  206.941193][ T5774] Bluetooth: hci3: command 0x0406 tx timeout
[  206.947460][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  206.953512][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  207.457285][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  208.264389][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'.
[  209.010274][ T7173] syzkaller0: entered allmulticast mode
[  211.704539][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  213.328055][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  214.650256][ T7280] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  215.140181][ T7300] 8021q: VLANs not supported on vcan0
[  215.180688][ T7294] dummy0 speed is unknown, defaulting to 1000
[  216.200559][ T7315] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  216.702970][ T7329] vlan2: entered promiscuous mode
[  216.893346][ T7338] Cannot find set identified by id 2 to match
[  217.060266][ T7340] syzkaller0: entered allmulticast mode
[  217.439996][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'.
[  217.452568][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[  217.637276][ T7363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  218.560019][ T7382] ieee802154 phy0 wpan0: encryption failed: -22
[  220.937757][ T7418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.553'.
[  220.988384][ T7414] ieee802154 phy0 wpan0: encryption failed: -22
[  221.940248][ T7430] syzkaller0: entered allmulticast mode
[  222.112321][ T7441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'.
[  222.423614][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[  223.732812][ T7475] x_tables: duplicate underflow at hook 4
[  225.321638][ T7489] netlink: 52 bytes leftover after parsing attributes in process `syz.3.584'.
[  225.355359][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'.
[  226.243465][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'.
[  226.301178][ T7499] erspan0: entered promiscuous mode
[  226.348953][ T7499] erspan0: left promiscuous mode
[  226.440553][ T7504] x_tables: duplicate underflow at hook 4
[  226.610957][ T7514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.594'.
[  226.872038][ T7521] netlink: 'syz.0.597': attribute type 10 has an invalid length.
[  226.898209][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.945108][ T7521] bridge_slave_1: left allmulticast mode
[  226.951259][ T7521] bridge_slave_1: left promiscuous mode
[  226.963402][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.112771][ T7521] bridge_slave_1: entered promiscuous mode
[  227.120393][ T7521] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  228.096129][ T7533] x_tables: duplicate underflow at hook 4
[  228.194351][ T7537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'.
[  229.422978][ T7561] x_tables: duplicate underflow at hook 4
[  229.540928][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'.
[  229.555691][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'.
[  229.640617][ T7569] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  230.003360][ T7587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'.
[  230.012660][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[  230.046002][ T7588] x_tables: duplicate underflow at hook 4
[  231.312800][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'.
[  231.327112][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[  231.350192][ T7615] x_tables: duplicate underflow at hook 4
[  231.631186][ T7628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  231.771779][ T7636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.648'.
[  231.873214][ T7639] x_tables: duplicate underflow at hook 4
[  232.406537][ T7661] x_tables: duplicate underflow at hook 4
[  232.426525][ T7662] netlink: 48 bytes leftover after parsing attributes in process `syz.0.658'.
[  232.633428][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[  233.088205][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'.
[  233.159051][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.669'.
[  233.248219][ T7687] x_tables: duplicate underflow at hook 4
[  233.344440][ T7692] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  233.479572][ T7700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.487474][ T7700] IPv6: NLM_F_CREATE should be set when creating new route
[  233.555951][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'.
[  233.615787][ T7706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.679'.
[  233.752665][ T7715] x_tables: duplicate underflow at hook 4
[  233.915028][ T7717] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  234.808265][ T7730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.815617][ T7730] IPv6: NLM_F_CREATE should be set when creating new route
[  234.897872][ T7734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.691'.
[  234.914389][ T7736] x_tables: duplicate underflow at hook 4
[  235.526889][ T7762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.534212][ T7762] IPv6: NLM_F_CREATE should be set when creating new route
[  236.159477][ T7765] x_tables: duplicate underflow at hook 4
[  236.679304][ T7785] __nla_validate_parse: 1 callbacks suppressed
[  236.679321][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'.
[  237.429791][ T7790] x_tables: duplicate underflow at hook 4
[  237.636795][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'.
[  237.659849][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  238.633831][ T7813] netlink: 'syz.0.721': attribute type 5 has an invalid length.
[  238.732694][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'.
[  238.759205][ T7816] vlan2: entered promiscuous mode
[  238.769022][ T7816] dummy0: entered promiscuous mode
[  239.037402][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'.
[  239.047881][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'.
[  239.087001][ T7828] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  239.735727][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[  240.007655][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[  240.021361][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[  240.092234][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'.
[  240.153039][ T7843] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  240.945940][ T7851] vlan2: entered promiscuous mode
[  242.406664][ T7884] __nla_validate_parse: 5 callbacks suppressed
[  242.406680][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  242.569060][ T7889] x_tables: duplicate underflow at hook 4
[  242.657201][ T7891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.753'.
[  243.661940][ T7907] loop1: detected capacity change from 0 to 2048
[  243.681524][ T7907] EXT4-fs: Ignoring removed bh option
[  245.204908][ T7907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.304049][   T27] audit: type=1800 audit(1751414743.743:11): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.758" name="file1" dev="loop1" ino=15 res=0 errno=0
[  246.024410][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'.
[  246.310573][ T7921] x_tables: duplicate underflow at hook 4
[  246.336926][ T7922] netlink: 64 bytes leftover after parsing attributes in process `syz.3.764'.
[  247.023589][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.981311][ T7940] x_tables: duplicate underflow at hook 4
[  248.193819][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'.
[  248.236765][ T7948] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  249.221416][ T7956] loop0: detected capacity change from 0 to 2048
[  249.526146][ T7956] EXT4-fs: Ignoring removed bh option
[  250.513733][ T7956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.586638][ T7960] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  250.655390][   T27] audit: type=1800 audit(1751414749.043:12): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.777" name="file1" dev="loop0" ino=15 res=0 errno=0
[  252.086833][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.960199][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'.
[  254.983510][ T8025] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  256.059910][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  256.066368][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  256.141025][ T8036] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  257.520643][ T8050] syzkaller0: entered allmulticast mode
[  257.529592][ T8060] Bluetooth: MGMT ver 1.22
[  261.661167][ T6394] dummy0 speed is unknown, defaulting to 1000
[  262.969178][ T8119] syzkaller0: entered allmulticast mode
[  263.019830][ T8116] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.036719][ T8116] bond0: (slave bond1): Enslaving as an active interface with an up link
[  265.088491][ T8147] dummy0 speed is unknown, defaulting to 1000
[  265.449917][ T8160] syzkaller0: entered allmulticast mode
[  265.949805][ T8171] Bluetooth: MGMT ver 1.22
[  268.054076][ T8154] netlink: 248 bytes leftover after parsing attributes in process `syz.3.846'.
[  268.555356][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'.
[  270.043793][ T8221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.875'.
[  271.757973][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.3.887'.
[  276.015091][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'.
[  276.054241][ T8319] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  281.781773][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[  281.818107][ T8427] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  283.463997][ T8458] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  283.689812][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'.
[  285.027978][ T8485] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  290.271780][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  290.395815][ T8611] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  292.800683][ T8671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1050'.
[  293.209379][ T8687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1056'.
[  293.372055][ T8690] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1060'.
[  293.792135][ T8706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1066'.
[  294.381036][ T8719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1071'.
[  295.033334][ T8745] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1083'.
[  295.746067][ T8770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1094'.
[  296.446079][ T8795] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1105'.
[  298.081236][ T8822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1116'.
[  299.671607][ T8859] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  301.311304][ T8893] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  303.231583][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  303.448414][ T8939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  306.932332][ T8997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1188'.
[  307.002342][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'.
[  307.037402][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'.
[  307.068865][ T8999] dummy0: entered promiscuous mode
[  307.082867][ T5773] dummy0 speed is unknown, defaulting to 1000
[  308.329323][ T9014] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.565956][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1198'.
[  311.289938][ T9054] syzkaller0: entered allmulticast mode
[  311.638768][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  311.650199][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  311.758868][ T9059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1210'.
[  316.056798][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  316.073040][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  316.093450][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[  316.239262][ T9094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1222'.
[  317.508447][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  317.516106][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  317.738577][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  317.812959][ T9114] Illegal XDP return value 4291338240 on prog  (id 306) dev N/A, expect packet loss!
[  317.918712][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1231'.
[  317.931943][ T9118] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  318.040229][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.051492][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.059569][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.073125][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.081111][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  318.088931][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.139923][ T9121] dummy0 speed is unknown, defaulting to 1000
[  319.369464][ T9121] chnl_net:caif_netlink_parms(): no params data found
[  319.703207][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  319.725900][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.733219][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.741499][ T9121] bridge_slave_0: entered allmulticast mode
[  319.749299][ T9121] bridge_slave_0: entered promiscuous mode
[  319.759571][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.766886][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.774253][ T9121] bridge_slave_1: entered allmulticast mode
[  319.782038][ T9121] bridge_slave_1: entered promiscuous mode
[  319.794706][ T9148] netlink: 'syz.1.1241': attribute type 30 has an invalid length.
[  319.865909][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.879264][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.917119][ T9152] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  319.986710][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'.
[  320.029076][ T9121] team0: Port device team_slave_0 added
[  320.055589][ T9121] team0: Port device team_slave_1 added
[  320.124040][   T50] Bluetooth: hci4: command tx timeout
[  320.162931][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.182835][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.209945][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.246457][ T9162] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  321.191101][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.226252][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.328311][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.480340][ T9121] hsr_slave_0: entered promiscuous mode
[  321.501714][ T9121] hsr_slave_1: entered promiscuous mode
[  321.515067][ T9121] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  321.522710][ T9121] Cannot create hsr debugfs directory
[  321.542376][ T9177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  321.667410][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  322.002336][ T9121] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.028454][ T9121] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.049829][ T9121] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.068357][ T9121] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  322.189733][ T9201] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  322.214765][   T50] Bluetooth: hci4: command tx timeout
[  322.293187][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.409847][ T9121] 8021q: adding VLAN 0 to HW filter on device team0
[  322.419929][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'.
[  322.440777][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.448036][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.526292][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.533510][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.999704][ T9228] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  323.099980][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.514954][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'.
[  323.773460][ T9121] veth0_vlan: entered promiscuous mode
[  323.799194][ T9121] veth1_vlan: entered promiscuous mode
[  323.898475][ T9121] veth0_macvtap: entered promiscuous mode
[  323.922779][ T9121] veth1_macvtap: entered promiscuous mode
[  323.963469][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.985551][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.003135][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.015693][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.031445][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.044807][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.061683][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.078108][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.090524][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.115886][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.127445][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.143899][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.175294][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.185996][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.199364][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.211103][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.221680][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.233304][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.269741][ T9121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.283646][ T9121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.296894][   T50] Bluetooth: hci4: command tx timeout
[  324.302572][ T9121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.315830][ T9121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.369592][ T9256] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  324.545682][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.574269][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.696915][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.714044][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.374375][   T50] Bluetooth: hci4: command tx timeout
[  326.499953][ T9287] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  326.628595][ T8912] bridge0: port 3(syz_tun) entered disabled state
[  326.740847][ T8912] syz_tun (unregistering): left allmulticast mode
[  326.761186][ T8912] syz_tun (unregistering): left promiscuous mode
[  326.783020][ T8912] bridge0: port 3(syz_tun) entered disabled state
[  326.841863][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'.
[  326.862403][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'.
[  327.099347][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.256862][ T9311] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  327.326061][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.465640][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.546084][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.574488][ T9322] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1308'.
[  328.454233][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1318'.
[  329.305133][ T9368] netlink: 'syz.2.1328': attribute type 3 has an invalid length.
[  329.313124][ T9368] netlink: 'syz.2.1328': attribute type 1 has an invalid length.
[  329.321320][ T9368] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1328'.
[  329.424133][ T9370] IPv6: Can't replace route, no match found
[  329.481895][ T9372] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1329'.
[  329.558907][ T9374] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  329.719757][   T48] hsr_slave_0: left promiscuous mode
[  329.730953][   T48] hsr_slave_1: left promiscuous mode
[  329.739769][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.749518][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.761851][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.769765][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.778609][   T48] bridge_slave_1: left allmulticast mode
[  329.785201][   T48] bridge_slave_1: left promiscuous mode
[  329.792459][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.806904][   T48] bridge_slave_0: left allmulticast mode
[  329.819843][   T48] bridge_slave_0: left promiscuous mode
[  329.827280][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.923467][   T48] veth1_macvtap: left promiscuous mode
[  329.941112][   T48] veth0_macvtap: left promiscuous mode
[  329.950833][   T48] veth1_vlan: left promiscuous mode
[  329.964760][   T48] veth0_vlan: left promiscuous mode
[  331.704530][   T48] team_slave_1 (unregistering): left promiscuous mode
[  331.718287][   T48] team0 (unregistering): Port device team_slave_1 removed
[  331.777798][   T48] team_slave_0 (unregistering): left promiscuous mode
[  331.799087][   T48] team0 (unregistering): Port device team_slave_0 removed
[  331.864999][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.938950][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.833704][   T48] bond0 (unregistering): Released all slaves
[  333.422158][ T9424] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1349'.
[  333.482858][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'.
[  334.449910][ T9448] dummy0 speed is unknown, defaulting to 1000
[  334.665272][ T9461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  334.988176][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'.
[  334.997383][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  335.339578][ T9484] syzkaller0: entered allmulticast mode
[  335.739189][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'.
[  335.753997][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'.
[  338.070206][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'.
[  338.110191][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'.
[  338.370292][ T9525] dummy0 speed is unknown, defaulting to 1000
[  338.377885][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'.
[  338.401009][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'.
[  339.519238][ T9539] netlink: 'syz.2.1397': attribute type 10 has an invalid length.
[  339.559737][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1397'.
[  339.615272][ T9539] batadv0: entered promiscuous mode
[  339.642435][ T9539] bridge0: port 4(batadv0) entered blocking state
[  339.678601][ T9539] bridge0: port 4(batadv0) entered disabled state
[  339.716091][ T9539] batadv0: entered allmulticast mode
[  339.755140][ T9539] bridge0: port 4(batadv0) entered blocking state
[  339.761890][ T9539] bridge0: port 4(batadv0) entered forwarding state
[  340.059879][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  340.149079][ T1125] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  340.153573][ T9545] syzkaller0: entered allmulticast mode
[  340.158929][ T1125] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  340.428050][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'.
[  340.439417][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'.
[  343.912661][ T9575] netlink: 'syz.4.1412': attribute type 10 has an invalid length.
[  343.927933][ T9575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1412'.
[  343.940681][ T9575] batadv0: entered promiscuous mode
[  343.949923][ T9575] bridge0: port 3(batadv0) entered blocking state
[  343.958026][ T9575] bridge0: port 3(batadv0) entered disabled state
[  343.976286][ T9575] batadv0: entered allmulticast mode
[  343.985114][ T9575] bridge0: port 3(batadv0) entered blocking state
[  343.991706][ T9575] bridge0: port 3(batadv0) entered forwarding state
[  344.394299][   T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  344.403579][   T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  344.451950][ T9588] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  344.905139][ T9592] loop2: detected capacity change from 0 to 4096
[  345.175759][ T9596] syzkaller0: entered allmulticast mode
[  346.018096][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  346.026988][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  348.880923][ T9604] netlink: 'syz.2.1423': attribute type 10 has an invalid length.
[  348.889940][ T9604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1423'.
[  349.466423][ T9633] loop2: detected capacity change from 0 to 8
[  349.673774][ T9635] loop4: detected capacity change from 0 to 128
[  349.726146][ T9635] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  349.782741][ T9635] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  350.220130][ T9642] netlink: 'syz.2.1439': attribute type 10 has an invalid length.
[  350.246896][ T9642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'.
[  350.670722][ T9637] loop4: detected capacity change from 0 to 32768
[  350.677821][ T9650] syzkaller0: entered allmulticast mode
[  350.700197][ T9637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1437 (9637)
[  350.754294][ T9637] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.787230][ T9637] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  350.824156][ T9637] BTRFS info (device loop4): metadata ratio 2
[  350.831322][ T9637] BTRFS info (device loop4): allowing degraded mounts
[  350.848658][ T9637] BTRFS info (device loop4): turning off barriers
[  350.863946][ T9637] BTRFS info (device loop4): metadata ratio 3
[  350.874390][ T9637] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  350.903892][ T9637] BTRFS info (device loop4): use zstd compression, level 3
[  350.915012][ T9637] BTRFS info (device loop4): force clearing of disk cache
[  350.930897][ T9637] BTRFS info (device loop4): max_inline at 0
[  350.938272][ T9637] BTRFS info (device loop4): using free space tree
[  351.508052][ T9637] BTRFS info (device loop4): enabling ssd optimizations
[  351.554498][ T9637] BTRFS info (device loop4): auto enabling async discard
[  351.604937][ T9637] BTRFS info (device loop4): rebuilding free space tree
[  352.146621][   T27] audit: type=1800 audit(1751414850.643:13): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1437" name="file1" dev="loop4" ino=260 res=0 errno=0
[  353.283760][ T9672] loop1: detected capacity change from 0 to 40427
[  353.284837][ T9121] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.343502][ T9672] F2FS-fs (loop1): invalid crc value
[  353.392795][ T9672] F2FS-fs (loop1): Found nat_bits in checkpoint
[  353.398024][ T9680] Bluetooth: hci0: load_link_keys: too big key_count value 43047
[  353.554939][ T9672] F2FS-fs (loop1): Start checkpoint disabled!
[  353.638767][ T9672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  354.139898][ T6140] kworker/u4:10: attempt to access beyond end of device
[  354.139898][ T6140] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  354.185389][ T6140] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  354.202971][ T6140] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  355.702735][ T9703] input: syz0 as /devices/virtual/input/input5
[  355.956683][ T9708] loop0: detected capacity change from 0 to 512
[  356.078943][ T9708] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1458: casefold flag without casefold feature
[  356.139276][ T9708] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1458: couldn't read orphan inode 15 (err -117)
[  356.176716][ T9708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.450221][ T9713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1459'.
[  356.954326][ T9718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.421312][ T9709] loop2: detected capacity change from 0 to 32768
[  357.436135][ T9709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1457 (9709)
[  357.469321][ T9709] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.485278][ T9709] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  357.494571][ T9709] BTRFS info (device loop2): metadata ratio 2
[  357.500916][ T9709] BTRFS info (device loop2): allowing degraded mounts
[  357.508510][ T9709] BTRFS info (device loop2): turning off barriers
[  357.517610][ T9709] BTRFS info (device loop2): metadata ratio 3
[  357.524666][ T9709] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  357.534334][ T9709] BTRFS info (device loop2): use zstd compression, level 3
[  357.541709][ T9709] BTRFS info (device loop2): force clearing of disk cache
[  357.557031][ T9709] BTRFS info (device loop2): max_inline at 0
[  357.571693][ T9709] BTRFS info (device loop2): using free space tree
[  357.667104][ T9709] BTRFS info (device loop2): enabling ssd optimizations
[  357.686309][ T9709] BTRFS info (device loop2): auto enabling async discard
[  357.702821][ T9709] BTRFS info (device loop2): rebuilding free space tree
[  357.807068][ T9742] loop1: detected capacity change from 0 to 65
[  357.822208][   T27] audit: type=1800 audit(1751414856.313:14): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1457" name="file1" dev="loop2" ino=260 res=0 errno=0
[  357.896664][ T9742] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  357.998413][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  358.090946][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.730859][ T9747] syzkaller0: entered allmulticast mode
[  358.928570][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  359.077062][ T5785] Bluetooth: Wrong link type (-57)
[  359.489738][ T9765] loop2: detected capacity change from 0 to 4096
[  359.736102][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  359.747769][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  359.756746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  359.765828][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  362.016520][ T9776] loop0: detected capacity change from 0 to 4096
[  362.043548][ T9776] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  362.244934][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  362.318782][ T9787] netlink: 'syz.0.1479': attribute type 10 has an invalid length.
[  362.326938][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'.
[  362.336215][ T9787] batadv0: entered promiscuous mode
[  362.342077][ T9787] bridge0: port 2(batadv0) entered blocking state
[  362.348967][ T9787] bridge0: port 2(batadv0) entered disabled state
[  362.355845][ T9787] batadv0: entered allmulticast mode
[  362.364808][ T9787] bridge0: port 2(batadv0) entered blocking state
[  362.371453][ T9787] bridge0: port 2(batadv0) entered forwarding state
[  362.430791][ T9786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1481'.
[  362.474206][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  362.489485][ T5815] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  362.506850][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  362.662530][ T9792] loop0: detected capacity change from 0 to 2048
[  362.709092][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  362.718004][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  362.743447][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  362.772853][ T9792] Alternate GPT is invalid, using primary GPT.
[  362.780080][ T9792]  loop0: p1 p2 p3
[  362.842436][   T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  362.852100][   T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  363.285737][ T5815] usb 3-1: Product: syz
[  363.290102][ T5815] usb 3-1: Manufacturer: syz
[  363.534220][ T5815] usb 3-1: SerialNumber: syz
[  363.556344][ T5815] usb 3-1: config 0 descriptor??
[  363.633439][ T9783] loop1: detected capacity change from 0 to 32768
[  363.643248][ T9783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1480 (9783)
[  363.671412][ T9783] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  363.695820][ T9783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  363.717197][ T9783] BTRFS info (device loop1): metadata ratio 2
[  363.723429][ T9783] BTRFS info (device loop1): allowing degraded mounts
[  363.760918][ T9783] BTRFS info (device loop1): turning off barriers
[  363.795089][ T9783] BTRFS info (device loop1): metadata ratio 3
[  363.813937][ T9783] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  363.823399][ T9783] BTRFS info (device loop1): use zstd compression, level 3
[  363.861827][ T9783] BTRFS info (device loop1): force clearing of disk cache
[  363.891463][ T9783] BTRFS info (device loop1): max_inline at 0
[  363.916891][   T23] usb 3-1: USB disconnect, device number 2
[  363.938483][ T9783] BTRFS info (device loop1): using free space tree
[  363.962531][ T9803] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  364.047578][ T9783] BTRFS info (device loop1): enabling ssd optimizations
[  364.059911][ T9783] BTRFS info (device loop1): auto enabling async discard
[  364.071136][ T9783] BTRFS info (device loop1): rebuilding free space tree
[  364.130446][ T9799] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.142782][ T9799] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  364.167026][ T9799] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.173559][ T9799] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  364.199387][ T9799] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  364.218356][ T9799] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  364.234095][ T9799] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  364.243665][   T27] audit: type=1800 audit(1751414862.733:15): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1480" name="file1" dev="loop1" ino=260 res=0 errno=0
[  364.420026][ T9799] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  365.154515][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  365.799955][ T9828] loop2: detected capacity change from 0 to 32768
[  365.817136][ T9828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1489 (9828)
[  365.839354][ T9828] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  365.853142][ T9828] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  365.868653][ T9828] BTRFS info (device loop2): using free space tree
[  365.878277][ T9836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1491'.
[  365.960633][ T9828] BTRFS info (device loop2): enabling ssd optimizations
[  365.969933][ T9828] BTRFS info (device loop2): auto enabling async discard
[  366.017549][ T9832] loop4: detected capacity change from 0 to 32768
[  366.078460][ T9832] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1492 (9832)
[  366.133995][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  366.204568][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  366.210800][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  366.283941][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  366.301655][ T9862] loop0: detected capacity change from 0 to 65
[  366.311065][ T9862] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  366.577623][ T9864] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0
[  366.987880][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.787815][ T9868] loop0: detected capacity change from 0 to 32768
[  367.828097][ T9868] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  367.851029][ T9882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1506'.
[  367.971652][ T9868] XFS (loop0): Ending clean mount
[  367.996182][ T9868] XFS (loop0): Quotacheck needed: Please wait.
[  368.030072][ T9885] loop1: detected capacity change from 0 to 32768
[  368.049353][ T9885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1508 (9885)
[  368.072702][ T9868] XFS (loop0): Quotacheck: Done.
[  368.077992][ T9885] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.090287][ T9885] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  368.100394][ T9885] BTRFS info (device loop1): using free space tree
[  368.154364][ T9885] BTRFS info (device loop1): enabling ssd optimizations
[  368.161406][ T9885] BTRFS info (device loop1): auto enabling async discard
[  368.284248][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  368.364037][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  368.523051][ T9886] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  368.623293][ T9886] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  368.677877][ T9918] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0
[  368.721489][ T9886] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.839177][ T9886] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  368.903623][ T9920] loop4: detected capacity change from 0 to 65
[  368.946412][ T9920] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  369.160942][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  369.341561][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  369.466457][ T9927] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  369.805764][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  369.932393][ T9934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1517'.
[  369.976966][ T9947] loop1: detected capacity change from 0 to 65
[  369.987208][ T9947] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  370.378730][ T9963] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  370.591329][ T9969] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1528'.
[  370.684170][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  370.706067][ T9942] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  370.712336][ T9942] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  370.718806][ T9942] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  370.730495][ T9942] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  370.902906][ T9982] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  371.014188][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  371.131546][ T9988] loop0: detected capacity change from 0 to 4096
[  371.181111][ T9988] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  371.214034][   T23] usb 2-1: Using ep0 maxpacket: 16
[  371.228447][   T23] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  371.248301][   T23] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  371.265987][   T23] usb 2-1: Product: syz
[  371.277627][   T23] usb 2-1: Manufacturer: syz
[  371.282452][   T23] usb 2-1: SerialNumber: syz
[  371.287633][ T9988] overlayfs: upper fs does not support tmpfile.
[  371.289941][   T23] usb 2-1: config 0 descriptor??
[  371.316866][ T9992] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1538'.
[  371.322989][ T9988] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  371.532452][ T1125] ntfs3: loop0: ino=9, ntfs3_write_inode failed, -22.
[  371.559167][ T5770] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22.
[  371.636707][ T5773] usb 2-1: USB disconnect, device number 2
[  371.701351][ T5770] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22.
[  371.965035][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  372.085975][T10012] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  372.623134][T10021] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  372.644688][T10021] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  372.665742][T10021] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  372.693413][T10021] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  372.760888][T10035] loop2: detected capacity change from 0 to 512
[  372.784241][T10035] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1553: casefold flag without casefold feature
[  372.804021][T10035] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1553: couldn't read orphan inode 15 (err -117)
[  372.820912][T10035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.665563][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  374.684108][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  374.690475][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  374.764356][ T5785] Bluetooth: hci4: command 0x0c1a tx timeout
[  374.853198][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.591719][T10072] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  375.851413][T10077] loop1: detected capacity change from 0 to 65
[  375.878558][T10077] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  376.255260][T10084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1567'.
[  376.368967][T10074] loop0: detected capacity change from 0 to 32768
[  376.396586][T10074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1565 (10074)
[  376.431811][T10074] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  376.454986][T10074] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  376.468343][T10074] BTRFS info (device loop0): using free space tree
[  376.527809][T10074] BTRFS info (device loop0): enabling ssd optimizations
[  376.552178][T10074] BTRFS info (device loop0): auto enabling async discard
[  376.707101][T10111] loop4: detected capacity change from 0 to 2048
[  376.763559][T10111] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  376.794098][T10111] UDF-fs: Scanning with blocksize 512 failed
[  376.820061][T10111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.844206][ T5785] Bluetooth: hci4: command 0x0c1a tx timeout
[  377.309282][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  378.320372][T10131] loop0: detected capacity change from 0 to 65
[  378.330296][T10131] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  378.934588][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  378.941392][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  379.628307][T10144] loop2: detected capacity change from 0 to 32768
[  379.683344][T10144] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1585 (10144)
[  379.736745][T10144] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  379.787008][T10144] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  379.819206][T10144] BTRFS info (device loop2): using free space tree
[  379.957769][T10144] BTRFS info (device loop2): enabling ssd optimizations
[  380.006087][T10144] BTRFS info (device loop2): auto enabling async discard
[  380.663072][T10185] loop1: detected capacity change from 0 to 32768
[  380.728885][T10185] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1596 (10185)
[  380.952003][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  382.685605][T10223] loop2: detected capacity change from 0 to 512
[  382.753759][T10223] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1606: casefold flag without casefold feature
[  382.812561][T10223] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1606: couldn't read orphan inode 15 (err -117)
[  382.858961][T10223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.845718][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.004262][T10249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1616'.
[  384.180009][T10260] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  384.617083][T10263] loop4: detected capacity change from 0 to 32768
[  384.628121][T10263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1622 (10263)
[  384.654771][T10263] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.668651][T10263] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  384.679005][T10263] BTRFS info (device loop4): using free space tree
[  384.689386][T10260] loop0: detected capacity change from 0 to 32768
[  384.710747][T10260] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  384.751812][T10263] BTRFS info (device loop4): enabling ssd optimizations
[  384.760740][T10263] BTRFS info (device loop4): auto enabling async discard
[  384.841834][T10288] loop2: detected capacity change from 0 to 8
[  384.951342][T10260] XFS (loop0): Ending clean mount
[  385.045143][T10288] SQUASHFS error: xz decompression failed, data probably corrupt
[  385.053554][T10288] SQUASHFS error: Failed to read block 0xa8: -5
[  385.066334][T10288] SQUASHFS error: xz decompression failed, data probably corrupt
[  385.074321][T10288] SQUASHFS error: Failed to read block 0xa8: -5
[  385.081086][   T27] audit: type=1800 audit(1751414883.573:16): pid=10288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1623" name="file0" dev="loop2" ino=3 res=0 errno=0
[  385.523857][T10288] ufs: You didn't specify the type of your ufs filesystem
[  385.523857][T10288] 
[  385.523857][T10288] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  385.523857][T10288] 
[  385.523857][T10288] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  385.556532][T10288] syz.2.1623: attempt to access beyond end of device
[  385.556532][T10288] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[  385.598276][   T27] audit: type=1800 audit(1751414884.093:17): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1621" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  385.829044][T10291] loop1: detected capacity change from 0 to 32768
[  385.869469][ T9121] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.907654][T10291] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  385.995060][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'.
[  386.616665][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[  387.329022][T10298] syz.0.1621 (10298) used greatest stack depth: 20552 bytes left
[  387.410765][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.450759][T10317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1631'.
[  387.785565][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'.
[  387.803954][ T5773] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  387.991713][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  388.003629][ T5773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  388.015849][ T5773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202
[  388.027653][ T5773] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  388.036999][ T5773] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  388.046085][ T5773] usb 5-1: Manufacturer: syz
[  388.079564][ T5773] usb 5-1: config 0 descriptor??
[  388.086005][T10323] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.129266][ T5773] smsusb:smsusb_probe: board id=9, interface number 0
[  388.165862][ T5773] smsusb:siano_media_device_register: media controller created
[  388.187579][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.195386][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.202759][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.210130][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.217572][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.228743][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.236083][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.243390][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.250695][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.258000][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.266015][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.273374][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.280704][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.288032][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.295352][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.304028][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.311368][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.318855][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.326157][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.333476][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.342496][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.349826][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.357164][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.364518][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.372335][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.379696][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.387020][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.394336][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.401659][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.409455][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.416774][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.424034][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.431286][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.438536][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.446180][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.453506][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.460805][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.468103][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.475434][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.483484][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.491300][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.499097][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.506539][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.513889][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.521915][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.529279][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.536631][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.543980][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.551339][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.559038][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.566371][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.573693][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.580982][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.588242][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.595816][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.603138][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.610475][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.617807][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.625129][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.633425][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.640778][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.648108][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.655433][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.662769][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.670475][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.677858][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.685309][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.692678][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.699989][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.707647][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.715003][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.722369][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.729894][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.737244][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.744722][ T5773] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  388.753060][ T5773] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  388.761059][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.768420][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.775814][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.783080][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.790341][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.797607][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.804864][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.812444][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.819790][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.827110][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.834438][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.841744][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.849303][ T5773] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  388.857611][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.857718][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.857809][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.857900][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.857990][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.858082][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.858174][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.858266][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.858362][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.858452][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.932218][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.939573][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.946913][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.956541][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.964575][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.971919][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.979245][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.987052][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  388.994746][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.002102][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.009450][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.016784][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.024458][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.031810][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.039152][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.046487][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.053829][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.061175][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.068625][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.075957][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.083878][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.091233][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.098797][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.106126][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.113445][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.120768][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.128176][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.135838][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.144116][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.152444][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.159782][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.167108][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.174435][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.181756][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.189089][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.196506][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.203781][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.211058][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.222394][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.229752][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.237563][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.244892][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.252201][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.259518][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.266825][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.274131][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.281452][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.289771][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.297118][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.304433][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.311751][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.319177][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.326500][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.333821][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.341137][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.349212][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.356534][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.363934][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.371263][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.378588][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.385886][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.393143][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.400397][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.407661][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.415345][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.423025][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.430356][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.437679][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.444977][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.452297][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.459615][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.465302][T10351] loop4: detected capacity change from 0 to 65
[  389.466900][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.480883][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.488949][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.496289][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.503609][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.510929][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.518613][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.519025][T10351] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  389.526163][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.526226][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.553643][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.561226][ T5773] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  389.569400][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569504][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569597][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569689][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569780][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569870][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.569959][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.570065][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.594513][T10348] syzkaller0: entered allmulticast mode
[  389.600588][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.641793][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.649165][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.656430][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.663686][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.670990][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.678936][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.686285][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.693609][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.700932][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.708257][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.715587][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.722912][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.730736][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.738073][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.745396][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.752726][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.760060][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.767393][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.775199][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.782553][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.789951][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.797278][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.804587][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.811893][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.819211][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.826515][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.834255][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.841610][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.848939][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.856282][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.863622][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.870938][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.878266][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.885864][ T5773] ------------[ cut here ]------------
[  389.891378][ T5773] WARNING: CPU: 0 PID: 5773 at kernel/workqueue.c:668 __cancel_work_timer+0x4e2/0x520
[  389.901740][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.901862][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.901964][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.902072][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.902171][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.902270][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.902367][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.902462][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  389.961920][ T5773] Modules linked in:
[  389.966006][ T5773] CPU: 0 PID: 5773 Comm: kworker/0:3 Not tainted 6.6.95-syzkaller #0
[  389.974472][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  389.986037][ T5773] Workqueue: usb_hub_wq hub_event
[  389.991143][ T5773] RIP: 0010:__cancel_work_timer+0x4e2/0x520
[  389.997167][ T5773] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 39 f4 2e 00 0f 0b e9 ed fd ff ff e8 2d f4 2e 00 e8 b8 c5 0f 09 e9 8e fe ff ff e8 1e f4 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 97 c4 0f
[  390.017095][ T5773] RSP: 0000:ffffc9000447eb40 EFLAGS: 00010287
[  390.023227][ T5773] RAX: ffffffff8156a242 RBX: ffff88802fb3a0e8 RCX: 0000000000100000
[  390.031324][ T5773] RDX: ffffc90016ba9000 RSI: 0000000000072276 RDI: 0000000000072277
[  390.039422][ T5773] RBP: ffffc9000447ec58 R08: ffff88802fb3a0ef R09: 1ffff11005f6741d
[  390.047523][ T5773] R10: dffffc0000000000 R11: ffffed1005f6741e R12: 0000000000000000
[  390.055925][ T5773] R13: dffffc0000000000 R14: 1ffff11005f6741d R15: 0000000000000000
[  390.064073][ T5773] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  390.073073][ T5773] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.079773][ T5773] CR2: 00007f88a71cff98 CR3: 000000000cb30000 CR4: 00000000003506f0
[  390.087876][ T5773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  390.095955][ T5773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  390.104111][ T5773] Call Trace:
[  390.107437][ T5773]  <TASK>
[  390.110428][ T5773]  ? cancel_work_sync+0x20/0x20
[  390.115410][ T5773]  ? usb_unlink_urb+0xa0/0xa0
[  390.120155][ T5773]  ? _printk+0xd0/0x110
[  390.124559][ T5773]  ? load_image+0x3b0/0x3b0
[  390.129126][ T5773]  smsusb_term_device+0xcb/0x220
[  390.134210][ T5773]  smsusb_probe+0x1708/0x1da0
[  390.138954][ T5773]  ? s2255_print_cfg+0x1b0/0x1b0
[  390.144001][ T5773]  ? smsusb1_detectmode+0x260/0x260
[  390.149298][ T5773]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  390.155602][ T5773]  ? pm_runtime_enable+0x192/0x2a0
[  390.160783][ T5773]  ? __pm_runtime_set_status+0x8ab/0xb80
[  390.166636][ T5773]  usb_probe_interface+0x5a4/0xb00
[  390.171903][ T5773]  ? usb_register_driver+0x3d0/0x3d0
[  390.177311][ T5773]  really_probe+0x25b/0xb40
[  390.181894][ T5773]  ? pm_runtime_barrier+0x14b/0x1c0
[  390.187217][ T5773]  __driver_probe_device+0x18c/0x330
[  390.192565][ T5773]  driver_probe_device+0x4f/0x420
[  390.197708][ T5773]  __device_attach_driver+0x2ca/0x520
[  390.203229][ T5773]  bus_for_each_drv+0x24b/0x2d0
[  390.208220][ T5773]  ? coredump_store+0x90/0x90
[  390.212946][ T5773]  ? bus_find_device+0x320/0x320
[  390.218005][ T5773]  __device_attach+0x2b5/0x400
[  390.222833][ T5773]  ? device_attach+0x20/0x20
[  390.227529][ T5773]  ? __kmem_cache_free+0xba/0x1f0
[  390.232612][ T5773]  ? do_raw_spin_unlock+0x121/0x230
[  390.237936][ T5773]  bus_probe_device+0x180/0x260
[  390.242853][ T5773]  device_add+0x85b/0xc20
[  390.247311][ T5773]  usb_set_configuration+0x1a79/0x20c0
[  390.253138][ T5773]  usb_generic_driver_probe+0x8d/0x150
[  390.259132][ T5773]  usb_probe_device+0x13d/0x280
[  390.264162][ T5773]  ? usb_register_device_driver+0x230/0x230
[  390.270116][ T5773]  really_probe+0x25b/0xb40
[  390.274743][ T5773]  ? pm_runtime_barrier+0x14b/0x1c0
[  390.280020][ T5773]  __driver_probe_device+0x18c/0x330
[  390.285407][ T5773]  driver_probe_device+0x4f/0x420
[  390.290501][ T5773]  __device_attach_driver+0x2ca/0x520
[  390.295977][ T5773]  bus_for_each_drv+0x24b/0x2d0
[  390.300979][ T5773]  ? coredump_store+0x90/0x90
[  390.305798][ T5773]  ? bus_find_device+0x320/0x320
[  390.310812][ T5773]  __device_attach+0x2b5/0x400
[  390.315702][ T5773]  ? device_attach+0x20/0x20
[  390.320360][ T5773]  ? __kmem_cache_free+0xba/0x1f0
[  390.325515][ T5773]  ? do_raw_spin_unlock+0x121/0x230
[  390.330901][ T5773]  bus_probe_device+0x180/0x260
[  390.335863][ T5773]  device_add+0x85b/0xc20
[  390.340279][ T5773]  usb_new_device+0xa31/0x1630
[  390.345292][ T5773]  ? usb_disconnect+0x8a0/0x8a0
[  390.350205][ T5773]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.355520][ T5773]  ? lockdep_hardirqs_on+0x98/0x150
[  390.361087][ T5773]  hub_event+0x2957/0x49c0
[  390.365901][ T5773]  ? led_work+0x720/0x720
[  390.370302][ T5773]  ? read_lock_is_recursive+0x20/0x20
[  390.375850][ T5773]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.381129][ T5773]  ? process_scheduled_works+0x957/0x15b0
[  390.387007][ T5773]  ? process_scheduled_works+0x957/0x15b0
[  390.392788][ T5773]  process_scheduled_works+0xa45/0x15b0
[  390.398512][ T5773]  ? assign_work+0x400/0x400
[  390.403175][ T5773]  ? assign_work+0x39e/0x400
[  390.407859][ T5773]  worker_thread+0xa55/0xfc0
[  390.412543][ T5773]  kthread+0x2fa/0x390
[  390.416691][ T5773]  ? pr_cont_work+0x560/0x560
[  390.421391][ T5773]  ? kthread_blkcg+0xd0/0xd0
[  390.426059][ T5773]  ret_from_fork+0x48/0x80
[  390.430513][ T5773]  ? kthread_blkcg+0xd0/0xd0
[  390.435203][ T5773]  ret_from_fork_asm+0x11/0x20
[  390.440045][ T5773]  </TASK>
[  390.443076][ T5773] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  390.450389][ T5773] CPU: 0 PID: 5773 Comm: kworker/0:3 Not tainted 6.6.95-syzkaller #0
[  390.458471][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  390.468569][ T5773] Workqueue: usb_hub_wq hub_event
[  390.473627][ T5773] Call Trace:
[  390.476922][ T5773]  <TASK>
[  390.479873][ T5773]  dump_stack_lvl+0x16c/0x230
[  390.484580][ T5773]  ? show_regs_print_info+0x20/0x20
[  390.489799][ T5773]  ? load_image+0x3b0/0x3b0
[  390.494336][ T5773]  panic+0x2c0/0x710
[  390.498253][ T5773]  ? bpf_jit_dump+0xd0/0xd0
[  390.502778][ T5773]  ? ret_from_fork_asm+0x11/0x20
[  390.507737][ T5773]  __warn+0x2e0/0x470
[  390.511731][ T5773]  ? __cancel_work_timer+0x4e2/0x520
[  390.517036][ T5773]  ? __cancel_work_timer+0x4e2/0x520
[  390.522447][ T5773]  report_bug+0x2be/0x4f0
[  390.526820][ T5773]  ? __cancel_work_timer+0x4e2/0x520
[  390.532130][ T5773]  ? __cancel_work_timer+0x4e2/0x520
[  390.537437][ T5773]  ? __cancel_work_timer+0x4e4/0x520
[  390.542741][ T5773]  handle_bug+0xcf/0x120
[  390.547011][ T5773]  exc_invalid_op+0x1a/0x50
[  390.551535][ T5773]  asm_exc_invalid_op+0x1a/0x20
[  390.556415][ T5773] RIP: 0010:__cancel_work_timer+0x4e2/0x520
[  390.562323][ T5773] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 39 f4 2e 00 0f 0b e9 ed fd ff ff e8 2d f4 2e 00 e8 b8 c5 0f 09 e9 8e fe ff ff e8 1e f4 2e 00 <0f> 0b 43 80 3c 2e 00 0f 85 04 ff ff ff e9 07 ff ff ff e8 97 c4 0f
[  390.581954][ T5773] RSP: 0000:ffffc9000447eb40 EFLAGS: 00010287
[  390.588037][ T5773] RAX: ffffffff8156a242 RBX: ffff88802fb3a0e8 RCX: 0000000000100000
[  390.596020][ T5773] RDX: ffffc90016ba9000 RSI: 0000000000072276 RDI: 0000000000072277
[  390.604031][ T5773] RBP: ffffc9000447ec58 R08: ffff88802fb3a0ef R09: 1ffff11005f6741d
[  390.612018][ T5773] R10: dffffc0000000000 R11: ffffed1005f6741e R12: 0000000000000000
[  390.620006][ T5773] R13: dffffc0000000000 R14: 1ffff11005f6741d R15: 0000000000000000
[  390.627998][ T5773]  ? __cancel_work_timer+0x4e2/0x520
[  390.633337][ T5773]  ? cancel_work_sync+0x20/0x20
[  390.638226][ T5773]  ? usb_unlink_urb+0xa0/0xa0
[  390.642940][ T5773]  ? _printk+0xd0/0x110
[  390.647125][ T5773]  ? load_image+0x3b0/0x3b0
[  390.651658][ T5773]  smsusb_term_device+0xcb/0x220
[  390.656632][ T5773]  smsusb_probe+0x1708/0x1da0
[  390.661345][ T5773]  ? s2255_print_cfg+0x1b0/0x1b0
[  390.666319][ T5773]  ? smsusb1_detectmode+0x260/0x260
[  390.671572][ T5773]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  390.677523][ T5773]  ? pm_runtime_enable+0x192/0x2a0
[  390.682668][ T5773]  ? __pm_runtime_set_status+0x8ab/0xb80
[  390.688336][ T5773]  usb_probe_interface+0x5a4/0xb00
[  390.693563][ T5773]  ? usb_register_driver+0x3d0/0x3d0
[  390.698860][ T5773]  really_probe+0x25b/0xb40
[  390.703389][ T5773]  ? pm_runtime_barrier+0x14b/0x1c0
[  390.708606][ T5773]  __driver_probe_device+0x18c/0x330
[  390.713915][ T5773]  driver_probe_device+0x4f/0x420
[  390.718965][ T5773]  __device_attach_driver+0x2ca/0x520
[  390.724362][ T5773]  bus_for_each_drv+0x24b/0x2d0
[  390.729234][ T5773]  ? coredump_store+0x90/0x90
[  390.733928][ T5773]  ? bus_find_device+0x320/0x320
[  390.738895][ T5773]  __device_attach+0x2b5/0x400
[  390.743685][ T5773]  ? device_attach+0x20/0x20
[  390.748292][ T5773]  ? __kmem_cache_free+0xba/0x1f0
[  390.753335][ T5773]  ? do_raw_spin_unlock+0x121/0x230
[  390.758555][ T5773]  bus_probe_device+0x180/0x260
[  390.763425][ T5773]  device_add+0x85b/0xc20
[  390.767789][ T5773]  usb_set_configuration+0x1a79/0x20c0
[  390.773306][ T5773]  usb_generic_driver_probe+0x8d/0x150
[  390.778818][ T5773]  usb_probe_device+0x13d/0x280
[  390.783695][ T5773]  ? usb_register_device_driver+0x230/0x230
[  390.789610][ T5773]  really_probe+0x25b/0xb40
[  390.794140][ T5773]  ? pm_runtime_barrier+0x14b/0x1c0
[  390.799378][ T5773]  __driver_probe_device+0x18c/0x330
[  390.804710][ T5773]  driver_probe_device+0x4f/0x420
[  390.809796][ T5773]  __device_attach_driver+0x2ca/0x520
[  390.815200][ T5773]  bus_for_each_drv+0x24b/0x2d0
[  390.820085][ T5773]  ? coredump_store+0x90/0x90
[  390.824785][ T5773]  ? bus_find_device+0x320/0x320
[  390.829753][ T5773]  __device_attach+0x2b5/0x400
[  390.834543][ T5773]  ? device_attach+0x20/0x20
[  390.839152][ T5773]  ? __kmem_cache_free+0xba/0x1f0
[  390.844196][ T5773]  ? do_raw_spin_unlock+0x121/0x230
[  390.849430][ T5773]  bus_probe_device+0x180/0x260
[  390.854300][ T5773]  device_add+0x85b/0xc20
[  390.858668][ T5773]  usb_new_device+0xa31/0x1630
[  390.863488][ T5773]  ? usb_disconnect+0x8a0/0x8a0
[  390.868374][ T5773]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.873609][ T5773]  ? lockdep_hardirqs_on+0x98/0x150
[  390.878832][ T5773]  hub_event+0x2957/0x49c0
[  390.883349][ T5773]  ? led_work+0x720/0x720
[  390.887720][ T5773]  ? read_lock_is_recursive+0x20/0x20
[  390.893132][ T5773]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.898363][ T5773]  ? process_scheduled_works+0x957/0x15b0
[  390.904216][ T5773]  ? process_scheduled_works+0x957/0x15b0
[  390.909957][ T5773]  process_scheduled_works+0xa45/0x15b0
[  390.915547][ T5773]  ? assign_work+0x400/0x400
[  390.920165][ T5773]  ? assign_work+0x39e/0x400
[  390.924778][ T5773]  worker_thread+0xa55/0xfc0
[  390.929411][ T5773]  kthread+0x2fa/0x390
[  390.933497][ T5773]  ? pr_cont_work+0x560/0x560
[  390.938195][ T5773]  ? kthread_blkcg+0xd0/0xd0
[  390.942804][ T5773]  ret_from_fork+0x48/0x80
[  390.947329][ T5773]  ? kthread_blkcg+0xd0/0xd0
[  390.951954][ T5773]  ret_from_fork_asm+0x11/0x20
[  390.956782][ T5773]  </TASK>
[  390.960096][ T5773] Kernel Offset: disabled
[  390.964566][ T5773] Rebooting in 86400 seconds..