last executing test programs:

17m26.261129701s ago: executing program 1 (id=12):
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)

17m26.134589863s ago: executing program 1 (id=14):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@getlink={0x94, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x30108, 0x4}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_MTU={0x8, 0x4, 0x10}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r7, @ANYBLOB="080002"], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f00000001c0)={0xa, @raw_data="03091f682f97de8bf5de030965f3875767f6ee1404a33062ef3b061315c1e8c446b6b654ff4030c94e863998744c7ea75f41f156a5b848a438d260cc5d3fe6e8d5c8a7db0606db4622d5a25539914d0044688f2c8b135fd24379c4030e0865b28051ae97cd50558df9576ea4ccf3ba99d7107c326ce69d970fb8de907062fe6a8bbc6e95ac17de68efdd0a073fdebc2c632da243bf9362276110a73e4691993f66c89bdfd9497cb6ffa3e4da02a996b925a0833793956236772e5b735381397be1872481d8bf763a"})

17m23.097871677s ago: executing program 1 (id=16):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xc2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0xa0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x4, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xb, 0x5}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x200, 0xf1, 0x8, 0x2, 0x40, 0x4}, 0x8, &(0x7f0000000fc0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}, 0x5, [{0xec, &(0x7f0000001000)=@string={0xec, 0x3, "16552dd9b00e9608cd82f31d2108c12cc50d5014699ba652c53564515012269e994c2fcbb8b181d58e6ecdccb478f9473668c7e418c66429000cb21f3da8433b5778f0d4144bb1f88c6a5fdba6a507d91e8556765da23cd82bdb23faaae95e307f790f146ed7033210908b3e09bed9acce9c45ac189f980e9d53203c727c36c3564ad5fda2475dda462eee81be8d69adf78879b13287695a24d72c164d18b1b46215ef7590208cf8cad1153763fbdbc07937ce452bc6eda998760b0e7073cbb1336886bb639c49d5fb4d4a7b90fca1a2004d497d86876fcb70a4d780e6398ced2ef13e0b9b34e49bdb5d"}}, {0xf0, &(0x7f0000001100)=@string={0xf0, 0x3, "19c6ddeebd9a34011cdc46c9c7baabbfcea78bedc81e92ea742116be8fdfe0cabcaeee73fc3ea8b2613075744d84e0f33b10100d933f80026647e44ac089d8e0007221dd0a600f30b07d4b134170b836219ef13dd6cb263002565087f0c6fde1140965885f893da224039e181a4edd685ed002db1e17859c06e39ae74e1e85cccf8ae4a92f83f7c5f1c9988488819cad8b48962095d9849b0dd8ee1ce806db69cd84b5aa0e6cd9e1a555c27779f14f56b57efe577125cc4d7258a0b7c7d018c201a1a1f541abfbb3cbb0ef9e1671d0423a300842987881ef7037b04c3df23e1ba5e6dd035f6ba6e73782ba2c7d0b"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x814}}]})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000b40)={0x20, 0x2, 0xd1, {0xd1, 0x1, "968d78d33247a7e243338585ea7977b1de835ecba1a0e1e0760fe90b734d4ef502b5583013d3052acb6b59e244e702c2b6dbd5668791124c9f813644c17bb6b347b62a1b947737bd0497e8ce74e078d16ae12f75b41141c1f221e45e5d1b96475638856f8eabc83e65d2257dca4da464d62821d68e85cec77e51d3193cbd9f3e863dd51d0cd666b774d191249c4a53f5ad709f53076ead97fb4041c2df5bd9d403d50b17f9409d797ec20745a3b58d432085e60a5b6b1a707ea3470053ed416f868ab4843430c8d42f596cc56642cf"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x7ff4d9c637f4c1ec, 0x15, 0x61, "c847bb3c02ed50415bd174fc593b348bc31363a5567d37644d40d1485c64d30e2b78d07c8856962d4c162aa28649ae733838f98f8b92e53169ecdd097a139d3dd71ece64f8a3cb27a8f25966bfea79e44a00422b1666c0f51f155b3888cedad387"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d80)={0x20, 0x81, 0x3, "cef773"}, &(0x7f0000000dc0)={0x20, 0x82, 0x3, "7cdf9b"}, &(0x7f0000000e00)={0x20, 0x83, 0x1, "ed"}, &(0x7f0000000e40)={0x20, 0x84, 0x2, "6a92"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, '\x009m'}})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000900)=ANY=[], 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x86}})
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x4, 0xb, {0xb, 0x2b, "a5f9d264557c5fe160"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "b7e56c85a7d4d192344706493243a2aa81bb594a3e4f26b95783909926"}}, &(0x7f0000000a40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x2, 0x5a, 0x4, "99fa1eb8", "39f13f70"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x1, 0x1, 0x4, 0x2, 0x9875}}}, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x20}}, 0x0, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c376"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "d5db"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}})

17m21.151296564s ago: executing program 1 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
recvmsg$unix(r2, 0x0, 0x40)
close_range(r3, 0xffffffffffffffff, 0x600000000000000)

17m19.892961092s ago: executing program 1 (id=23):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540))
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x74, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x800)

17m15.836730171s ago: executing program 1 (id=33):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@id, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0)

17m0.537333831s ago: executing program 32 (id=33):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@id, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0)

14m25.414150544s ago: executing program 0 (id=667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x4004)

14m24.531786057s ago: executing program 0 (id=670):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)

14m24.431124008s ago: executing program 0 (id=672):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@getlink={0x94, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x30108, 0x4}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_MTU={0x8, 0x4, 0x10}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r7, @ANYBLOB="080002"], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f00000001c0)={0xa, @raw_data="03091f682f97de8bf5de030965f3875767f6ee1404a33062ef3b061315c1e8c446b6b654ff4030c94e863998744c7ea75f41f156a5b848a438d260cc5d3fe6e8d5c8a7db0606db4622d5a25539914d0044688f2c8b135fd24379c4030e0865b28051ae97cd50558df9576ea4ccf3ba99d7107c326ce69d970fb8de907062fe6a8bbc6e95ac17de68efdd0a073fdebc2c632da243bf9362276110a73e4691993f66c89bdfd9497cb6ffa3e4da02a996b925a0833793956236772e5b735381397be1872481d8bf763a"})

14m23.363238094s ago: executing program 0 (id=677):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x80)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

14m22.296818499s ago: executing program 0 (id=681):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x3, 0xffffffff}]})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

14m21.026281367s ago: executing program 0 (id=690):
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x2, 0x74, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {0x0, 0x2000000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

14m5.156230826s ago: executing program 33 (id=690):
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x2, 0x74, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {0x0, 0x2000000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

13.113986455s ago: executing program 2 (id=3847):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xffffffff)

12.936297178s ago: executing program 2 (id=3851):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0)

9.42994422s ago: executing program 6 (id=3865):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8401000010000100000000080400000000000000000000000000ffff0a01010200000000000000000000000000000000140000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac14144100000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000100000000000000000000400000000000004000000000000000d000000000000000a000099cd7f317c01b0ba000000000020000000ffffffff00000000020001060000000000000000480003006465666c61746500000000"], 0x184}}, 0x0)

9.285459782s ago: executing program 6 (id=3867):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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")
close_range(r0, 0xffffffffffffffff, 0x0)

8.476233774s ago: executing program 4 (id=3869):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x2e}}], 0x18}}], 0x1, 0x6001)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
socket$inet6_sctp(0xa, 0x1, 0x84)

8.263016577s ago: executing program 6 (id=3872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xffffffff)

7.933704222s ago: executing program 4 (id=3874):
syz_pidfd_open(0x0, 0x0)
syz_usb_connect(0x6, 0x75, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f)

6.782793389s ago: executing program 4 (id=3879):
syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc030803"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
close(r3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f)

5.163970173s ago: executing program 3 (id=3882):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10000000000004)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20)
fcntl$setlease(r3, 0x400, 0x1)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
close(0x3)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="54010000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0600cd00000000002f013300802009000802110000010802110000005050505050505f00ff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.802737018s ago: executing program 5 (id=3883):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000a80)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4813, 0xffffffffffffffff, 0x10000000)

4.379549795s ago: executing program 6 (id=3884):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x2e}}], 0x18}}], 0x1, 0x6001)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
socket$inet6_sctp(0xa, 0x1, 0x84)

4.151152448s ago: executing program 3 (id=3885):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x0, 0x0})

4.110958959s ago: executing program 2 (id=3886):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

3.931718972s ago: executing program 3 (id=3887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

3.825039683s ago: executing program 5 (id=3888):
socket$inet(0x2, 0x1, 0x100)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0)
r6 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r6, 0xb)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)

3.729248884s ago: executing program 3 (id=3889):
syz_pidfd_open(0x0, 0x0)
syz_usb_connect(0x6, 0x75, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f)

3.658497016s ago: executing program 4 (id=3890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$vcsa(0x0, 0x200, 0x0)
write$dsp(r4, &(0x7f0000000080), 0x0)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)

3.304387971s ago: executing program 2 (id=3891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8401000010000100000000080400000000000000000000000000ffff0a01010200000000000000000000000000000000140000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac14144100000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000100000000000000000000400000000000004000000000000000d000000000000000a000099cd7f317c01b0ba000000000020000000ffffffff00000000020001060000000000000000480003006465666c61746500000000"], 0x184}}, 0x0)

3.302904861s ago: executing program 4 (id=3892):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getlink={0x94, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x30108, 0x4}, [@IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_MTU={0x8, 0x4, 0x10}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="080002"], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f00000001c0)={0xa, @raw_data="03091f682f97de8bf5de030965f3875767f6ee1404a33062ef3b061315c1e8c446b6b654ff4030c94e863998744c7ea75f41f156a5b848a438d260cc5d3fe6e8d5c8a7db0606db4622d5a25539914d0044688f2c8b135fd24379c4030e0865b28051ae97cd50558df9576ea4ccf3ba99d7107c326ce69d970fb8de907062fe6a8bbc6e95ac17de68efdd0a073fdebc2c632da243bf9362276110a73e4691993f66c89bdfd9497cb6ffa3e4da02a996b925a0833793956236772e5b735381397be1872481d8bf763a"})

2.384802334s ago: executing program 3 (id=3893):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x1d8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x19c, 0x2, [@TCA_BPF_ACT={0x198, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xa4, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x4, 0x10, 0x101}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x2, 0x1, 0x7}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x5c, 0x0, 0x8, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x2b0b, 0x5, 0x5, 0x1}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x48022b82b4dfdb53}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_connmark={0xc0, 0x15, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff0d, 0x8, 0x10000002, 0xfff, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x10000000, 0x0, 0x7}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x7, 0x10000000, 0x9, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x2, 0x10001, 0x8}, 0x9b59}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x10000000, 0x8, 0x401}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.288483506s ago: executing program 4 (id=3894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xffffffff)

2.215743717s ago: executing program 2 (id=3895):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10000000000004)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20)
fcntl$setlease(r3, 0x400, 0x1)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
close(0x3)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="54010000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0600cd00000000002f013300802009000802110000010802110000005050505050505f00ff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.159038458s ago: executing program 3 (id=3896):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0)

2.149015458s ago: executing program 5 (id=3897):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffd, 0x2022144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2.076046679s ago: executing program 6 (id=3898):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000a80)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4813, r0, 0x10000000)

1.463666448s ago: executing program 5 (id=3899):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

1.177252843s ago: executing program 2 (id=3900):
syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc030803"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
close(r3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f)

930.849956ms ago: executing program 5 (id=3901):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x8}]}}]}, 0x40}}, 0x24040000)

28.087649ms ago: executing program 6 (id=3902):
r0 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891a, &(0x7f0000000100))
socket(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

0s ago: executing program 5 (id=3903):
syz_pidfd_open(0x0, 0x0)
syz_usb_connect(0x6, 0x75, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f)

kernel console output (not intermixed with test programs):

13745][T12050] tipc: Resetting bearer <eth:syzkaller0>
[  554.463249][T12050] tipc: Disabling bearer <eth:syzkaller0>
[  555.514165][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'.
[  555.686740][T12070] overlayfs: missing 'lowerdir'
[  556.625366][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  556.627161][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  556.701296][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'.
[  556.723364][T12084] device gtp0 entered promiscuous mode
[  559.356377][T12105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.393902][T12105] tipc: Resetting bearer <eth:syzkaller0>
[  559.407635][T12104] tipc: Disabling bearer <eth:syzkaller0>
[  559.888544][T12116] overlayfs: missing 'lowerdir'
[  559.922956][T12122] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2138'.
[  559.931868][T12122] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2138'.
[  559.934349][T12122] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2138'.
[  560.017524][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'.
[  560.038805][T12124] device gtp0 entered promiscuous mode
[  560.963594][T12136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.974642][T12136] tipc: Resetting bearer <eth:syzkaller0>
[  561.007772][T12135] tipc: Disabling bearer <eth:syzkaller0>
[  562.027281][T12146] ubi: mtd0 is already attached to ubi31
[  563.438925][T12157] fuse: Bad value for 'group_id'
[  564.824798][T12164] overlayfs: missing 'lowerdir'
[  565.227107][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'.
[  565.242604][T12169] device gtp0 entered promiscuous mode
[  565.864995][ T4309] Bluetooth: hci5: link tx timeout
[  565.866666][ T4309] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  565.868868][ T4309] Bluetooth: hci5: link tx timeout
[  565.870240][ T4309] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  566.304674][T12188] fuse: Bad value for 'group_id'
[  566.818369][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  566.838291][T12203] device gtp1 entered promiscuous mode
[  568.701799][T12219] fuse: Bad value for 'group_id'
[  568.843249][T12224] ubi: mtd0 is already attached to ubi31
[  569.553390][T12229] overlayfs: missing 'lowerdir'
[  569.787594][ T4309] Bluetooth: hci4: unexpected cc 0x0c2d length: 69 > 4
[  570.178229][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'.
[  570.203873][T12241] device gtp0 entered promiscuous mode
[  572.491946][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  572.494323][T12305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.501330][T12305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.516720][T12305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.518807][T12305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.161117][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'.
[  573.165679][T12318] device gtp1 entered promiscuous mode
[  573.498901][T12311] overlayfs: missing 'lowerdir'
[  574.174070][T12336] ubi: mtd0 is already attached to ubi31
[  575.418431][T12358] device gtp2 entered promiscuous mode
[  576.105613][T12361] ubi31: detaching mtd0
[  576.950043][T12361] ubi31: mtd0 is detached
[  579.895444][T12388] ubi31: attaching mtd0
[  579.897183][T12388] ubi31: scanning is finished
[  579.980427][T12378] overlayfs: missing 'lowerdir'
[  580.063943][T12388] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  580.066220][T12388] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  580.068309][T12388] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  580.070231][T12388] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  580.072145][T12388] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  580.074012][T12388] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  580.076192][T12388] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4235123639
[  580.078797][T12388] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  580.082406][T12389] ubi31: background thread "ubi_bgt31d" started, PID 12389
[  581.103423][T12406] device gtp0 entered promiscuous mode
[  582.128207][T12418] ubi31: detaching mtd0
[  582.796333][T12418] ubi31: mtd0 is detached
[  583.768419][T12429] ubi31: attaching mtd0
[  583.778546][T12429] ubi31: scanning is finished
[  583.873942][T12429] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  583.876359][T12429] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  583.878517][T12429] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  583.880532][T12429] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  583.882728][T12429] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  583.884695][T12429] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  583.887035][T12429] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4235123639
[  583.889992][T12429] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  583.904403][T12430] ubi31: background thread "ubi_bgt31d" started, PID 12430
[  585.645987][T12446] overlayfs: missing 'lowerdir'
[  586.002390][T12451] device gtp2 entered promiscuous mode
[  589.110501][T12480] ubi: mtd0 is already attached to ubi31
[  589.562440][T12483] ubi31: detaching mtd0
[  590.355652][T12482] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2236'.
[  590.392354][T12483] ubi31: mtd0 is detached
[  590.674536][T12493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2242'.
[  590.757625][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'.
[  591.684860][    C1] hrtimer: interrupt took 49960 ns
[  591.704024][T12503] overlayfs: missing 'lowerdir'
[  594.691194][T12531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2254'.
[  595.338912][T12538] ubi31: attaching mtd0
[  595.340711][T12538] ubi31: scanning is finished
[  595.355582][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'.
[  595.404806][T12538] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  595.406963][T12538] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  595.408871][T12538] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  595.410789][T12538] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  595.412779][T12538] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  595.414653][T12538] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  595.417052][T12538] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4235123639
[  595.419722][T12538] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  595.433491][T12543] ubi31: background thread "ubi_bgt31d" started, PID 12543
[  596.151475][T12553] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2257'.
[  597.108633][T12559] fuse: Unknown parameter 'grou00000000000000000000'
[  598.552591][T12557] ubi31: detaching mtd0
[  598.555853][T12557] ubi31: mtd0 is detached
[  598.598281][T12564] overlayfs: missing 'lowerdir'
[  601.093822][T12590] ubi31: attaching mtd0
[  601.101205][T12590] ubi31: scanning is finished
[  601.587963][T12590] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  602.546035][T12608] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  602.548753][T12608] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  602.847581][T12606] fuse: Unknown parameter 'grou00000000000000000000'
[  602.857077][T12605] device gtp3 entered promiscuous mode
[  605.723470][T12654] fuse: Unknown parameter 'grou00000000000000000000'
[  608.514162][T12702] lo speed is unknown, defaulting to 1000
[  609.664917][T12713] netlink: 'syz.3.2301': attribute type 2 has an invalid length.
[  609.667155][T12713] netlink: 'syz.3.2301': attribute type 1 has an invalid length.
[  609.669321][T12713] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2301'.
[  615.016086][T12790] device batadv_slave_0 entered promiscuous mode
[  615.466923][T12804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'.
[  617.054958][T12828] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2341'.
[  617.998068][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  617.999856][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  619.291674][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2347'.
[  619.585844][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.621497][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.604303][T12884] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2361'.
[  623.872429][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.878243][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.518993][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2375'.
[  630.550446][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2391'.
[  631.058768][ T4309] Bluetooth: hci5: link tx timeout
[  631.060391][ T4309] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  631.062676][ T4309] Bluetooth: hci5: link tx timeout
[  631.064160][ T4309] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.545035][T13018] input: syz1 as /devices/virtual/input/input3
[  634.230804][T13032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  634.233536][T13032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  635.370487][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  635.373209][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.712298][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2408'.
[  636.595185][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  636.615555][T13065] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  636.623201][T13065] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  636.926079][T13071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  636.928975][T13071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  639.584884][T13098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.263190][T13098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.370813][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.377832][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2421'.
[  640.391084][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.223041][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.226947][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.238118][T13119] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  641.240877][T13119] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  641.830683][T13135] sctp: [Deprecated]: syz.3.2433 (pid 13135) Use of int in maxseg socket option.
[  641.830683][T13135] Use struct sctp_assoc_value instead
[  643.934991][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2434'.
[  645.260282][T13150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  645.265481][T13150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  645.268045][T13150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  645.287893][T13150] device bridge1 left promiscuous mode
[  645.290041][T13150] device gtp0 left promiscuous mode
[  646.711967][T13168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  646.714663][T13168] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  647.058158][ T4350] kernel write not supported for file /snd/midiC2D0 (pid: 4350 comm: kworker/0:6)
[  647.112649][T13176] tipc: Enabled bearer <udp:syz2>, priority 10
[  647.345798][T13181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2447'.
[  648.837874][T13192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2450'.
[  648.940641][T13203] netlink: 'syz.2.2453': attribute type 1 has an invalid length.
[  648.966243][T13203] 8021q: adding VLAN 0 to HW filter on device bond1
[  649.006645][T13208] capability: warning: `syz.3.2455' uses 32-bit capabilities (legacy support in use)
[  649.103949][T13203] bond1: (slave veth0_to_bond): making interface the new active one
[  649.156655][T13203] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  649.163675][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  649.369665][T13209] device veth1 entered promiscuous mode
[  649.391750][T13209] device veth1 left promiscuous mode
[  649.423449][T13209] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  650.589639][T13224] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2459'.
[  651.083018][T13234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  651.085771][T13234] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  651.864577][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2464'.
[  652.925047][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.931354][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.325371][T13284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  655.328199][T13284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  655.944672][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2479'.
[  656.614102][T13296] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2482'.
[  656.752776][T13303] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2485'.
[  657.114941][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  657.121010][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  657.123352][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  657.125692][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  657.128024][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  657.130376][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  657.132652][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  657.136389][T13306] infiniband syz1: set active
[  657.138697][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  657.142705][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  657.145083][T13306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.153097][T13306] infiniband syz!: set active
[  657.156192][T13306] device batadv_slave_0 left promiscuous mode
[  657.167718][T13306] device gtp0 left promiscuous mode
[  657.169820][T13306] device gtp1 left promiscuous mode
[  657.171806][T13306] device gtp2 left promiscuous mode
[  664.466905][T13340] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  664.469029][T13340] netlink: 'syz.3.2492': attribute type 3 has an invalid length.
[  664.471116][T13340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2492'.
[  664.477675][T13339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  664.480263][T13339] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  665.640419][T13342] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2491'.
[  666.423150][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2494'.
[  668.544927][T13372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.550114][T13372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.756160][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2510'.
[  675.967364][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'.
[  676.725880][T13449] vxfs: WRONG superblock magic 00000000 at 1
[  676.729037][T13449] vxfs: WRONG superblock magic 00000000 at 8
[  676.730696][T13449] vxfs: can't find superblock.
[  677.389714][T13460] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  677.392353][T13460] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  679.406812][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  679.408610][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  681.000343][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'.
[  683.520402][T13508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  683.523422][T13508] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  685.083314][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2549'.
[  688.398717][T13571] ceph: No mds server is up or the cluster is laggy
[  688.406812][ T4364] libceph: connect (1)[c::]:6789 error -101
[  688.410345][ T4364] libceph: mon0 (1)[c::]:6789 connect error
[  689.212592][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'.
[  689.231771][T13580] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2561'.
[  692.509054][T13620] vxfs: WRONG superblock magic 00000000 at 1
[  692.511988][T13620] vxfs: WRONG superblock magic 00000000 at 8
[  692.513707][T13620] vxfs: can't find superblock.
[  693.063294][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'.
[  694.850471][ T4309] Bluetooth: hci5: link tx timeout
[  694.852185][ T4309] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  694.854422][ T4309] Bluetooth: hci5: link tx timeout
[  694.856158][ T4309] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  694.998565][T13656] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2590'.
[  698.083780][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'.
[  702.546026][T13748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  702.562926][T13748] device batadv_slave_0 entered promiscuous mode
[  704.912504][ T4462] Bluetooth: hci3: Frame reassembly failed (-84)
[  705.081111][ T8098] Bluetooth: hci3: Frame reassembly failed (-84)
[  706.987832][ T4309] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  707.075768][T13799] nvme_fabrics: missing parameter 'transport=%s'
[  707.077687][T13799] nvme_fabrics: missing parameter 'nqn=%s'
[  710.360384][T13840] overlayfs: missing 'lowerdir'
[  711.553342][T13860] lo speed is unknown, defaulting to 1000
[  713.314842][T13880] Bluetooth: hci0: Opcode 0x080f failed: -4
[  714.882213][ T4309] Bluetooth: hci0: command 0x080f tx timeout
[  714.998815][T13903] overlayfs: missing 'lowerdir'
[  717.904078][T13927] bridge0: port 3(syz_tun) entered blocking state
[  717.915136][T13927] bridge0: port 3(syz_tun) entered disabled state
[  717.918400][T13927] device syz_tun entered promiscuous mode
[  717.945046][T13927] bridge0: port 3(syz_tun) entered blocking state
[  717.947201][T13927] bridge0: port 3(syz_tun) entered forwarding state
[  718.050109][T13927] device syz_tun left promiscuous mode
[  718.053002][T13927] bridge0: port 3(syz_tun) entered disabled state
[  718.873592][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  718.888849][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  718.893294][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  718.932005][T13927] device bridge_slave_0 left promiscuous mode
[  718.934046][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.067242][T13927] device bridge_slave_1 left promiscuous mode
[  719.069294][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.117923][T13927] bond0: (slave bond_slave_0): Releasing backup interface
[  719.240997][T13927] team0: Port device team_slave_0 removed
[  719.267331][T13927] team0: Port device team_slave_1 removed
[  719.269773][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.272011][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.279955][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  719.282201][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.166864][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2682'.
[  722.472932][T13976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.515729][T13976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.656131][T13986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.658910][T13986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.780673][T13988] overlayfs: missing 'lowerdir'
[  728.794888][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2703'.
[  728.797631][T14024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  728.800225][T14024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  731.417999][T14048] overlayfs: missing 'lowerdir'
[  734.694363][T14083] netlink: 'syz.2.2723': attribute type 4 has an invalid length.
[  734.782656][ T4350] lo speed is unknown, defaulting to 1000
[  737.073967][T14108] overlayfs: missing 'lowerdir'
[  740.022637][T14145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2742'.
[  740.674925][T14155] overlayfs: missing 'lowerdir'
[  740.839539][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  740.841495][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  742.057385][T14177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  742.060131][T14177] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  743.315696][T14189] netlink: 'syz.3.2757': attribute type 4 has an invalid length.
[  743.971009][T14191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'.
[  746.159887][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'.
[  746.615218][T14210] netlink: 'syz.2.2766': attribute type 25 has an invalid length.
[  746.951454][    C1] vxcan1: j1939_tp_rxtimer: 0x000000002d874b43: rx timeout, send abort
[  747.453376][    C1] vxcan1: j1939_tp_rxtimer: 0x00000000573b156c: rx timeout, send abort
[  747.456076][    C1] vxcan1: j1939_tp_rxtimer: 0x000000002d874b43: abort rx timeout. Force session deactivation
[  747.955898][    C1] vxcan1: j1939_tp_rxtimer: 0x00000000573b156c: abort rx timeout. Force session deactivation
[  750.825739][T14265] vxfs: WRONG superblock magic 00000000 at 1
[  750.827608][T14265] vxfs: WRONG superblock magic 00000000 at 8
[  750.829214][T14265] vxfs: can't find superblock.
[  750.894260][ T4364] libceph: connect (1)[c::]:6789 error -101
[  750.896278][ T4364] libceph: mon0 (1)[c::]:6789 connect error
[  750.900166][T14245] ceph: No mds server is up or the cluster is laggy
[  750.902704][ T4364] libceph: connect (1)[c::]:6789 error -101
[  750.904435][ T4364] libceph: mon0 (1)[c::]:6789 connect error
[  754.158023][T14321] ubi31: attaching mtd0
[  754.159813][T14321] ubi31: scanning is finished
[  754.465669][T14321] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  757.509439][T14368] trusted_key: encrypted_key: master key parameter 'tr?Á�¥' is invalid
[  758.320953][ T4299] Bluetooth: hci5: link tx timeout
[  758.322499][ T4299] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  758.325171][ T4299] Bluetooth: hci5: link tx timeout
[  758.326830][ T4299] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  758.381764][T14376] ubi31: attaching mtd0
[  758.388391][T14376] ubi31: scanning is finished
[  758.578092][T14376] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  758.580413][T14376] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  758.582686][T14376] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  758.585051][T14376] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  758.587275][T14376] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  758.589398][T14376] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  758.591797][T14376] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4235123639
[  758.594715][T14376] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  758.609651][T14377] ubi31: background thread "ubi_bgt31d" started, PID 14377
[  759.037699][T13786] libceph: connect (1)[c::]:6789 error -101
[  759.039564][T13786] libceph: mon0 (1)[c::]:6789 connect error
[  759.052953][T13786] libceph: connect (1)[c::]:6789 error -101
[  759.057515][T13786] libceph: mon0 (1)[c::]:6789 connect error
[  759.074298][T14379] ceph: No mds server is up or the cluster is laggy
[  759.135084][T14352] vxfs: WRONG superblock magic 00000000 at 1
[  759.136936][T14352] vxfs: WRONG superblock magic 00000000 at 8
[  759.138581][T14352] vxfs: can't find superblock.
[  760.444173][T14399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.447112][T14399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.756898][T14407] SET target dimension over the limit!
[  761.778217][T14416] ubi: mtd0 is already attached to ubi31
[  762.787323][T14431] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2834'.
[  762.795959][T14428] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2834'.
[  765.061497][T14461] ubi: mtd0 is already attached to ubi31
[  765.311538][T13786] libceph: connect (1)[c::]:6789 error -101
[  765.313462][T13786] libceph: mon0 (1)[c::]:6789 connect error
[  765.336448][T14462] ceph: No mds server is up or the cluster is laggy
[  771.047366][ T4343] libceph: connect (1)[c::]:6789 error -101
[  771.049089][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  771.089008][T14547] ceph: No mds server is up or the cluster is laggy
[  771.118288][T14552] vxfs: WRONG superblock magic 00000000 at 1
[  771.120162][T14552] vxfs: WRONG superblock magic 00000000 at 8
[  771.121882][T14552] vxfs: can't find superblock.
[  772.069502][T14566] ubi: mtd0 is already attached to ubi31
[  773.312588][T14581] device ip6gre1 entered promiscuous mode
[  775.379395][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2893'.
[  775.389191][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2893'.
[  777.708092][ T4343] libceph: connect (1)[c::]:6789 error -101
[  777.709842][ T4343] libceph: mon0 (1)[c::]:6789 connect error
[  777.747432][T14637] ceph: No mds server is up or the cluster is laggy
[  777.784713][T14642] vxfs: WRONG superblock magic 00000000 at 1
[  777.786431][T14642] vxfs: WRONG superblock magic 00000000 at 8
[  777.787997][T14642] vxfs: can't find superblock.
[  777.804936][T14643] netlink: 'syz.6.2899': attribute type 2 has an invalid length.
[  777.812313][T14643] netlink: 'syz.6.2899': attribute type 1 has an invalid length.
[  777.820628][T14643] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2899'.
[  778.574952][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2904'.
[  778.933024][T14660] ubi: mtd0 is already attached to ubi31
[  781.446283][ T4309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  781.456575][ T4309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  781.462867][ T4309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  781.470877][ T4309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  781.473399][ T4309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  781.475759][ T4309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  782.270371][T14695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2916'.
[  782.294355][T14685] lo speed is unknown, defaulting to 1000
[  782.799650][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  782.802207][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  784.745438][T14713] vxfs: WRONG superblock magic 00000000 at 1
[  784.745721][T14713] vxfs: WRONG superblock magic 00000000 at 8
[  784.745735][T14713] vxfs: can't find superblock.
[  785.115742][T14688] Bluetooth: hci3: command 0x0409 tx timeout
[  785.439653][T12279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.445400][T14707] siw: device registration error -23
[  785.471353][T14718] ubi31: detaching mtd0
[  785.475954][T14718] ubi31: mtd0 is detached
[  785.546263][T12279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.732050][T12279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.726442][T12279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.737039][T14685] chnl_net:caif_netlink_parms(): no params data found
[  786.759206][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2922'.
[  786.778112][T14729] 8021q: adding VLAN 0 to HW filter on device bond1
[  786.826116][T14730] device macvlan2 entered promiscuous mode
[  786.828977][T14730] device bond1 entered promiscuous mode
[  786.830753][T14730] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  786.863318][T14730] device bond1 left promiscuous mode
[  787.245749][ T4309] Bluetooth: hci3: command 0x041b tx timeout
[  787.884592][T14685] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.886619][T14685] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.889858][T14685] device bridge_slave_0 entered promiscuous mode
[  787.898961][T14685] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.901107][T14685] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.903747][T14685] device bridge_slave_1 entered promiscuous mode
[  787.911295][T14748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2926'.
[  787.941091][T14685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  787.945773][T14685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  787.985503][T14685] team0: Port device team_slave_0 added
[  788.032341][T14685] team0: Port device team_slave_1 added
[  788.078406][T14685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.080320][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.105584][T14685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.124812][T14685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.126633][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.148088][T14685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  788.163539][T14754] netlink: 'syz.4.2924': attribute type 2 has an invalid length.
[  788.190312][T14754] netlink: 'syz.4.2924': attribute type 1 has an invalid length.
[  788.201975][T14754] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2924'.
[  788.296368][T14685] device hsr_slave_0 entered promiscuous mode
[  788.395766][T14685] device hsr_slave_1 entered promiscuous mode
[  788.457119][T12279] tipc: Disabling bearer <udp:syz2>
[  788.467252][T12279] tipc: Left network mode
[  789.355036][T14688] Bluetooth: hci3: command 0x040f tx timeout
[  791.108391][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.110872][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  792.590225][ T4309] Bluetooth: hci3: command 0x0419 tx timeout
[  793.772674][T14815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2937'.
[  795.732508][T14841] ubi31: attaching mtd0
[  795.734218][T14841] ubi31: scanning is finished
[  796.730177][T14841] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  798.923658][T14865] netlink: 'syz.6.2944': attribute type 2 has an invalid length.
[  798.925933][T14865] netlink: 'syz.6.2944': attribute type 1 has an invalid length.
[  798.928129][T14865] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2944'.
[  798.974256][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'.
[  799.004013][T14685] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  800.858488][T14685] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  802.335701][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  802.358450][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  802.910339][T14685] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  802.987038][T14685] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  803.088034][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'.
[  803.222368][T14685] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.229878][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  803.232389][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  803.244920][T14685] 8021q: adding VLAN 0 to HW filter on device team0
[  803.255920][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  803.258462][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  803.260922][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.262813][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.298210][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2961'.
[  803.318009][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  803.326573][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  803.329474][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.331500][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.334403][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  803.354965][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  803.362111][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  803.371503][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  803.749343][T14954] netlink: 'syz.4.2960': attribute type 2 has an invalid length.
[  803.751596][T14954] netlink: 'syz.4.2960': attribute type 1 has an invalid length.
[  803.753702][T14954] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2960'.
[  804.078217][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  804.085752][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  804.095628][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  804.143342][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  804.183557][T14685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  804.204414][T14685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  804.244270][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  804.250398][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  804.255016][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  804.259888][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  804.295271][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  804.317891][T12279] device hsr_slave_0 left promiscuous mode
[  804.549071][T12279] device hsr_slave_1 left promiscuous mode
[  805.614768][T12279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  805.624335][T12279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  805.626653][T12279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  805.630992][T12279] device bridge_slave_1 left promiscuous mode
[  805.645124][T12279] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.746697][T12279] device bridge_slave_0 left promiscuous mode
[  805.748458][T12279] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.009515][T12279] device veth1_macvtap left promiscuous mode
[  806.011265][T12279] device veth0_macvtap left promiscuous mode
[  806.013097][T12279] device veth1_vlan left promiscuous mode
[  806.016668][T12279] device veth0_vlan left promiscuous mode
[  809.499888][T12279] team0 (unregistering): Port device team_slave_1 removed
[  809.676870][T12279] team0 (unregistering): Port device team_slave_0 removed
[  809.855360][T12279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.036113][T12279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  811.877236][T12279] bond0 (unregistering): Released all slaves
[  812.184305][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  812.188144][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  812.190253][T15004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  812.203140][T15004] device gtp0 left promiscuous mode
[  812.356620][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2973'.
[  814.129511][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  814.131794][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  814.153085][T14685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  814.209786][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  814.212751][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  814.248638][ T1515] libceph: connect (1)[c::]:6789 error -101
[  814.250382][ T1515] libceph: mon0 (1)[c::]:6789 connect error
[  814.253908][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  814.259382][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  814.268298][T14685] device veth0_vlan entered promiscuous mode
[  814.275652][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  814.278258][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  814.285402][T15028] ceph: No mds server is up or the cluster is laggy
[  814.301270][T14685] device veth1_vlan entered promiscuous mode
[  814.334669][T15017] netlink: 'syz.4.2971': attribute type 2 has an invalid length.
[  814.334699][T15017] netlink: 'syz.4.2971': attribute type 1 has an invalid length.
[  814.334713][T15017] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2971'.
[  814.363646][T15032] vxfs: WRONG superblock magic 00000000 at 1
[  814.365419][T15032] vxfs: WRONG superblock magic 00000000 at 8
[  814.366978][T15032] vxfs: can't find superblock.
[  814.367291][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  814.370873][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  814.374397][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  814.386929][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  814.405923][T14685] device veth0_macvtap entered promiscuous mode
[  814.414243][T14685] device veth1_macvtap entered promiscuous mode
[  814.462587][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.474365][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.483604][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.493007][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.501738][T14685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  814.503997][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  814.512063][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  814.518163][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  814.521632][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  814.530820][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.541633][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.565526][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.573495][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.585344][T14685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  814.590272][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  814.593188][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  814.601314][T14685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.607749][T14685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.613471][T14685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.617853][T14685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  814.777445][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.780066][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.813732][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  814.832239][ T4764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.837195][ T4764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.849894][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  816.672814][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  816.677467][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  816.680289][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  816.687050][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  816.690621][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  816.692862][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  818.754887][ T4309] Bluetooth: hci2: command 0x0409 tx timeout
[  820.327303][ T5335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.363243][T15051] lo speed is unknown, defaulting to 1000
[  821.274494][T15092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  821.277223][T15092] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  821.294893][T14688] Bluetooth: hci2: command 0x041b tx timeout
[  821.677310][ T5335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.869143][T14688] Bluetooth: hci5: link tx timeout
[  821.870597][T14688] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  821.872534][T14688] Bluetooth: hci5: link tx timeout
[  821.873852][T14688] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  823.058610][ T5335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.195159][T15107] netlink: 'syz.6.2988': attribute type 2 has an invalid length.
[  823.211477][T15107] netlink: 'syz.6.2988': attribute type 1 has an invalid length.
[  823.213519][T15107] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2988'.
[  823.218904][ T5335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.320953][T14688] Bluetooth: hci2: command 0x040f tx timeout
[  823.522696][T15051] chnl_net:caif_netlink_parms(): no params data found
[  825.384702][ T4309] Bluetooth: hci2: command 0x0419 tx timeout
[  825.621423][ T5335] tipc: Disabling bearer <udp:syz2>
[  825.623034][ T5335] tipc: Left network mode
[  825.638451][T15051] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.641084][T15051] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.643635][T15051] device bridge_slave_0 entered promiscuous mode
[  827.247157][T15051] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.287502][T15051] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.312090][T15051] device bridge_slave_1 entered promiscuous mode
[  827.326417][T15160] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  827.328957][T15160] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  827.421345][T15051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.450454][T15051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  827.589206][T15051] team0: Port device team_slave_0 added
[  827.600977][T15051] team0: Port device team_slave_1 added
[  827.639633][T15051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.642677][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.668271][T15051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.799228][T15051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.801246][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  827.814946][T15051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.059414][T15051] device hsr_slave_0 entered promiscuous mode
[  828.174987][T15051] device hsr_slave_1 entered promiscuous mode
[  828.225495][T15051] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  828.227845][T15051] Cannot create hsr debugfs directory
[  828.318707][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3007'.
[  828.360516][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3007'.
[  828.363130][T15192] device bridge_slave_1 left promiscuous mode
[  828.366304][T15192] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.407080][T15192] device bridge_slave_0 left promiscuous mode
[  828.409055][T15192] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.500657][T15211] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  830.503238][T15211] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  833.638136][ T8098] wlan1: Trigger new scan to find an IBSS to join
[  836.232627][T15051] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  836.328222][T15051] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  836.496973][T15051] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  837.321415][ T5335] device hsr_slave_0 left promiscuous mode
[  837.431874][ T5335] device hsr_slave_1 left promiscuous mode
[  837.685488][   T39] wlan1: Trigger new scan to find an IBSS to join
[  838.285015][ T5335] device veth1_macvtap left promiscuous mode
[  838.286762][ T5335] device veth1_vlan left promiscuous mode
[  838.288361][ T5335] device veth0_vlan left promiscuous mode
[  842.585151][ T8098] wlan1: Trigger new scan to find an IBSS to join
[  843.287680][ T5335] bond0 (unregistering): Released all slaves
[  843.508881][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'.
[  843.511944][T15051] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  843.544879][ T4878] wlan1: Creating new IBSS network, BSSID 3a:ca:4d:45:72:82
[  843.552176][T15333] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3041'.
[  843.994320][T15051] 8021q: adding VLAN 0 to HW filter on device bond0
[  844.009875][T15051] 8021q: adding VLAN 0 to HW filter on device team0
[  844.139074][T15051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  844.144362][T15051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  844.223328][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  844.228561][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  844.231208][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  844.233930][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  844.237583][T12279] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.239423][T12279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  844.241768][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  844.244773][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  844.247360][T12279] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.249344][T12279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  844.251622][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  844.254565][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  844.257585][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  844.262018][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  844.266165][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  844.275271][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  844.278193][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  844.697257][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  844.918795][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  844.940728][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  844.956319][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  844.981758][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  844.998932][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  845.263098][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  845.265606][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  845.280104][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  845.767983][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  845.771603][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  845.801450][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  845.804329][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  845.813212][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  845.820530][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  845.832247][T15051] device veth0_vlan entered promiscuous mode
[  845.843865][T15051] device veth1_vlan entered promiscuous mode
[  845.892168][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  845.895624][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  845.899101][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  845.912079][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  845.925988][T15051] device veth0_macvtap entered promiscuous mode
[  845.930908][T15051] device veth1_macvtap entered promiscuous mode
[  845.963294][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  845.972780][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  845.983344][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  845.991412][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.000644][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  846.009679][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.020244][T15051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  846.034006][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  846.039186][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  846.045211][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  846.057256][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  846.072899][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.076795][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.083762][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.093124][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.102385][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.113445][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.129714][T15051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.137053][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  846.142269][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  846.153515][T15051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.156405][T15051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.160915][T15051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.169690][T15051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  846.272584][ T5335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.283866][ T5335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.309868][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  846.324371][ T5335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.328602][ T5335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.334626][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  847.856366][ T4309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  847.860202][ T4309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  847.863105][ T4309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  847.866869][ T4299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  847.869929][ T4309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  847.872070][ T4309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  847.973478][T15445] lo speed is unknown, defaulting to 1000
[  848.342739][ T4296] infiniband syz1: set down
[  848.402138][ T4350] infiniband syz1: ib_query_port failed (-19)
[  848.480182][ T8098] smc: removing ib device syz1
[  848.771663][T15467] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  849.944616][T14688] Bluetooth: hci4: command 0x0409 tx timeout
[  852.025528][T14688] Bluetooth: hci4: command 0x041b tx timeout
[  853.580175][T15523] binder: 15522:15523 ioctl c0046209 0 returned -22
[  853.847987][ T5335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.160785][ T4309] Bluetooth: hci4: command 0x040f tx timeout
[  854.228639][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  854.231253][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  854.245423][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  854.248048][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  854.250778][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  854.253323][T15535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  854.753576][ T5335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.017308][ T5335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.727042][ T5335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.185350][ T4309] Bluetooth: hci4: command 0x0419 tx timeout
[  856.320849][T15552] ceph: No mds server is up or the cluster is laggy
[  856.489592][ T4458] libceph: connect (1)[c::]:6789 error -101
[  856.491323][ T4458] libceph: mon0 (1)[c::]:6789 connect error
[  856.524030][T15529] vxfs: WRONG superblock magic 00000000 at 1
[  856.525931][T15529] vxfs: WRONG superblock magic 00000000 at 8
[  856.527570][T15529] vxfs: can't find superblock.
[  857.836524][T15445] chnl_net:caif_netlink_parms(): no params data found
[  860.380594][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3085'.
[  861.843529][T15605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  861.846175][T15605] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  862.804230][T15639] vxfs: WRONG superblock magic 00000000 at 1
[  862.807450][T15639] vxfs: WRONG superblock magic 00000000 at 8
[  862.809103][T15639] vxfs: can't find superblock.
[  862.911586][T15637] ceph: No mds server is up or the cluster is laggy
[  862.919171][ T1515] libceph: connect (1)[c::]:6789 error -101
[  862.922653][ T1515] libceph: mon0 (1)[c::]:6789 connect error
[  863.184771][ T4458] libceph: connect (1)[c::]:6789 error -101
[  863.186528][ T4458] libceph: mon0 (1)[c::]:6789 connect error
[  863.191634][T15445] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.204055][T15445] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.210077][T15445] device bridge_slave_0 entered promiscuous mode
[  863.239125][ T5335] tipc: Left network mode
[  863.263546][T15445] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.269369][T15445] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.279444][T15445] device bridge_slave_1 entered promiscuous mode
[  863.435340][T15445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.457522][T15445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.655987][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  864.657903][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  864.780000][T15663] loop9: detected capacity change from 0 to 8
[  864.808448][T15663]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  864.810233][T15663] loop9: partition table partially beyond EOD, truncated
[  864.819809][T15663] loop9: p1 size 81768186 extends beyond EOD, truncated
[  865.469074][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  866.101323][T15581] udevd[15581]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  867.211935][T15445] team0: Port device team_slave_0 added
[  867.648608][T15680] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  867.651182][T15680] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  868.448452][T15445] team0: Port device team_slave_1 added
[  868.602462][T15445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.607895][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.644647][T15445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.732592][T15445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.735516][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.764521][T15445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.756937][T15445] device hsr_slave_0 entered promiscuous mode
[  869.784897][T15445] device hsr_slave_1 entered promiscuous mode
[  869.864623][T15445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  869.866719][T15445] Cannot create hsr debugfs directory
[  871.533490][T15750] tap0: tun_chr_ioctl cmd 1074025677
[  871.539949][T15750] tap0: linktype set to 785
[  872.979466][ T5335] device hsr_slave_0 left promiscuous mode
[  873.274693][ T5335] device bridge_slave_1 left promiscuous mode
[  873.283454][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.633948][ T4659] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  873.654698][ T5335] device bridge_slave_0 left promiscuous mode
[  873.719664][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.045937][ T5335] device veth1_macvtap left promiscuous mode
[  874.047756][ T5335] device veth0_macvtap left promiscuous mode
[  874.049501][ T5335] device veth1_vlan left promiscuous mode
[  874.051129][ T5335] device veth0_vlan left promiscuous mode
[  874.220623][ T5335] infiniband syz!: set down
[  874.345295][ T5335] bond1 (unregistering): (slave vlan2): Releasing active interface
[  874.347634][ T5335] device veth0_to_bond entered promiscuous mode
[  874.554743][ T4513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  875.367933][T15817] loop8: detected capacity change from 0 to 16384
[  875.674282][ T5335] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  875.676824][ T5335] device veth0_to_bond left promiscuous mode
[  875.716226][ T5335] bond1 (unregistering): Released all slaves
[  877.524932][T15832] netlink: 'syz.4.3140': attribute type 2 has an invalid length.
[  877.527133][T15832] netlink: 'syz.4.3140': attribute type 1 has an invalid length.
[  877.529124][T15832] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3140'.
[  879.170172][T15858] siw: device registration error -23
[  879.234992][T15858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.239126][T15858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.968754][ T5335] team0 (unregistering): Port device team_slave_1 removed
[  880.229213][ T5335] team0 (unregistering): Port device team_slave_0 removed
[  880.232675][ T4738] smc: removing ib device syz!
[  880.557271][ T5335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  880.876552][ T5335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  883.867601][ T5335] bond0 (unregistering): Released all slaves
[  884.288022][T15905] tun0: tun_chr_ioctl cmd 1074025698
[  884.831867][T15445] netdevsim netdevsim2 netdevsim8: renamed from eth8
[  884.909710][T15445] netdevsim netdevsim2 netdevsim9: renamed from eth9
[  885.028458][T15445] netdevsim netdevsim2 netdevsim10: renamed from eth10
[  885.123386][T15445] netdevsim netdevsim2 netdevsim11: renamed from eth11
[  885.835754][T15953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3184'.
[  886.733387][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  886.736162][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  886.787889][T15445] 8021q: adding VLAN 0 to HW filter on device team0
[  886.817192][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  886.820158][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  886.822834][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.824847][ T4798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.833291][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  886.854033][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  886.864245][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  886.879705][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.881755][ T4798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  886.917950][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  886.951125][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  886.971925][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  886.977024][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  886.995852][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  887.128911][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  887.140711][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  887.207757][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  887.210723][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  887.261477][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  887.265579][  T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  887.389772][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  887.991638][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  887.995668][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  888.021520][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  889.289036][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  889.291902][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  889.423117][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  889.429488][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  889.432454][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  889.448069][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  889.467617][T15445] device veth0_vlan entered promiscuous mode
[  889.491995][T15445] device veth1_vlan entered promiscuous mode
[  889.589922][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  889.596591][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  889.601368][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  889.615233][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  889.628701][T15445] device veth0_macvtap entered promiscuous mode
[  889.648944][T15445] device veth1_macvtap entered promiscuous mode
[  889.759738][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.769174][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.774272][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.784988][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.787659][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.794714][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.797329][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  889.800061][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.832001][T15445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  889.846555][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  889.851462][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  889.857234][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  889.862417][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  889.873843][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.877381][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.879925][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.882594][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.893281][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.904530][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.907289][T15445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  889.910698][T15445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  889.950263][T15445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  889.958460][T15445] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.963412][T15445] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.966192][T15445] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.968910][T15445] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.971205][T15445] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  889.973485][T15445] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  889.981429][T15445] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  889.984206][T15445] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  889.986830][T15445] netdevsim netdevsim2 netdevsim8: set [1, 0] type 2 family 0 port 6081 - 0
[  889.989217][T15445] netdevsim netdevsim2 netdevsim9: set [1, 0] type 2 family 0 port 6081 - 0
[  889.992884][T15445] netdevsim netdevsim2 netdevsim10: set [1, 0] type 2 family 0 port 6081 - 0
[  890.004389][T15445] netdevsim netdevsim2 netdevsim11: set [1, 0] type 2 family 0 port 6081 - 0
[  890.096276][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  890.106947][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  890.770488][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.780507][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.809213][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  890.813676][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.817835][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.823820][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  892.420991][T14688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  892.430797][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  892.433669][T14688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  892.436693][T14688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  892.439024][T14688] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  892.441083][T14688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  892.942405][T14688] Bluetooth: hci5: link tx timeout
[  894.504651][T14688] Bluetooth: hci1: command 0x0409 tx timeout
[  894.573062][T16063] chnl_net:caif_netlink_parms(): no params data found
[  894.898221][ T4659] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.928778][ T3967] eql: remember to turn off Van-Jacobson compression on your slave devices
[  895.071813][ T4659] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.237876][ T4659] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.264847][T16063] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.266986][T16063] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.269719][T16063] device bridge_slave_0 entered promiscuous mode
[  895.283549][T16063] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.297392][T16063] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.318251][T16063] device bridge_slave_1 entered promiscuous mode
[  895.568712][ T4659] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.374151][T16063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.409830][T16063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.486500][ T4659] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  896.501959][T16063] team0: Port device team_slave_0 added
[  896.520836][ T4659] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  896.529332][T16063] team0: Port device team_slave_1 added
[  896.564940][ T4659] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  896.572942][T16063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.579187][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.594639][T14688] Bluetooth: hci1: command 0x041b tx timeout
[  896.598374][T16063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.616181][ T4659] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  896.626116][T16063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.634522][T16063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.652007][T16063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.840683][T16063] device hsr_slave_0 entered promiscuous mode
[  896.954958][T16063] device hsr_slave_1 entered promiscuous mode
[  897.004709][T16063] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  897.006634][T16063] Cannot create hsr debugfs directory
[  897.008166][ T4659] tipc: Left network mode
[  897.607981][T16168] netlink: 'syz.3.3238': attribute type 2 has an invalid length.
[  897.610299][T16168] netlink: 'syz.3.3238': attribute type 1 has an invalid length.
[  897.612570][T16168] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3238'.
[  898.674560][ T4309] Bluetooth: hci1: command 0x040f tx timeout
[  899.257658][T16063] netdevsim netdevsim5 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.088246][T16213] netlink: 'syz.4.3252': attribute type 2 has an invalid length.
[  900.090448][T16213] netlink: 'syz.4.3252': attribute type 1 has an invalid length.
[  900.092553][T16213] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3252'.
[  900.486451][T16063] netdevsim netdevsim5 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.697909][T16063] netdevsim netdevsim5 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.744613][T14688] Bluetooth: hci1: command 0x0419 tx timeout
[  900.787777][T16063] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  903.113599][T16281] netlink: 'syz.2.3264': attribute type 2 has an invalid length.
[  903.115926][T16281] netlink: 'syz.2.3264': attribute type 1 has an invalid length.
[  903.118086][T16281] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3264'.
[  905.361156][ T4659] device hsr_slave_0 left promiscuous mode
[  905.375106][ T4659] device hsr_slave_1 left promiscuous mode
[  905.424792][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  905.426976][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.430257][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.435505][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.444246][ T4659] device bridge_slave_1 left promiscuous mode
[  905.450368][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.499079][ T4659] device bridge_slave_0 left promiscuous mode
[  905.502058][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.674696][ T4659] device veth1_macvtap left promiscuous mode
[  905.676495][ T4659] device veth1_vlan left promiscuous mode
[  905.678558][ T4659] device veth0_vlan left promiscuous mode
[  905.888787][ T4878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  906.984425][T14688] Bluetooth: hci3: command 0x0406 tx timeout
[  908.569613][ T4659] team0 (unregistering): Port device team_slave_1 removed
[  908.805809][ T4659] team0 (unregistering): Port device team_slave_0 removed
[  909.045263][ T4659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.291293][ T4659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  911.336967][T16395] loop3: detected capacity change from 0 to 764
[  911.463610][T16400] loop3: detected capacity change from 0 to 1024
[  911.519850][T16400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  911.601335][T14685] EXT4-fs (loop3): unmounting filesystem.
[  912.096289][ T4659] bond0 (unregistering): Released all slaves
[  912.470099][T16063] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  912.504034][T16063] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  912.546106][T16063] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  912.837443][T16063] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  912.878001][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'.
[  913.194103][T16063] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.232671][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  913.249222][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  913.258455][T16063] 8021q: adding VLAN 0 to HW filter on device team0
[  913.276771][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  913.279330][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  913.286887][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.288819][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.316125][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  913.329990][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  913.341816][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  913.344352][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.346164][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  913.359015][T16444] loop3: detected capacity change from 0 to 128
[  913.373802][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  913.471494][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  913.475132][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  913.530222][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  913.540267][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  913.570616][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  913.583720][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  913.588495][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  913.595623][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  913.603195][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  913.608372][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  913.674062][T16063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  913.843691][T16459] netlink: 'syz.2.3309': attribute type 2 has an invalid length.
[  913.876515][T16456] loop3: detected capacity change from 0 to 32768
[  913.902378][T16459] netlink: 'syz.2.3309': attribute type 1 has an invalid length.
[  913.904524][T16459] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3309'.
[  913.911222][T16456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3314 (16456)
[  914.002838][T16456] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  914.006112][T16456] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  914.008586][T16456] BTRFS info (device loop3): enabling auto defrag
[  914.010270][T16456] BTRFS info (device loop3): doing ref verification
[  914.012106][T16456] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  914.014950][T16456] BTRFS info (device loop3): trying to use backup root at mount time
[  914.017125][T16456] BTRFS info (device loop3): max_inline at 4096
[  914.018849][T16456] BTRFS info (device loop3): enabling ssd optimizations
[  914.020693][T16456] BTRFS info (device loop3): using spread ssd allocation scheme
[  914.022684][T16456] BTRFS info (device loop3): using free space tree
[  914.249408][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  914.251756][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  914.290660][T16063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.590164][T16498] BTRFS info (device loop3): space_info DATA+METADATA has 155648 free, is not full
[  914.593382][T16498] BTRFS info (device loop3): space_info total=11534336, used=53248, pinned=0, reserved=20480, may_use=11304960, readonly=0 zone_unusable=0
[  914.597430][T16498] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1437696
[  914.600013][T16498] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  914.602002][T16498] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  914.603979][T16498] BTRFS info (device loop3): delayed_block_rsv: size 98304 reserved 98304
[  914.606327][T16498] BTRFS info (device loop3): delayed_refs_rsv: size 1703936 reserved 1437696
[  914.710978][T16504] device syzkaller0 entered promiscuous mode
[  914.893449][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  914.896473][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  914.954399][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  914.957120][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  914.959982][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  914.962285][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  915.027108][T16063] device veth0_vlan entered promiscuous mode
[  915.057534][T16063] device veth1_vlan entered promiscuous mode
[  915.126336][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  915.129153][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  915.131888][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  915.145628][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  915.157683][T16063] device veth0_macvtap entered promiscuous mode
[  915.162208][T16063] device veth1_macvtap entered promiscuous mode
[  915.204815][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  915.207919][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.210430][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  915.233458][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.243594][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  915.252220][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.255102][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  915.257753][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.261391][T16063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  915.263994][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  915.270976][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  915.276308][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  915.287058][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  915.299652][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.302417][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.306007][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.314554][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.324529][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.327201][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.329902][T16063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  915.332744][T16063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  915.352068][T16063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  915.362145][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  915.372223][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  915.399989][T16063] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.402286][T16063] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.417290][T16063] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.419679][T16063] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.556587][T14685] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  915.563813][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.566662][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.581567][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  915.640923][ T4798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.644437][ T4798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.649704][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  915.938437][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'.
[  919.136751][T16582] ceph: No mds server is up or the cluster is laggy
[  919.137123][   T22] libceph: connect (1)[c::]:6789 error -101
[  919.137224][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  919.214015][T16602] ubi31: attaching mtd0
[  919.215809][T16602] ubi31: scanning is finished
[  919.399327][   T22] libceph: connect (1)[c::]:6789 error -101
[  919.402979][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  919.825286][T16602] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  920.919793][T16618] netlink: 'syz.2.3332': attribute type 2 has an invalid length.
[  920.921915][T16618] netlink: 'syz.2.3332': attribute type 1 has an invalid length.
[  920.923939][T16618] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3332'.
[  922.546664][   T22] libceph: connect (1)[c::]:6789 error -101
[  922.548446][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  922.584632][T16655] ceph: No mds server is up or the cluster is laggy
[  922.619824][T16660] vxfs: WRONG superblock magic 00000000 at 1
[  922.621662][T16660] vxfs: WRONG superblock magic 00000000 at 8
[  922.623217][T16660] vxfs: can't find superblock.
[  925.149141][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  925.151011][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  926.191889][T16720] loop2: detected capacity change from 0 to 8
[  926.431504][T16720] SQUASHFS error: Unable to read inode 0xe3
[  926.456960][ T4458] libceph: connect (1)[c::]:6789 error -101
[  926.464076][T16725] ceph: No mds server is up or the cluster is laggy
[  927.310665][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  927.310842][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  927.360759][ T4458] libceph: mon0 (1)[c::]:6789 connect error
[  927.362505][T16716] vxfs: WRONG superblock magic 00000000 at 1
[  927.362661][T16716] vxfs: WRONG superblock magic 00000000 at 8
[  927.362672][T16716] vxfs: can't find superblock.
[  927.482032][T16744] loop2: detected capacity change from 0 to 8
[  929.042794][T16776] lo speed is unknown, defaulting to 1000
[  929.044505][T16776] lo speed is unknown, defaulting to 1000
[  929.046262][T16776] lo speed is unknown, defaulting to 1000
[  929.050572][T16776] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  929.115444][T16776] lo speed is unknown, defaulting to 1000
[  929.117557][T16776] lo speed is unknown, defaulting to 1000
[  929.121156][T16776] lo speed is unknown, defaulting to 1000
[  929.133133][T16776] lo speed is unknown, defaulting to 1000
[  930.137012][T16793] loop2: detected capacity change from 0 to 256
[  930.240171][T16793] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  930.918427][T16759] netlink: 'syz.5.3369': attribute type 2 has an invalid length.
[  930.920805][T16759] netlink: 'syz.5.3369': attribute type 1 has an invalid length.
[  930.924268][T16759] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3369'.
[  931.873053][T16822] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3386'.
[  934.095138][T16861] loop3: detected capacity change from 0 to 2048
[  934.296744][T16864] loop4: detected capacity change from 0 to 32768
[  934.301021][T16861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  934.305739][T16864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3398 (16864)
[  934.311987][T16864] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  934.314688][T16864] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  934.316954][T16864] BTRFS info (device loop4): setting nodatacow, compression disabled
[  934.319010][T16864] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  934.321706][T16864] BTRFS info (device loop4): trying to use backup root at mount time
[  934.323732][T16864] BTRFS info (device loop4): turning on async discard
[  934.325698][T16864] BTRFS info (device loop4): max_inline at 0
[  934.327248][T16864] BTRFS info (device loop4): using free space tree
[  934.359826][T16861] EXT4-fs (loop3): shut down requested (2)
[  934.463756][T14685] EXT4-fs (loop3): unmounting filesystem.
[  934.484450][ T4990] BTRFS warning (device loop4): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xcc0b9558 level 0
[  934.490606][T16864] BTRFS warning (device loop4): failed to read root (objectid=4): -5
[  934.492813][T16864] BTRFS warning (device loop4): try to load backup roots slot 1
[  934.495699][ T5335] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x1be609ab level 0
[  934.499601][T16864] BTRFS warning (device loop4): couldn't read tree root
[  934.501416][T16864] BTRFS warning (device loop4): try to load backup roots slot 2
[  934.505652][T16864] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  934.508992][T16864] BTRFS warning (device loop4): couldn't read tree root
[  934.510848][T16864] BTRFS warning (device loop4): try to load backup roots slot 3
[  934.514233][T16864] BTRFS warning (device loop4): global root 2 0 already exists
[  934.516704][T16864] BTRFS error (device loop4): failed to load root extent
[  934.537036][T16864] BTRFS error (device loop4): open_ctree failed: -22
[  934.617245][T16892] netlink: 'syz.5.3394': attribute type 2 has an invalid length.
[  934.619316][T16892] netlink: 'syz.5.3394': attribute type 1 has an invalid length.
[  934.621322][T16892] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3394'.
[  935.081285][T16396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (16396)
[  935.280775][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3404'.
[  935.913192][T16927] ubi31: attaching mtd0
[  935.919977][T16927] ubi31: scanning is finished
[  936.524990][T16927] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  936.805198][ T4738] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  939.543697][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'.
[  940.157266][T16984] ubi31: attaching mtd0
[  940.163331][T16984] ubi31: scanning is finished
[  940.788921][T16984] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  941.506651][T16997] siw: device registration error -23
[  941.576810][T16997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.586069][T16997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.584451][T14688] Bluetooth: hci2: command 0x0406 tx timeout
[  943.302426][T17015] netlink: 'syz.4.3422': attribute type 2 has an invalid length.
[  943.302448][T17015] netlink: 'syz.4.3422': attribute type 1 has an invalid length.
[  943.302461][T17015] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3422'.
[  946.850293][T17073] loop5: detected capacity change from 0 to 256
[  946.960076][T17069] loop4: detected capacity change from 0 to 4096
[  947.462900][T17080] netlink: 'syz.6.3437': attribute type 2 has an invalid length.
[  947.467687][T17080] netlink: 'syz.6.3437': attribute type 1 has an invalid length.
[  947.469729][T17080] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3437'.
[  947.935294][T17081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  953.126788][T17127] ubi31: attaching mtd0
[  953.128613][T17127] ubi31: scanning is finished
[  953.331137][T17127] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  953.333253][T17127] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  953.335354][T17127] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  953.337146][T17127] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  953.339072][T17127] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  953.340882][T17127] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  953.342933][T17127] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4235123639
[  953.345630][T17127] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  953.471867][T17128] ubi31: background thread "ubi_bgt31d" started, PID 17128
[  953.678238][T17135] loop5: detected capacity change from 0 to 32768
[  953.706155][T17141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.066227][T17144] netlink: 'syz.4.3449': attribute type 2 has an invalid length.
[  954.068505][T17144] netlink: 'syz.4.3449': attribute type 1 has an invalid length.
[  954.070627][T17144] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3449'.
[  954.478808][T17141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.491389][T17135] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  954.907911][T16063] ocfs2: Unmounting device (7,5) on (node local)
[  956.660183][T17162] siw: device registration error -23
[  956.674788][T17162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.678954][T17162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.296985][T17200] netlink: 'syz.2.3463': attribute type 2 has an invalid length.
[  960.299214][T17200] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  960.301230][T17200] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3463'.
[  960.811821][T17205] loop3: detected capacity change from 0 to 2048
[  961.010093][T17205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  961.228712][T14685] EXT4-fs (loop3): unmounting filesystem.
[  961.537032][T17235] fuse: Bad value for 'fd'
[  961.562342][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'.
[  962.149331][T17252] siw: device registration error -23
[  962.152185][T17252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.155087][T17252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.081004][T17259] netlink: 'syz.4.3477': attribute type 2 has an invalid length.
[  963.101858][T17259] netlink: 'syz.4.3477': attribute type 1 has an invalid length.
[  963.116460][T17259] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3477'.
[  966.053376][T17308] fuse: Bad value for 'fd'
[  966.066084][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'.
[  967.177557][T17322] loop2: detected capacity change from 0 to 32768
[  967.341193][T17322] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  967.494027][T15445] ocfs2: Unmounting device (7,2) on (node local)
[  967.650649][T17344] siw: device registration error -23
[  967.661147][T17344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  967.664955][T17344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.844787][ T4424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  969.358432][ T4462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  969.634037][T17359] netlink: 'syz.3.3496': attribute type 2 has an invalid length.
[  969.650197][T17359] netlink: 'syz.3.3496': attribute type 1 has an invalid length.
[  969.669023][T17359] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3496'.
[  970.017631][T17372] fuse: Bad value for 'fd'
[  972.348409][T17415] siw: device registration error -23
[  972.358011][T17415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.361595][T17415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.355498][ T4309] Bluetooth: hci4: command 0x0406 tx timeout
[  974.548055][T17437] loop3: detected capacity change from 0 to 32768
[  974.600049][T17437] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  974.765843][T14685] ocfs2: Unmounting device (7,3) on (node local)
[  974.838635][T17450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  974.841246][T17450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  975.517796][T17477] netlink: 'syz.6.3524': attribute type 2 has an invalid length.
[  975.520056][T17477] netlink: 'syz.6.3524': attribute type 1 has an invalid length.
[  975.522635][T17477] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3524'.
[  977.113564][T17505] ubi31: detaching mtd0
[  977.117002][T17505] ubi31: mtd0 is detached
[  977.466195][T17515] siw: device registration error -23
[  977.476516][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  977.480104][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.880101][T17568] netlink: 'syz.3.3549': attribute type 2 has an invalid length.
[  980.882327][T17568] netlink: 'syz.3.3549': attribute type 1 has an invalid length.
[  980.884357][T17568] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3549'.
[  981.016119][ T4309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  981.020142][ T4309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  981.039649][ T4309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  981.044738][ T4309] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  981.064028][ T4309] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  981.066574][ T4309] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  981.710440][T17601] siw: device registration error -23
[  981.725837][T17601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.729539][T17601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.558322][ T5075] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.613194][T17574] lo speed is unknown, defaulting to 1000
[  982.680414][ T5075] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.786920][ T5075] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.913752][ T5075] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.970751][T17574] chnl_net:caif_netlink_parms(): no params data found
[  983.129968][ T5075] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  983.154300][T14688] Bluetooth: hci5: command 0x0409 tx timeout
[  983.175674][ T5075] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  983.193090][T17574] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.195504][T17574] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.198211][T17574] device bridge_slave_0 entered promiscuous mode
[  983.228679][ T5075] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  983.249034][ T5075] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  983.258191][T17574] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.260287][T17574] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.262947][T17574] device bridge_slave_1 entered promiscuous mode
[  983.326858][T17574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  983.513471][T17574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  984.348491][T17574] team0: Port device team_slave_0 added
[  984.350611][ T5075] tipc: Left network mode
[  984.359082][T17574] team0: Port device team_slave_1 added
[  984.461216][T17574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  984.463154][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.480370][T17574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  984.491744][T17574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  984.493685][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.504055][T17574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  984.757926][T17641] netlink: 'syz.2.3559': attribute type 2 has an invalid length.
[  984.760029][T17641] netlink: 'syz.2.3559': attribute type 1 has an invalid length.
[  984.762004][T17641] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3559'.
[  984.846184][T17574] device hsr_slave_0 entered promiscuous mode
[  984.865832][T17574] device hsr_slave_1 entered promiscuous mode
[  984.904384][T17574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  984.906650][T17574] Cannot create hsr debugfs directory
[  985.104345][T17522] Set syz1 is full, maxelem 65536 reached
[  985.234862][T14688] Bluetooth: hci5: command 0x041b tx timeout
[  985.597649][T17673] loop5: detected capacity change from 0 to 64
[  985.656659][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3566'.
[  985.659813][T17673] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3566'.
[  985.946089][T17682] siw: device registration error -23
[  985.959710][T17682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.963231][T17682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.196839][T17574] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.612007][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  986.624790][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  986.773740][T17574] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.304387][T14688] Bluetooth: hci5: command 0x040f tx timeout
[  987.328099][T17574] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.458905][T17574] netdevsim netdevsim6 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.384405][T14688] Bluetooth: hci5: command 0x0419 tx timeout
[  990.036614][T17737] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  990.039410][T17737] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  990.417475][ T5075] device hsr_slave_0 left promiscuous mode
[  990.446674][T17742] loop5: detected capacity change from 0 to 2048
[  990.488535][T17742] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  990.500556][ T5075] device hsr_slave_1 left promiscuous mode
[  990.575442][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  990.577507][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  990.580346][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  990.587682][T16063] EXT4-fs (loop5): unmounting filesystem.
[  990.590119][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.645951][T16896] libceph: connect (1)[c::]:6789 error -101
[  990.647599][T16896] libceph: mon0 (1)[c::]:6789 connect error
[  990.692675][T17733] ceph: No mds server is up or the cluster is laggy
[  990.724682][ T5075] device veth1_macvtap left promiscuous mode
[  990.726316][ T5075] device veth0_macvtap left promiscuous mode
[  990.728022][ T5075] device veth1_vlan left promiscuous mode
[  990.729523][ T5075] device veth0_vlan left promiscuous mode
[  992.238877][T17804] siw: device registration error -23
[  992.241744][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  992.244388][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  992.328618][ T5075] bond1 (unregistering): Released all slaves
[  995.729023][ T5075] team0 (unregistering): Port device team_slave_1 removed
[  997.137607][ T5075] team0 (unregistering): Port device team_slave_0 removed
[  997.335614][ T5075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  997.558083][ T5075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.391349][ T5075] bond0 (unregistering): Released all slaves
[ 1000.492587][ T4364] lo speed is unknown, defaulting to 1000
[ 1000.601671][T17574] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1000.608764][T17032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1000.750377][T17574] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1001.227995][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1001.238154][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1002.327464][T17896] lo speed is unknown, defaulting to 1000
[ 1002.329077][T17896] lo speed is unknown, defaulting to 1000
[ 1002.331003][T17896] lo speed is unknown, defaulting to 1000
[ 1002.335327][T17896] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1002.340820][T17574] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1002.396264][T17896] lo speed is unknown, defaulting to 1000
[ 1002.398289][T17896] lo speed is unknown, defaulting to 1000
[ 1002.400243][T17896] lo speed is unknown, defaulting to 1000
[ 1002.402142][T17896] lo speed is unknown, defaulting to 1000
[ 1002.408849][T17574] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1002.778686][T17574] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1002.795406][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1002.798038][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1002.802695][T17574] 8021q: adding VLAN 0 to HW filter on device team0
[ 1002.815260][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1002.817964][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1002.823389][T12279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.825347][T12279] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1002.840477][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1002.861658][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1002.869179][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1002.879563][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.881522][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1002.891092][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1002.902195][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1002.917082][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1002.932826][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1002.940914][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1002.951643][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1002.964978][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1002.984345][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1002.995810][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1003.012275][T17574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1003.018885][T17574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1003.024709][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1003.027949][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1003.350867][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1003.350984][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1003.390312][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1004.354546][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1004.354996][ T5335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1004.382499][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1004.389023][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1004.398299][T17574] device veth0_vlan entered promiscuous mode
[ 1004.403546][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1004.409986][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1004.421802][T17574] device veth1_vlan entered promiscuous mode
[ 1004.474452][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1004.477610][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1004.480771][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1004.483511][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1004.494006][T17574] device veth0_macvtap entered promiscuous mode
[ 1004.499353][T17574] device veth1_macvtap entered promiscuous mode
[ 1004.551271][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.557459][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.563227][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.567593][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.570355][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1005.264322][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.267121][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1005.288055][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.295774][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1005.299876][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1005.302516][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1005.316169][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1005.332477][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1005.356269][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.359225][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.365934][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.415732][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.422269][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.430983][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.457144][T17574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.488997][T17574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.503671][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.508109][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1005.510904][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1005.517805][T17574] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.520283][T17574] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.522818][T17574] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.526014][T17574] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.615206][T17989] ubi31: attaching mtd0
[ 1005.623164][T17989] ubi31: scanning is finished
[ 1006.208449][T17989] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1006.284401][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.289826][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.329758][T17853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1006.470547][ T4990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.488608][ T4990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.502628][T17853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1007.544949][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3545'.
[ 1019.164413][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3650'.
[ 1019.384422][ T4309] Bluetooth: hci1: command 0x0406 tx timeout
[ 1021.283130][T18252] siw: device registration error -23
[ 1021.443807][T18252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1021.455819][T18252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1023.874684][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'.
[ 1025.798059][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'.
[ 1025.840381][T18299] device gtp0 entered promiscuous mode
[ 1026.644252][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3675'.
[ 1028.906502][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'.
[ 1028.929341][T18378] device gtp0 entered promiscuous mode
[ 1030.581064][T18418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1030.583758][T18418] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1032.384666][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3698'.
[ 1032.406105][T18445] device gtp0 entered promiscuous mode
[ 1032.842228][ T4558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1033.335983][T18460] vxfs: WRONG superblock magic 00000000 at 1
[ 1033.337747][T18460] vxfs: WRONG superblock magic 00000000 at 8
[ 1033.339357][T18460] vxfs: can't find superblock.
[ 1033.831210][T18473] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1033.833930][T18473] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1034.451698][  T270] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1036.536687][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3713'.
[ 1036.556170][T18526] device gtp0 entered promiscuous mode
[ 1037.583704][T18543] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1037.586411][T18543] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1040.301516][T18588] vxfs: WRONG superblock magic 00000000 at 1
[ 1040.304248][T18588] vxfs: WRONG superblock magic 00000000 at 8
[ 1040.305891][T18588] vxfs: can't find superblock.
[ 1040.374037][T18586] ceph: No mds server is up or the cluster is laggy
[ 1040.404348][T15986] libceph: connect (1)[c::]:6789 error -101
[ 1040.414303][T15986] libceph: mon0 (1)[c::]:6789 connect error
[ 1041.041184][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'.
[ 1041.061610][T18599] device gtp1 entered promiscuous mode
[ 1041.771010][T18612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1041.774237][T18612] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1044.550158][T18653] netlink: 'syz.3.3739': attribute type 2 has an invalid length.
[ 1044.552356][T18653] netlink: 'syz.3.3739': attribute type 1 has an invalid length.
[ 1044.554545][T18653] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3739'.
[ 1045.819906][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'.
[ 1045.840284][T18673] device gtp2 entered promiscuous mode
[ 1046.923540][T18683] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1046.926468][T18683] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1048.065090][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[ 1048.068406][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[ 1048.073423][ T2059] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[ 1048.252684][T18688] ceph: No mds server is up or the cluster is laggy
[ 1048.253038][T16896] libceph: connect (1)[c::]:6789 error -101
[ 1048.253142][T16896] libceph: mon0 (1)[c::]:6789 connect error
[ 1048.284021][T18695] vxfs: WRONG superblock magic 00000000 at 1
[ 1048.285909][T18695] vxfs: WRONG superblock magic 00000000 at 8
[ 1048.287531][T18695] vxfs: can't find superblock.
[ 1049.798758][T18709] netlink: 'syz.5.3752': attribute type 2 has an invalid length.
[ 1049.801053][T18709] netlink: 'syz.5.3752': attribute type 1 has an invalid length.
[ 1049.803169][T18709] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3752'.
[ 1051.300529][T18725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1051.303236][T18725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1051.536274][T18721] device gtp3 entered promiscuous mode
[ 1053.897777][T18755] netlink: 'syz.2.3767': attribute type 2 has an invalid length.
[ 1053.899914][T18755] netlink: 'syz.2.3767': attribute type 1 has an invalid length.
[ 1053.902007][T18755] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3767'.
[ 1054.807081][T18764] device gtp1 entered promiscuous mode
[ 1056.002093][T18776] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1056.004858][T18776] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1058.175283][T18801] netlink: 'syz.3.3781': attribute type 2 has an invalid length.
[ 1058.177947][T18801] netlink: 'syz.3.3781': attribute type 1 has an invalid length.
[ 1058.180103][T18801] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3781'.
[ 1058.893580][T18804] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3784'.
[ 1059.357952][T18820] device gtp1 entered promiscuous mode
[ 1060.140099][T18835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1060.142865][T18835] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1062.573153][T18867] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3800'.
[ 1063.587703][T18887] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1063.590494][T18887] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1063.629912][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'.
[ 1066.044768][ T4580] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1066.381534][T18921] vxfs: WRONG superblock magic 00000000 at 1
[ 1066.384899][T18921] vxfs: WRONG superblock magic 00000000 at 8
[ 1066.386608][T18921] vxfs: can't find superblock.
[ 1068.292089][T18947] fuse: Bad value for 'fd'
[ 1068.676688][T18953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1068.679468][T18953] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1069.563218][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3820'.
[ 1069.701587][T17032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1070.084857][T18967] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3825'.
[ 1070.628729][T18987] vxfs: WRONG superblock magic 00000000 at 1
[ 1070.631979][T18987] vxfs: WRONG superblock magic 00000000 at 8
[ 1070.633606][T18987] vxfs: can't find superblock.
[ 1070.816519][T18984] ceph: No mds server is up or the cluster is laggy
[ 1070.826436][T16893] libceph: connect (1)[c::]:6789 error -101
[ 1070.833672][T16893] libceph: mon0 (1)[c::]:6789 connect error
[ 1071.094581][T16896] libceph: connect (1)[c::]:6789 error -101
[ 1071.096295][T16896] libceph: mon0 (1)[c::]:6789 connect error
[ 1072.334580][T19005] fuse: Bad value for 'fd'
[ 1073.514808][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3837'.
[ 1074.392915][T19041] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3841'.
[ 1075.999470][T19060] vxfs: WRONG superblock magic 00000000 at 1
[ 1076.002782][T19060] vxfs: WRONG superblock magic 00000000 at 8
[ 1076.004465][T19060] vxfs: can't find superblock.
[ 1076.851389][T19077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3850'.
[ 1077.483668][T19083] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3854'.
[ 1077.963589][T19094] loop5: detected capacity change from 0 to 1024
[ 1077.988014][T19094] EXT4-fs: Ignoring removed orlov option
[ 1077.989606][T19094] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1078.159358][T19094] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1079.050356][T16063] EXT4-fs (loop5): unmounting filesystem.
[ 1079.534508][T19117] vxfs: WRONG superblock magic 00000000 at 1
[ 1079.537057][T19117] vxfs: WRONG superblock magic 00000000 at 8
[ 1079.538715][T19117] vxfs: can't find superblock.
[ 1079.651287][T19115] ceph: No mds server is up or the cluster is laggy
[ 1079.664095][ T4364] libceph: connect (1)[c::]:6789 error -101
[ 1079.666766][ T4364] libceph: mon0 (1)[c::]:6789 connect error
[ 1080.187862][T19126] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3865'.
[ 1080.497685][T19138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3864'.
[ 1080.760588][T19133] loop6: detected capacity change from 0 to 256
[ 1081.211736][T19141] loop5: detected capacity change from 0 to 2048
[ 1081.306373][T19141] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1081.329273][T19141] EXT4-fs (loop5): shut down requested (2)
[ 1081.443697][T16063] EXT4-fs (loop5): unmounting filesystem.
[ 1082.221373][T19177] vxfs: WRONG superblock magic 00000000 at 1
[ 1082.224571][T19177] vxfs: WRONG superblock magic 00000000 at 8
[ 1082.226190][T19177] vxfs: can't find superblock.
[ 1082.790138][T19186] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3877'.
[ 1082.903338][T19158] loop6: detected capacity change from 0 to 32768
[ 1083.822953][T19193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3880'.
[ 1084.442776][T19158] (syz.6.3872,19158,1):ocfs2_initialize_super:2286 ERROR: status = -12
[ 1084.454639][T19158] (syz.6.3872,19158,1):ocfs2_fill_super:1176 ERROR: status = -12
[ 1085.442827][T19211] loop5: detected capacity change from 0 to 2048
[ 1085.510714][T19216] loop2: detected capacity change from 0 to 1764
[ 1085.515089][T19211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1085.541435][T19211] EXT4-fs (loop5): shut down requested (2)
[ 1085.703417][T16063] EXT4-fs (loop5): unmounting filesystem.
[ 1086.658723][T19251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3892'.
[ 1086.786011][T19241] vxfs: WRONG superblock magic 00000000 at 1
[ 1086.790406][T19241] vxfs: WRONG superblock magic 00000000 at 8
[ 1086.792240][T19241] vxfs: can't find superblock.
[ 1087.207117][T19256] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3891'.
[ 1088.387207][T19273] loop6: detected capacity change from 0 to 2048
[ 1088.920539][T19273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1089.448184][T19273] EXT4-fs (loop6): shut down requested (2)
[ 1089.506358][T17574] EXT4-fs (loop6): unmounting filesystem.
[ 1089.793876][T19260] loop4: detected capacity change from 0 to 32768
[ 1089.837983][T19260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1089.855153][T19260] 
[ 1089.855909][T19260] ======================================================
[ 1089.857703][T19260] WARNING: possible circular locking dependency detected
[ 1089.859580][T19260] 6.1.142-syzkaller #0 Not tainted
[ 1089.860923][T19260] ------------------------------------------------------
[ 1089.862760][T19260] syz.4.3894/19260 is trying to acquire lock:
[ 1089.864451][T19260] ffff0000fe6a5488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x15c/0x644
[ 1089.867458][T19260] 
[ 1089.867458][T19260] but task is already holding lock:
[ 1089.869516][T19260] ffff000105c60660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x30c
[ 1089.872444][T19260] 
[ 1089.872444][T19260] which lock already depends on the new lock.
[ 1089.872444][T19260] 
[ 1089.875228][T19260] 
[ 1089.875228][T19260] the existing dependency chain (in reverse order) is:
[ 1089.877650][T19260] 
[ 1089.877650][T19260] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[ 1089.880020][T19260]        down_read+0x64/0x304
[ 1089.881293][T19260]        ocfs2_read_virt_blocks+0x244/0x8e0
[ 1089.882863][T19260]        ocfs2_find_entry+0x318/0x1c5c
[ 1089.884324][T19260]        ocfs2_find_files_on_disk+0x128/0x410
[ 1089.885994][T19260]        ocfs2_lookup_ino_from_name+0x60/0x114
[ 1089.887718][T19260]        ocfs2_get_system_file_inode+0x2b8/0x644
[ 1089.889524][T19260]        ocfs2_init_global_system_inodes+0x2a8/0x594
[ 1089.891368][T19260]        ocfs2_fill_super+0x210c/0x3e98
[ 1089.892951][T19260]        mount_bdev+0x264/0x358
[ 1089.894272][T19260]        ocfs2_mount+0x44/0x58
[ 1089.895633][T19260]        legacy_get_tree+0xd4/0x16c
[ 1089.897145][T19260]        vfs_get_tree+0x90/0x274
[ 1089.898520][T19260]        do_new_mount+0x228/0x810
[ 1089.899941][T19260]        path_mount+0x5b4/0xe78
[ 1089.901300][T19260]        __arm64_sys_mount+0x49c/0x584
[ 1089.902831][T19260]        invoke_syscall+0x98/0x2bc
[ 1089.904282][T19260]        el0_svc_common+0x138/0x258
[ 1089.905715][T19260]        do_el0_svc+0x58/0x13c
[ 1089.907039][T19260]        el0_svc+0x58/0x138
[ 1089.908284][T19260]        el0t_64_sync_handler+0x84/0xf0
[ 1089.909822][T19260]        el0t_64_sync+0x18c/0x190
[ 1089.911211][T19260] 
[ 1089.911211][T19260] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}:
[ 1089.913566][T19260]        __lock_acquire+0x293c/0x6544
[ 1089.915015][T19260]        lock_acquire+0x20c/0x644
[ 1089.916446][T19260]        __mutex_lock_common+0x190/0x1f38
[ 1089.918108][T19260]        mutex_lock_nested+0x38/0x44
[ 1089.919599][T19260]        ocfs2_get_system_file_inode+0x15c/0x644
[ 1089.921401][T19260]        ocfs2_reserve_local_alloc_bits+0xe0/0x278c
[ 1089.923234][T19260]        ocfs2_reserve_clusters_with_limit+0x198/0x9e0
[ 1089.925118][T19260]        ocfs2_lock_allocators+0x27c/0x518
[ 1089.926738][T19260]        ocfs2_write_begin_nolock+0x1d08/0x3ab4
[ 1089.928551][T19260]        ocfs2_write_begin+0x1b4/0x30c
[ 1089.930139][T19260]        generic_perform_write+0x230/0x4b0
[ 1089.931850][T19260]        __generic_file_write_iter+0x168/0x37c
[ 1089.933526][T19260]        ocfs2_file_write_iter+0x1300/0x1bf4
[ 1089.935255][T19260]        do_iter_write+0x530/0x91c
[ 1089.936695][T19260]        do_pwritev+0x1c8/0x2fc
[ 1089.938051][T19260]        __arm64_sys_pwritev2+0xd4/0x108
[ 1089.939624][T19260]        invoke_syscall+0x98/0x2bc
[ 1089.941074][T19260]        el0_svc_common+0x138/0x258
[ 1089.942501][T19260]        do_el0_svc+0x58/0x13c
[ 1089.943848][T19260]        el0_svc+0x58/0x138
[ 1089.945127][T19260]        el0t_64_sync_handler+0x84/0xf0
[ 1089.946696][T19260]        el0t_64_sync+0x18c/0x190
[ 1089.948074][T19260] 
[ 1089.948074][T19260] other info that might help us debug this:
[ 1089.948074][T19260] 
[ 1089.950958][T19260]  Possible unsafe locking scenario:
[ 1089.950958][T19260] 
[ 1089.953082][T19260]        CPU0                    CPU1
[ 1089.954543][T19260]        ----                    ----
[ 1089.956123][T19260]   lock(&ocfs2_file_ip_alloc_sem_key);
[ 1089.957695][T19260]                                lock(&osb->system_file_mutex);
[ 1089.959944][T19260]                                lock(&ocfs2_file_ip_alloc_sem_key);
[ 1089.962218][T19260]   lock(&osb->system_file_mutex);
[ 1089.963649][T19260] 
[ 1089.963649][T19260]  *** DEADLOCK ***
[ 1089.963649][T19260] 
[ 1089.966064][T19260] 3 locks held by syz.4.3894/19260:
[ 1089.967471][T19260]  #0: ffff0000db0d0460 (sb_writers#22){.+.+}-{0:0}, at: do_pwritev+0x1b4/0x2fc
[ 1089.970384][T19260]  #1: ffff000105c609c8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x3a4/0x1bf4
[ 1089.973595][T19260]  #2: ffff000105c60660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x30c
[ 1089.976716][T19260] 
[ 1089.976716][T19260] stack backtrace:
[ 1089.978331][T19260] CPU: 0 PID: 19260 Comm: syz.4.3894 Not tainted 6.1.142-syzkaller #0
[ 1089.980585][T19260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1089.983442][T19260] Call trace:
[ 1089.984368][T19260]  dump_backtrace+0x1c8/0x1f4
[ 1089.985733][T19260]  show_stack+0x2c/0x3c
[ 1089.986989][T19260]  __dump_stack+0x30/0x40
[ 1089.988185][T19260]  dump_stack_lvl+0xf8/0x160
[ 1089.989464][T19260]  dump_stack+0x1c/0x5c
[ 1089.990630][T19260]  print_circular_bug+0x148/0x1b0
[ 1089.992026][T19260]  check_noncircular+0x240/0x2d4
[ 1089.993416][T19260]  __lock_acquire+0x293c/0x6544
[ 1089.994788][T19260]  lock_acquire+0x20c/0x644
[ 1089.996018][T19260]  __mutex_lock_common+0x190/0x1f38
[ 1089.997464][T19260]  mutex_lock_nested+0x38/0x44
[ 1089.998793][T19260]  ocfs2_get_system_file_inode+0x15c/0x644
[ 1090.000461][T19260]  ocfs2_reserve_local_alloc_bits+0xe0/0x278c
[ 1090.002223][T19260]  ocfs2_reserve_clusters_with_limit+0x198/0x9e0
[ 1090.004062][T19260]  ocfs2_lock_allocators+0x27c/0x518
[ 1090.005531][T19260]  ocfs2_write_begin_nolock+0x1d08/0x3ab4
[ 1090.007129][T19260]  ocfs2_write_begin+0x1b4/0x30c
[ 1090.008506][T19260]  generic_perform_write+0x230/0x4b0
[ 1090.009989][T19260]  __generic_file_write_iter+0x168/0x37c
[ 1090.011613][T19260]  ocfs2_file_write_iter+0x1300/0x1bf4
[ 1090.013116][T19260]  do_iter_write+0x530/0x91c
[ 1090.014365][T19260]  do_pwritev+0x1c8/0x2fc
[ 1090.015594][T19260]  __arm64_sys_pwritev2+0xd4/0x108
[ 1090.017035][T19260]  invoke_syscall+0x98/0x2bc
[ 1090.018384][T19260]  el0_svc_common+0x138/0x258
[ 1090.019736][T19260]  do_el0_svc+0x58/0x13c
[ 1090.020917][T19260]  el0_svc+0x58/0x138
[ 1090.022098][T19260]  el0t_64_sync_handler+0x84/0xf0
[ 1090.023532][T19260]  el0t_64_sync+0x18c/0x190
[ 1090.024783][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1090.184689][T15051] ocfs2: Unmounting device (7,4) on (node local)