last executing test programs:

1m54.343089692s ago: executing program 1 (id=1846):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0)

1m54.293461933s ago: executing program 1 (id=1847):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

1m53.341506975s ago: executing program 1 (id=1852):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000140))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000300), 0xfffffffeffffffff})

1m51.729167745s ago: executing program 1 (id=1856):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
openat(r0, &(0x7f0000000080)='./file3\x00', 0x0, 0x0)

1m51.34332405s ago: executing program 1 (id=1861):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1409, 0x1, 0x50bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x22}, 0x1, 0x0, 0x0, 0x40051}, 0x20000004)

1m49.160431337s ago: executing program 1 (id=1870):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m49.060094918s ago: executing program 32 (id=1870):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.472313425s ago: executing program 2 (id=2248):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)

7.176185011s ago: executing program 5 (id=2251):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x488c5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800)

7.075952002s ago: executing program 3 (id=2252):
r0 = getpid()
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x80)
syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(0xffffffffffffffff)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x803, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6, 0x6, 0x0, 0xfffffefc}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)

6.947321054s ago: executing program 0 (id=2253):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x140)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x74aac000)

6.241443213s ago: executing program 5 (id=2254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

6.144036654s ago: executing program 5 (id=2255):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3})

6.039312255s ago: executing program 3 (id=2256):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000240)={0xa, 0x4}, 0xc)

5.886962627s ago: executing program 3 (id=2257):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800000000000, 0x0, 0x4, 0x400000000, 0x5, 0x7fffffff}, 0x0, 0x0)

5.872308727s ago: executing program 0 (id=2258):
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0)

5.012165318s ago: executing program 5 (id=2259):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0))
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000440))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x4c}}, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3e, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000006c0)="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", 0x170}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f", 0xb3}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1", 0x10}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

5.011618918s ago: executing program 2 (id=2260):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={<r5=>r4, 0x2, 0x2, 0x7})
write$vga_arbiter(r5, &(0x7f0000000080)=@unlock_all, 0xb)

4.765042431s ago: executing program 3 (id=2261):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000d0a01010000000000000000010900020073797a32000000000900010073797a31000000000900c7b473797a31000000009b0148c607342bfc0853b94b7dc122220b2d726af0da9ed2ce5fd6993ffc7249431bac95bd7a3b798732c7f096e97161b42f1e7cb370108fd2f8ae9f8fffebb0a6f52af4909ff4b922e5993c693d2f11d6af3f8ca075ab8c343b49cf26c6f1fb3b8fd74a670eebd4fc731609946e2bf71db70205d7bc880b823934e1a597ff6fa0b0d3f9792cd510147ad600950ab72eff8df7e673820b4da3d85ed95509bf"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004880)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0)

4.736499682s ago: executing program 5 (id=2262):
prctl$PR_SET_SECCOMP(0x4a, 0x2, &(0x7f0000000180)={0x0, 0x0})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x488c5)
bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800)
socket$inet6(0xa, 0x1, 0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000004a00), 0x0, 0x4000005)
recvmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x12162)

4.085256779s ago: executing program 2 (id=2264):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f00000000c0), 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0xffffffd3, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0)
recvmmsg(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000380)={0x50}, 0x50)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002})
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000003c0)={[{@nossd_spread}, {@nodatacow}, {@subvol={'subvol', 0x3d, 'autodefrag'}}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x6b, 0x39, 0x65, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")

4.04153609s ago: executing program 0 (id=2265):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000210000000a7c000000060a010400000000000000000200000014000480100001800900010068617368000000004c00058008000140000060030800014000000000080001400000002108000240000000000800024000000000080001400000002b08000140000000ff0800024000000000080001400000001008000b4000000001140000001100010000000000000000000000000aa384b43e79e85905010c39494c0852f9518f5488864ca77df32ab51cbf93b7a23f9a8ee9fbf74714c750b4bcca00e9b67dd04ec3471431737c73ee70d9b7fb6dfcc0a7e2b2c187d1a1dfe8e6016f424b50d1439959388ba1a3b8733d"], 0xa4}}, 0x488c5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800)

3.128586462s ago: executing program 0 (id=2268):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44881)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

3.127274982s ago: executing program 2 (id=2269):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24008800)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004700)='/sys/power/reserved_size', 0x2001, 0xa6)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
syz_io_uring_setup(0x395b, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x3ac}, &(0x7f0000000600)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$inet6(0xa, 0x800, 0x4)
setsockopt$inet_opts(r7, 0x0, 0x6, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0xa)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x4000000)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x719d}]}}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00008d8000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, 0x0, 0x148, 0x543, 0x23456})

3.031217823s ago: executing program 0 (id=2270):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)

2.046980725s ago: executing program 2 (id=2271):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800000000000, 0x0, 0x4, 0x400000000, 0x5, 0x7fffffff}, 0x0, 0x0)

2.024934835s ago: executing program 4 (id=2272):
prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

1.959024016s ago: executing program 2 (id=2273):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
close(r5)

1.887264817s ago: executing program 4 (id=2274):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

1.866947267s ago: executing program 4 (id=2275):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x5)
r5 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r5, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r6=>r5, 0x2, 0x2, 0x7})
write$vga_arbiter(r6, &(0x7f0000000080)=@unlock_all, 0xb)

1.546010541s ago: executing program 5 (id=2276):
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0)

1.150545296s ago: executing program 4 (id=2277):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000440), 0x0, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}}, 0x0)

1.056907767s ago: executing program 3 (id=2278):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x488c5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800)

132.206649ms ago: executing program 3 (id=2279):
syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10080, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/292], 0x1, 0x6b8, &(0x7f0000001100)="$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")

130.919558ms ago: executing program 4 (id=2280):
socket$packet(0x11, 0x2, 0x300)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x9, 0xc8}}}, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

19.38729ms ago: executing program 4 (id=2281):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x23, 0x6, {0x6, 0x21, "3d7df816"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=2282):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_submit(0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
semget$private(0x0, 0x7, 0x8)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@remote, 0xe})
semctl$SETALL(0x0, 0x0, 0xe, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000040)=0x7, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff64", 0x7, 0x4044080, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)

kernel console output (not intermixed with test programs):

e_0: link becomes ready
[   48.637795][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   48.640458][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.642980][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.653073][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.658765][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   48.664794][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   48.671789][ T4021] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.675804][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   48.678494][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.680935][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.682766][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.687124][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.689866][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.693165][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   48.700406][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   48.702566][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   48.718054][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   48.720770][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.723192][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.725142][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.727560][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   48.730202][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.732851][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   48.748627][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   48.756407][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   48.759909][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   48.765403][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.784242][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   48.786995][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   48.789621][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.792768][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   48.796198][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.808354][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   48.815008][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   48.818698][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.821356][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   48.826135][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   48.849435][ T4021] device veth0_vlan entered promiscuous mode
[   48.871717][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   48.874988][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   48.877941][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.880654][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.896215][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.900774][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   48.916116][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.919011][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.921496][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   48.927118][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   48.929719][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.932383][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.937610][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.940032][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.952412][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.974547][ T4021] device veth1_vlan entered promiscuous mode
[   48.977006][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   48.979646][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   48.981684][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   48.991086][ T4022] device veth0_vlan entered promiscuous mode
[   49.013653][ T4022] device veth1_vlan entered promiscuous mode
[   49.041649][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.045365][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.047948][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   49.050115][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   49.060038][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.067651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.070292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.073381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.074582][ T4076] Bluetooth: hci3: command 0x041b tx timeout
[   49.077711][ T4076] Bluetooth: hci4: command 0x041b tx timeout
[   49.099590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   49.101767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   49.117762][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.131585][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.140756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.143543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.144496][   T13] Bluetooth: hci2: command 0x041b tx timeout
[   49.146540][ T4076] Bluetooth: hci1: command 0x041b tx timeout
[   49.150196][ T4076] Bluetooth: hci0: command 0x041b tx timeout
[   49.152603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.162654][ T4021] device veth0_macvtap entered promiscuous mode
[   49.175456][ T4022] device veth0_macvtap entered promiscuous mode
[   49.181771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.184460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.187044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.189852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.192444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.196753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.199655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.204921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.210364][ T4021] device veth1_macvtap entered promiscuous mode
[   49.221736][ T4022] device veth1_macvtap entered promiscuous mode
[   49.244748][ T4025] device veth0_vlan entered promiscuous mode
[   49.257379][ T4024] device veth0_vlan entered promiscuous mode
[   49.263015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.265947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.268753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.271813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.280862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.283401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.295518][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.305694][ T4025] device veth1_vlan entered promiscuous mode
[   49.312879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.317475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.320259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.323225][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.327576][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.331526][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.340289][ T4024] device veth1_vlan entered promiscuous mode
[   49.347823][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.351192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.353789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.358857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.362089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.365441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.368382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.377035][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.379909][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.383686][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.398113][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.401006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.410787][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.413242][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.417711][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.419995][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.426090][ T4021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.428431][ T4021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.430808][ T4021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.433150][ T4021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.439713][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   49.442551][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.502169][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.505709][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.508481][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.511207][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.515871][ T4025] device veth0_macvtap entered promiscuous mode
[   49.528466][ T4024] device veth0_macvtap entered promiscuous mode
[   49.571276][ T4023] device veth0_vlan entered promiscuous mode
[   49.578369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.580981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.583469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   49.588204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.591046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.593621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.598190][ T4025] device veth1_macvtap entered promiscuous mode
[   49.603266][ T4024] device veth1_macvtap entered promiscuous mode
[   49.610611][  T295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.612796][  T295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.628884][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.631685][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.636422][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   49.670777][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.673741][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.678139][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.681226][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.686834][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.693564][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.697687][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.700466][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.703194][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.711907][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.719083][ T4023] device veth1_vlan entered promiscuous mode
[   49.726032][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   49.728641][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.731549][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.735730][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.738769][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.751670][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.754767][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.757434][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.760139][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.762800][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.767183][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.771305][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.780267][  T397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.781984][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.782401][  T397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.788051][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.790473][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.792790][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.798643][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   49.804435][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.807235][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.809901][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   49.818283][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.821037][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.823648][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.827645][  T295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.828731][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.829699][  T295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.832368][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.838113][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.841963][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.859854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   49.862483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.866659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.889916][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.891016][ T4025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.892117][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.900936][ T4025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.906536][ T4025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.908945][ T4025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.938815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.080827][ T4106] loop2: detected capacity change from 0 to 2048
[   50.087181][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.090239][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.100401][ T4023] device veth0_macvtap entered promiscuous mode
[   50.122666][  T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.125431][  T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.128498][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.138445][ T4106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   50.140232][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.171985][ T4023] device veth1_macvtap entered promiscuous mode
[   50.207692][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.209926][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.249273][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.251999][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.287527][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.290273][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.292931][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.311762][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.317777][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.320407][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.323388][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.327655][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.330330][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.333238][ T4112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   50.339503][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   50.343509][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.349256][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.397833][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.400727][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.403259][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.406722][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.409273][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.412053][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.420965][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.423823][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.428896][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.431905][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.436804][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.444355][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.457553][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.462495][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.467248][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.469977][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.472626][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.477012][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.494389][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.497089][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.499858][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.506586][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.522444][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.525299][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.528119][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.554907][ T4023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.561409][ T4023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.563742][ T4023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.569970][ T4023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.603495][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.605867][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.608843][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.790404][ T4122] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   50.810533][ T4122] device syzkaller1 entered promiscuous mode
[   50.852052][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.866654][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.902884][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.913249][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.924126][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.931013][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   51.118192][ T4134] netlink: 'syz.2.13': attribute type 12 has an invalid length.
[   51.137647][ T4135] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   51.141327][ T4135] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   51.159532][ T4075] Bluetooth: hci4: command 0x040f tx timeout
[   51.161743][ T4075] Bluetooth: hci3: command 0x040f tx timeout
[   51.234505][ T4075] Bluetooth: hci0: command 0x040f tx timeout
[   51.240405][ T4075] Bluetooth: hci1: command 0x040f tx timeout
[   51.242172][ T4075] Bluetooth: hci2: command 0x040f tx timeout
[   51.295458][ T4143] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   51.321478][ T4144] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   51.343746][ T4144] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98
[   51.631084][ T4156] netlink: 'syz.2.21': attribute type 4 has an invalid length.
[   51.762635][ T4156] netlink: 'syz.2.21': attribute type 4 has an invalid length.
[   51.994795][ T4163] loop3: detected capacity change from 0 to 32768
[   52.072611][ T1534] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x304/0x404, xfs_sb block 0x0 
[   52.081761][ T1534] XFS (loop3): Unmount and run xfs_repair
[   52.093219][ T1534] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   52.103675][ T1534] 00000000: 58 46 53 42 ff ff ff ff 00 00 00 00 00 00 10 00  XFSB............
[   52.117889][ T1534] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   52.132230][ T1534] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[   52.145615][ T1534] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 04 20  ............... 
[   52.161675][ T1534] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22  .......!......."
[   52.167449][ T1534] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[   52.173436][ T1534] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00  ................
[   52.177516][ T1534] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64  ...............d
[   52.180725][ T4163] XFS (loop3): SB validate failed with error -74.
[   52.827818][ T4186] device bridge_slave_1 left promiscuous mode
[   52.830111][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.879916][ T4186] device bridge_slave_0 left promiscuous mode
[   52.881631][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.201183][ T4190] loop2: detected capacity change from 0 to 256
[   53.234513][ T4045] Bluetooth: hci3: command 0x0419 tx timeout
[   53.237481][ T4045] Bluetooth: hci4: command 0x0419 tx timeout
[   53.304028][ T4045] Bluetooth: hci2: command 0x0419 tx timeout
[   53.305924][ T4045] Bluetooth: hci1: command 0x0419 tx timeout
[   53.307603][ T4045] Bluetooth: hci0: command 0x0419 tx timeout
[   53.712134][ T4200] netlink: 'syz.4.35': attribute type 10 has an invalid length.
[   53.796810][ T4200] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.992435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[   54.431109][ T4218] 8021q: VLANs not supported on vcan0
[   54.447734][ T4219] netlink: 'syz.4.42': attribute type 4 has an invalid length.
[   54.501078][ T4222] siw: device registration error -23
[   54.547666][ T4223] netlink: 'syz.4.42': attribute type 4 has an invalid length.
[   54.991948][ T4236] bond0: (slave wlan1): Releasing backup interface
[   55.394388][ T4071] Bluetooth: hci0: command 0x0405 tx timeout
[   55.423720][ T4242] netlink: 'syz.1.60': attribute type 10 has an invalid length.
[   55.469112][ T4242] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   55.472417][ T4242] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   55.532179][ T4242] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   55.544950][ T4242] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   55.692126][ T4268] __nla_validate_parse: 68 callbacks suppressed
[   55.692140][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[   55.770488][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'.
[   55.772859][ T4269] device bridge_slave_1 left promiscuous mode
[   55.834528][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.881132][ T4269] device bridge_slave_0 left promiscuous mode
[   55.886398][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.108737][ T4272] netlink: 35740 bytes leftover after parsing attributes in process `syz.2.58'.
[   56.111557][ T4273] netlink: 'syz.1.59': attribute type 4 has an invalid length.
[   56.122673][ T4272] netlink: 35740 bytes leftover after parsing attributes in process `syz.2.58'.
[   56.147945][ T4272] Zero length message leads to an empty skb
[   56.151058][ T4275] netlink: 'syz.1.59': attribute type 4 has an invalid length.
[   56.542633][ T4289] IPVS: Scheduler module ip_vs_sip not found
[   56.705588][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   56.711630][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   56.764608][ T4298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.909134][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'.
[   56.957377][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'.
[   57.136685][ T4319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.77'.
[   57.181928][ T4324] netlink: 'syz.3.78': attribute type 4 has an invalid length.
[   57.246569][ T4326] netlink: 'syz.3.78': attribute type 4 has an invalid length.
[   57.436798][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   57.474478][ T4076] Bluetooth: hci0: command 0x0c1a tx timeout
[   57.567776][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'.
[   57.704858][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   57.707323][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   57.981946][ T4357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.091742][ T4362] bond0: (slave bond_slave_0): Releasing backup interface
[   58.214718][ T4357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.387127][ T4357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.509778][ T4357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.567429][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.569467][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.585369][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.587382][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.854776][ T4357] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.870750][ T4357] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.889740][ T4357] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.903037][ T4357] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.554040][ T4075] Bluetooth: hci0: command 0x0c1a tx timeout
[   60.672948][ T4378] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.675729][ T4378] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.678151][ T4378] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.680464][ T4378] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.810663][ T4396] netlink: 'syz.1.101': attribute type 4 has an invalid length.
[   60.835002][ T4398] netlink: 'syz.1.101': attribute type 4 has an invalid length.
[   60.845359][ T4383] __nla_validate_parse: 5 callbacks suppressed
[   60.845372][ T4383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'.
[   60.924609][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'.
[   60.928666][ T4419] syz.1.113 sent an empty control message without MSG_MORE.
[   60.990631][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   61.127446][ T4436] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[   61.139721][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   61.150122][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   61.189460][ T4436] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[   61.252923][ T4439] device sit0 entered promiscuous mode
[   61.272176][ T4439] netlink: 'syz.1.121': attribute type 3 has an invalid length.
[   61.283022][ T4439] netlink: 1 bytes leftover after parsing attributes in process `syz.1.121'.
[   61.288144][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'.
[   61.431163][ T4450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'.
[   61.525508][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   61.568583][ T4461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[   61.620134][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.700266][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.711209][ T4465] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20)
[   61.768052][ T4467] netlink: 'syz.2.131': attribute type 10 has an invalid length.
[   61.938663][ T4478] netlink: 'syz.0.134': attribute type 4 has an invalid length.
[   62.035750][ T4482] 8021q: VLANs not supported on vcan0
[   62.038815][ T4486] netlink: 'syz.4.138': attribute type 1 has an invalid length.
[   62.041247][ T4486] netlink: 'syz.4.138': attribute type 4 has an invalid length.
[   62.054767][ T4478] netlink: 'syz.0.134': attribute type 4 has an invalid length.
[   62.578678][ T4505] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[   62.898029][ T4521] 8021q: VLANs not supported on vcan0
[   63.217351][ T4540] netlink: 'syz.4.159': attribute type 10 has an invalid length.
[   63.448866][ T4556] 8021q: VLANs not supported on vcan0
[   63.840510][ T4576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.859470][ T4585] bond0: (slave bond_slave_0): Releasing backup interface
[   63.911049][ T4576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.055296][ T4576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.142641][ T4576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.158271][ T4599] netlink: 'syz.2.177': attribute type 10 has an invalid length.
[   64.265445][ T4576] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.271488][ T4576] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.278231][ T4576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.283756][ T4576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.485192][ T4627] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   64.611026][ T4637] 8021q: VLANs not supported on vcan0
[   64.672208][ T4593] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   64.766828][ T4640] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.909425][ T4661] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.932459][ T4640] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.976289][ T4640] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.035613][ T4640] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.163654][ T4640] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.170226][ T4640] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.176131][ T4640] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.183425][ T4640] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.339945][ T4678] 8021q: VLANs not supported on vcan0
[   65.517362][ T4698] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   65.813065][ T4717] xt_hashlimit: size too large, truncated to 1048576
[   65.956971][ T4725] device bond0 entered promiscuous mode
[   65.965407][ T4725] device bond_slave_0 entered promiscuous mode
[   65.969555][ T4725] device bond_slave_1 entered promiscuous mode
[   65.973727][ T4725] device wlan1 entered promiscuous mode
[   65.982830][ T4725] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.028380][ T4725] device bond0 left promiscuous mode
[   66.030174][ T4725] device bond_slave_0 left promiscuous mode
[   66.032096][ T4725] device bond_slave_1 left promiscuous mode
[   66.036555][ T4725] device wlan1 left promiscuous mode
[   66.100447][ T4723] __nla_validate_parse: 20 callbacks suppressed
[   66.100462][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   66.166204][ T4723] bond0: (slave bond_slave_0): Releasing backup interface
[   66.221740][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'.
[   66.240421][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.248289][ T4714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'.
[   66.419080][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.427467][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.938547][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   66.951412][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   67.145252][ T4775] validate_nla: 6 callbacks suppressed
[   67.145264][ T4775] netlink: 'syz.1.244': attribute type 4 has an invalid length.
[   67.193639][ T4775] netlink: 'syz.1.244': attribute type 4 has an invalid length.
[   67.239343][ T4779] xt_socket: unknown flags 0x8
[   67.350824][ T4784] netlink: 'syz.0.249': attribute type 2 has an invalid length.
[   67.353049][ T4784] netlink: 'syz.0.249': attribute type 8 has an invalid length.
[   67.365351][ T4784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.249'.
[   67.398497][    T9] bond0 (unregistering): Released all slaves
[   67.420650][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[   67.423149][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[   67.825776][ T4802] netlink: 'syz.0.258': attribute type 4 has an invalid length.
[   67.939404][ T4804] netlink: 'syz.0.258': attribute type 4 has an invalid length.
[   68.353438][ T4818] 8021q: VLANs not supported on vcan0
[   68.426392][ T4821] device veth0 entered promiscuous mode
[   69.089518][ T4846] No such timeout policy "syz1"
[   69.297327][ T4854] 8021q: VLANs not supported on vcan0
[   69.627053][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[   69.629019][ T3322] cfg80211: failed to load regulatory.db
[   69.629379][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[   70.453331][ T4882] netlink: 'syz.1.284': attribute type 2 has an invalid length.
[   70.951025][ T4890] 8021q: VLANs not supported on vcan0
[   71.174272][ T4899] tipc: Started in network mode
[   71.175688][ T4899] tipc: Node identity ce80a28c9d8b, cluster identity 4711
[   71.177851][ T4899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.201874][ T4899] device syzkaller0 entered promiscuous mode
[   71.240598][ T4896] tipc: Resetting bearer <eth:syzkaller0>
[   71.282039][ T4896] tipc: Disabling bearer <eth:syzkaller0>
[   71.351923][ T4902] netlink: 'syz.2.292': attribute type 4 has an invalid length.
[   71.383473][ T4902] netlink: 'syz.2.292': attribute type 4 has an invalid length.
[   72.102219][ T4922] 8021q: VLANs not supported on vcan0
[   72.184994][ T4927] netlink: 'syz.1.304': attribute type 4 has an invalid length.
[   72.237114][ T4930] __nla_validate_parse: 2 callbacks suppressed
[   72.237128][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'.
[   72.308900][ T4934] netlink: 'syz.1.304': attribute type 4 has an invalid length.
[   72.490979][ T4942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.575040][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   73.047842][ T4971] netlink: 'syz.0.321': attribute type 4 has an invalid length.
[   73.164362][ T4980] netlink: 'syz.0.321': attribute type 4 has an invalid length.
[   73.700136][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'.
[   73.704349][ T5012] device hsr0 entered promiscuous mode
[   73.813307][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   74.986498][ T5062] netlink: 'syz.1.352': attribute type 4 has an invalid length.
[   75.045949][ T5062] netlink: 'syz.1.352': attribute type 4 has an invalid length.
[   75.113620][ T5069] 8021q: VLANs not supported on vcan0
[   75.121105][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[   75.267651][ T5078] tipc: Started in network mode
[   75.269084][ T5078] tipc: Node identity ac14140f, cluster identity 4711
[   75.271307][ T5078] tipc: New replicast peer: 255.255.255.255
[   75.299161][ T5078] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.454456][    T7] tipc: Node number set to 2886997007
[   76.484076][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.486343][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.233784][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.924615][ T5095] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.926901][ T5095] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.929113][ T5095] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.931711][ T5095] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.043978][ T5098] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   78.067003][ T5099] bridge0: port 3(gretap0) entered blocking state
[   78.069158][ T5099] bridge0: port 3(gretap0) entered disabled state
[   78.072792][ T5099] device gretap0 entered promiscuous mode
[   78.081260][ T5102] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   78.218455][ T5113] tipc: New replicast peer: 255.255.255.255
[   78.220539][ T5113] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.415134][ T5128] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   78.429798][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'.
[   78.445479][ T5131] netlink: 'syz.2.380': attribute type 4 has an invalid length.
[   78.507828][ T5131] netlink: 'syz.2.380': attribute type 4 has an invalid length.
[   78.759266][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[   78.766904][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[   78.877194][ T5156] netlink: 136 bytes leftover after parsing attributes in process `syz.2.387'.
[   78.885848][ T5156] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   78.993168][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'.
[   79.001579][ T5163] device macvtap1 entered promiscuous mode
[   79.003619][ T5163] device syz_tun entered promiscuous mode
[   79.045295][ T5163] device syz_tun left promiscuous mode
[   79.230783][ T5171] device bond_slave_1 entered promiscuous mode
[   79.233315][ T5171] device vlan2 entered promiscuous mode
[   79.235155][ T5171] device bond0 entered promiscuous mode
[   79.238982][ T5171] device bond0 left promiscuous mode
[   79.240929][ T5171] device bond_slave_1 left promiscuous mode
[   79.345132][    T7] tipc: Node number set to 1393271436
[   79.549357][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[   79.633793][ T5185] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.711680][ T5185] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.787667][ T5185] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.879207][ T5185] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.897184][ T5202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.404'.
[   79.931816][ T5204] 8021q: VLANs not supported on vcan0
[   79.973424][ T5207] Unknown options in mask 700
[   79.995345][ T5185] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.001112][ T5185] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.006871][ T5185] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.012474][ T5185] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.074068][ T5211] netlink: 'syz.2.409': attribute type 4 has an invalid length.
[   80.150039][ T5211] netlink: 'syz.2.409': attribute type 4 has an invalid length.
[   80.344164][ T4076] Bluetooth: hci0: command 0x0407 tx timeout
[   80.613165][ T5235] 8021q: VLANs not supported on vcan0
[   80.836871][ T5249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input2
[   81.027715][ T5264] Cannot find add_set index 0 as target
[   81.048305][ T5264] device geneve2 entered promiscuous mode
[   81.206885][ T5268] netlink: 'syz.0.432': attribute type 4 has an invalid length.
[   81.228210][ T5278] netlink: 'syz.0.432': attribute type 4 has an invalid length.
[   81.323177][ T5281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   81.700874][ T5306] netlink: 'syz.1.445': attribute type 12 has an invalid length.
[   81.713526][ T5306] netlink: 'syz.1.445': attribute type 29 has an invalid length.
[   81.723677][ T5306] netlink: 148 bytes leftover after parsing attributes in process `syz.1.445'.
[   81.737603][ T5306] netlink: 39 bytes leftover after parsing attributes in process `syz.1.445'.
[   82.321119][ T5339] 8021q: VLANs not supported on vcan0
[   82.732722][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   82.784095][ T5367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.958549][ T5379] 8021q: VLANs not supported on vcan0
[   83.204292][ T5394] validate_nla: 5 callbacks suppressed
[   83.204305][ T5394] netlink: 'syz.3.473': attribute type 1 has an invalid length.
[   83.311754][ T5400] netlink: 'syz.2.480': attribute type 10 has an invalid length.
[   83.330345][ T5402] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[   83.425685][ T5402] device veth1_macvtap left promiscuous mode
[   83.476912][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'.
[   83.492673][ T5408] device macvtap1 entered promiscuous mode
[   83.495299][ T5408] device syz_tun entered promiscuous mode
[   83.545285][ T5415] device syz_tun left promiscuous mode
[   84.278429][ T5452] netlink: 'syz.1.500': attribute type 4 has an invalid length.
[   84.329851][ T5452] netlink: 'syz.1.500': attribute type 4 has an invalid length.
[   84.498553][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready
[   84.811294][ T5476] 8021q: VLANs not supported on vcan0
[   84.946619][ T5483] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   85.536007][ T5512] 8021q: VLANs not supported on vcan0
[   85.894660][ T5519] netlink: 'syz.1.527': attribute type 4 has an invalid length.
[   85.952392][ T5519] netlink: 'syz.1.527': attribute type 4 has an invalid length.
[   85.992891][ T5521] device syzkaller1 entered promiscuous mode
[   86.063623][ T5524] tipc: Failed to remove unknown binding: 66,3,3/0:2566983427/2566983428
[   86.071653][ T5524] tipc: Started in network mode
[   86.073153][ T5524] tipc: Node identity a18d, cluster identity 4711
[   86.082157][ T5524] tipc: Node number set to 41357
[   86.121337][ T5525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'.
[   86.525465][ T5542] netlink: 224 bytes leftover after parsing attributes in process `syz.1.537'.
[   86.528292][ T5546] 8021q: VLANs not supported on vcan0
[   86.680335][ T5551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[   86.741503][ T5551] netlink: 'syz.0.541': attribute type 10 has an invalid length.
[   86.753357][ T5551] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   86.784988][ T5551] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   86.791457][ T5551] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   86.804037][ T5551] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   87.098499][ T5576] 8021q: VLANs not supported on vcan0
[   87.260575][ T5586] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   88.106332][ T5614] device macvtap1 left promiscuous mode
[   88.123481][ T5617] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[   88.355616][ T5627] netlink: 'syz.0.568': attribute type 4 has an invalid length.
[   88.375424][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'.
[   88.560242][ T5642] netlink: 'syz.0.573': attribute type 12 has an invalid length.
[   88.562361][ T5642] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   88.581018][ T5642] netlink: 148 bytes leftover after parsing attributes in process `syz.0.573'.
[   88.583427][ T5642] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[   88.609800][ T5642] netlink: 'syz.0.573': attribute type 2 has an invalid length.
[   88.615975][ T5642] netlink: 39 bytes leftover after parsing attributes in process `syz.0.573'.
[   88.618638][ T5644] netlink: 'syz.0.573': attribute type 12 has an invalid length.
[   88.620762][ T5644] netlink: 'syz.0.573': attribute type 29 has an invalid length.
[   88.623254][ T5644] netlink: 148 bytes leftover after parsing attributes in process `syz.0.573'.
[   88.626865][ T5644] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[   88.629171][ T5644] netlink: 'syz.0.573': attribute type 2 has an invalid length.
[   88.631542][ T5644] netlink: 39 bytes leftover after parsing attributes in process `syz.0.573'.
[   89.301984][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'.
[   89.316871][ T5653] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.381132][ T5653] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.391082][ T5653] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   89.416736][ T5660] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   89.448700][ T5653] bond1: (slave wireguard0): Error -95 calling set_mac_address
[   89.721291][ T5669] netlink: 'syz.4.583': attribute type 4 has an invalid length.
[   90.325177][ T5692] 8021q: VLANs not supported on vcan0
[   90.439873][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[   90.442246][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'.
[   90.453809][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[   90.488688][ T5697] sctp: [Deprecated]: syz.1.595 (pid 5697) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.488688][ T5697] Use struct sctp_sack_info instead
[   90.501351][ T5697] sctp: [Deprecated]: syz.1.595 (pid 5697) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.501351][ T5697] Use struct sctp_sack_info instead
[   90.600623][ T5706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input3
[   90.726685][ T5703] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   90.729233][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[   91.664333][ T5720] 8021q: VLANs not supported on vcan0
[   91.678899][ T5721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.706136][ T5728] netlink: 240 bytes leftover after parsing attributes in process `syz.3.609'.
[   91.856745][ T5734] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   93.101716][ T5766] 8021q: adding VLAN 0 to HW filter on device team1
[   93.493213][ T5797] device macvtap2 entered promiscuous mode
[   93.503194][ T5797] device erspan0 entered promiscuous mode
[   93.731227][ T5811] device veth0_macvtap left promiscuous mode
[   93.817135][ T5817] sctp: [Deprecated]: syz.2.638 (pid 5817) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.817135][ T5817] Use struct sctp_sack_info instead
[   93.860178][ T5817] sctp: [Deprecated]: syz.2.638 (pid 5817) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.860178][ T5817] Use struct sctp_sack_info instead
[   93.907950][ T5819] __nla_validate_parse: 3 callbacks suppressed
[   93.907972][ T5819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'.
[   94.042903][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'.
[   94.053741][ T5825] xt_CT: No such helper "pptp"
[   94.061607][ T5830] device macvtap2 entered promiscuous mode
[   94.064393][ T5830] device erspan0 entered promiscuous mode
[   94.094552][ T5825] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.098269][ T5825] team0: Port device bond1 added
[   94.490396][ T5854] sctp: [Deprecated]: syz.4.653 (pid 5854) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.490396][ T5854] Use struct sctp_sack_info instead
[   94.503453][ T5854] sctp: [Deprecated]: syz.4.653 (pid 5854) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.503453][ T5854] Use struct sctp_sack_info instead
[   94.747941][ T5869] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   94.873629][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'.
[   95.746708][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'.
[   95.891782][ T5887] sctp: [Deprecated]: syz.0.667 (pid 5887) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.891782][ T5887] Use struct sctp_sack_info instead
[   95.897980][ T5886] validate_nla: 1 callbacks suppressed
[   95.898001][ T5886] netlink: 'syz.2.665': attribute type 10 has an invalid length.
[   95.901386][ T5887] sctp: [Deprecated]: syz.0.667 (pid 5887) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.901386][ T5887] Use struct sctp_sack_info instead
[   96.110374][ T5902] tipc: Started in network mode
[   96.111926][ T5902] tipc: Node identity ac14140f, cluster identity 4711
[   96.128861][ T5902] tipc: New replicast peer: 255.255.255.255
[   96.131548][ T5902] tipc: Enabled bearer <udp:syz2>, priority 10
[   96.222826][ T5909] netlink: 148 bytes leftover after parsing attributes in process `syz.3.676'.
[   96.247113][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[   96.605928][ T5930] tipc: Started in network mode
[   96.607280][ T5930] tipc: Node identity ac14140f, cluster identity 4711
[   96.612694][ T5930] tipc: New replicast peer: 255.255.255.255
[   96.618724][ T5930] tipc: Enabled bearer <udp:syz2>, priority 10
[   96.621048][ T5934] netlink: 'syz.1.688': attribute type 4 has an invalid length.
[   96.623188][ T5933] netlink: 'syz.4.687': attribute type 10 has an invalid length.
[   96.693481][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[   96.797208][ T5937] device syzkaller0 entered promiscuous mode
[   96.805526][ T5942] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   96.950788][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[   97.100282][ T5970] 8021q: VLANs not supported on vcan0
[   97.176584][ T5978] netlink: 'syz.4.702': attribute type 4 has an invalid length.
[   97.212639][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[   97.244208][ T4045] tipc: Node number set to 2886997007
[   97.290792][ T5988] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   97.322440][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'.
[   97.342704][ T5989] device gretap0 entered promiscuous mode
[   97.350762][ T5989] device macvtap0 entered promiscuous mode
[   97.443261][ T6000] xt_TCPMSS: Only works on TCP SYN packets
[   97.561385][ T6011] 8021q: VLANs not supported on vcan0
[   97.562310][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'.
[   97.604276][ T6016] bridge0: port 3(erspan0) entered blocking state
[   97.608532][ T6016] bridge0: port 3(erspan0) entered disabled state
[   97.630031][ T6016] device erspan0 entered promiscuous mode
[   97.650126][ T6016] bridge0: port 3(erspan0) entered blocking state
[   97.652201][ T6016] bridge0: port 3(erspan0) entered forwarding state
[   97.659146][ T6021] device erspan0 left promiscuous mode
[   97.661483][ T6021] bridge0: port 3(erspan0) entered disabled state
[   97.734107][ T4045] tipc: Node number set to 2886997007
[   97.752230][ T6027] tipc: New replicast peer: 255.255.255.255
[   97.754372][ T6027] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.899874][ T6035] device syzkaller1 entered promiscuous mode
[   97.910256][ T6042] device batadv0 entered promiscuous mode
[   97.912144][ T6042] device macsec1 entered promiscuous mode
[   97.996300][ T6046] 8021q: VLANs not supported on vcan0
[   99.040592][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'.
[   99.097355][ T6060] device macvtap3 entered promiscuous mode
[   99.099050][ T6060] device gretap0 entered promiscuous mode
[   99.407493][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'.
[   99.416009][ T6081] 8021q: VLANs not supported on vcan0
[  100.752444][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'.
[  100.832396][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'.
[  100.876473][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'.
[  100.903208][ T6121] device erspan0 entered promiscuous mode
[  100.906433][ T6121] device macvtap1 entered promiscuous mode
[  101.055923][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'.
[  101.700545][ T6176] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[  101.953483][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'.
[  101.975378][ T6188] device erspan0 entered promiscuous mode
[  101.986542][ T6188] device macvtap1 entered promiscuous mode
[  102.335645][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'.
[  102.466499][ T6217] netlink: 'syz.0.796': attribute type 8 has an invalid length.
[  102.705670][ T6233] netlink: 'syz.2.805': attribute type 4 has an invalid length.
[  103.068907][ T6257] udc-core: couldn't find an available UDC or it's busy
[  103.075472][ T6257] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  105.333860][    C1] sched: RT throttling activated
[  105.805599][ T6321] netlink: 'syz.3.841': attribute type 4 has an invalid length.
[  106.076573][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  106.085319][ T6338] sctp: [Deprecated]: syz.4.849 (pid 6338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.085319][ T6338] Use struct sctp_sack_info instead
[  107.188008][ T6356] netlink: 'syz.2.856': attribute type 4 has an invalid length.
[  107.316266][ T6359] process 'syz.3.852' launched '/dev/fd/-1/./file0' with NULL argv: empty string added
[  107.982896][ T6363] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  108.044144][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.047838][   T13] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  108.050315][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.136534][   T13] usb 1-1: config 0 descriptor??
[  109.083481][   T13] usbhid 1-1:0.0: can't add hid device: -71
[  109.095466][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[  109.110228][   T13] usb 1-1: USB disconnect, device number 2
[  109.245349][ T6390] netlink: 'syz.2.872': attribute type 4 has an invalid length.
[  110.566568][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  110.847558][ T6430] sctp: [Deprecated]: syz.0.887 (pid 6430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.847558][ T6430] Use struct sctp_sack_info instead
[  110.894251][ T6430] sctp: [Deprecated]: syz.0.887 (pid 6430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.894251][ T6430] Use struct sctp_sack_info instead
[  115.316402][ T6471] sctp: [Deprecated]: syz.1.901 (pid 6471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.316402][ T6471] Use struct sctp_sack_info instead
[  115.346814][ T6471] sctp: [Deprecated]: syz.1.901 (pid 6471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.346814][ T6471] Use struct sctp_sack_info instead
[  121.079678][ T6557] sctp: [Deprecated]: syz.0.932 (pid 6557) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.079678][ T6557] Use struct sctp_sack_info instead
[  121.107042][ T6559] udc-core: couldn't find an available UDC or it's busy
[  121.108985][ T6559] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  121.272176][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'.
[  121.286281][ T6572] device vlan2 entered promiscuous mode
[  121.287813][ T6572] device bond0 entered promiscuous mode
[  121.289253][ T6572] device bond_slave_1 entered promiscuous mode
[  121.322905][ T6572] device bond0 left promiscuous mode
[  121.324666][ T6572] device bond_slave_1 left promiscuous mode
[  122.667294][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.943'.
[  123.660187][ T6591] sctp: [Deprecated]: syz.1.948 (pid 6591) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.660187][ T6591] Use struct sctp_sack_info instead
[  124.880122][ T6615] udc-core: couldn't find an available UDC or it's busy
[  124.882113][ T6615] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  125.973751][ T6627] sctp: [Deprecated]: syz.2.961 (pid 6627) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.973751][ T6627] Use struct sctp_sack_info instead
[  126.281622][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'.
[  126.416602][ T6644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  127.708334][ T6668] IPv6: Can't replace route, no match found
[  129.994455][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  130.591240][ T6700] udc-core: couldn't find an available UDC or it's busy
[  130.627073][ T6700] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  130.674386][ T6704] netlink: 'syz.0.992': attribute type 10 has an invalid length.
[  130.713614][  T397] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  130.844970][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'.
[  130.848041][ T6710] netlink: 'syz.1.995': attribute type 4 has an invalid length.
[  131.672663][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.674631][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.687074][ T6713] sctp: [Deprecated]: syz.3.996 (pid 6713) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.687074][ T6713] Use struct sctp_sack_info instead
[  132.450866][ T6733] 9pnet: Insufficient options for proto=fd
[  132.796509][ T6744] netlink: 'syz.2.1006': attribute type 10 has an invalid length.
[  133.046660][ T6753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.169443][ T6771] udc-core: couldn't find an available UDC or it's busy
[  135.171580][ T6771] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.181581][ T6771] udc-core: couldn't find an available UDC or it's busy
[  135.183747][ T6771] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  135.258258][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'.
[  135.388613][ T6771] udc-core: couldn't find an available UDC or it's busy
[  135.390824][ T6771] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  136.555823][ T6791] netlink: 'syz.1.1023': attribute type 10 has an invalid length.
[  138.838756][ T6844] udc-core: couldn't find an available UDC or it's busy
[  138.914265][ T6844] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  138.944640][ T6847] netlink: 'syz.2.1042': attribute type 10 has an invalid length.
[  141.144153][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1055'.
[  143.335589][ T6918] udc-core: couldn't find an available UDC or it's busy
[  143.337651][ T6918] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  143.625359][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'.
[  145.548921][ T6953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  145.676720][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1082'.
[  145.695716][ T6963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1083'.
[  145.719258][ T6961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1081'.
[  145.740956][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'.
[  147.526010][ T7001] udc-core: couldn't find an available UDC or it's busy
[  147.924059][ T7001] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  149.030716][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1097'.
[  152.826604][ T7057] netlink: 'syz.3.1117': attribute type 4 has an invalid length.
[  153.065984][ T7063] udc-core: couldn't find an available UDC or it's busy
[  153.067884][ T7063] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  153.178878][ T7063] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  153.180976][ T7063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  153.190299][ T7063] vhci_hcd vhci_hcd.0: Device attached
[  153.212128][ T7064] vhci_hcd: connection closed
[  153.214947][ T4316] vhci_hcd: stop threads
[  153.217960][ T4316] vhci_hcd: release socket
[  153.219231][ T4316] vhci_hcd: disconnect device
[  153.283710][ T7071] Invalid ELF header type: 2 != 1
[  153.548228][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  153.549969][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  153.556673][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  153.565626][ T7081] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  153.565739][ T7075] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  153.567788][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'.
[  154.223763][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  154.245680][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  154.269818][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  154.318975][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  154.322262][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  154.324795][ T7075] syzkaller0 speed is unknown, defaulting to 1000
[  155.535347][ T7109] device vlan2 entered promiscuous mode
[  155.716843][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'.
[  156.912012][ T7143] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  156.959586][ T7143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1140'.
[  157.873610][ T7133] netlink: 'syz.1.1143': attribute type 10 has an invalid length.
[  157.937160][ T7154] =======================================================
[  157.937160][ T7154] WARNING: The mand mount option has been deprecated and
[  157.937160][ T7154]          and is ignored by this kernel. Remove the mand
[  157.937160][ T7154]          option from the mount to silence this warning.
[  157.937160][ T7154] =======================================================
[  158.107278][ T7161] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  158.274861][   T26] audit: type=1326 audit(158.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1fdb728 code=0x7ffc0000
[  158.558554][   T26] audit: type=1326 audit(158.470:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1fdb728 code=0x7ffc0000
[  158.595069][   T26] audit: type=1326 audit(158.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffa1fdb728 code=0x7ffc0000
[  158.667620][ T7176] syzkaller0 speed is unknown, defaulting to 1000
[  158.776744][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'.
[  158.843052][   T26] audit: type=1326 audit(158.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1fdb728 code=0x7ffc0000
[  158.934336][   T26] audit: type=1326 audit(158.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1fdb728 code=0x7ffc0000
[  158.985979][ T7193] netlink: 'syz.1.1161': attribute type 10 has an invalid length.
[  159.109051][ T7200] sctp: [Deprecated]: syz.2.1164 (pid 7200) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.109051][ T7200] Use struct sctp_sack_info instead
[  159.144984][ T4387] Bluetooth: hci0: command 0x0405 tx timeout
[  160.254281][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'.
[  160.720388][ T7228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  160.723309][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  161.151310][ T7244] netlink: 'syz.1.1179': attribute type 10 has an invalid length.
[  161.494571][ T7251] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  161.669321][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1178'.
[  162.614227][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'.
[  163.156209][ T7284] netlink: 'syz.1.1192': attribute type 1 has an invalid length.
[  163.168774][ T7284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1192'.
[  166.283826][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'.
[  167.974543][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'.
[  167.980090][ T7342] netlink: 'syz.2.1210': attribute type 4 has an invalid length.
[  168.028938][ T7346] udc-core: couldn't find an available UDC or it's busy
[  168.030831][ T7346] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  168.274551][ T7353] udc-core: couldn't find an available UDC or it's busy
[  168.283808][ T7353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  168.983925][ T4387] Bluetooth: hci2: command 0x0406 tx timeout
[  169.050097][ T7362] udc-core: couldn't find an available UDC or it's busy
[  169.052301][ T7362] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  169.084634][   T26] audit: type=1326 audit(169.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92558728 code=0x7ffc0000
[  169.096898][   T26] audit: type=1326 audit(169.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffff92558728 code=0x7ffc0000
[  169.137467][ T7361] syzkaller0 speed is unknown, defaulting to 1000
[  169.199208][   T26] audit: type=1326 audit(169.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92558728 code=0x7ffc0000
[  169.304039][ T4072] Bluetooth: hci3: command 0x0406 tx timeout
[  169.305821][ T4072] Bluetooth: hci4: command 0x0406 tx timeout
[  169.307764][ T4072] Bluetooth: hci1: command 0x0406 tx timeout
[  169.312876][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'.
[  169.458580][ T7377] device vlan2 entered promiscuous mode
[  169.460295][ T7377] device bond0 entered promiscuous mode
[  169.461820][ T7377] device bond_slave_1 entered promiscuous mode
[  170.648810][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'.
[  170.673771][ T7389] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.676615][ T7389] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.679276][ T7389] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.681687][ T7389] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.759827][ T7389] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.762268][ T7389] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.764747][ T7389] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.767210][ T7389] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.978477][ T7404] capability: warning: `syz.1.1233' uses deprecated v2 capabilities in a way that may be insecure
[  171.311887][ T7418] netlink: 'syz.3.1236': attribute type 10 has an invalid length.
[  171.523377][ T7418] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  173.959249][ T7484] udc-core: couldn't find an available UDC or it's busy
[  173.981181][ T7484] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  173.990321][ T7486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.283551][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'.
[  175.269291][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1267'.
[  175.287028][ T7507] device vlan2 entered promiscuous mode
[  175.288491][ T7507] device bond0 entered promiscuous mode
[  175.289919][ T7507] device bond_slave_0 entered promiscuous mode
[  175.291637][ T7507] device bond_slave_1 entered promiscuous mode
[  175.293402][ T7507] device wlan1 entered promiscuous mode
[  175.393678][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1273'.
[  175.428089][ T7517] netlink: 'syz.0.1273': attribute type 4 has an invalid length.
[  175.435582][ T7521] udc-core: couldn't find an available UDC or it's busy
[  175.437397][ T7521] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  175.538145][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'.
[  175.550832][ T7527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  175.562380][ T4387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  175.591624][ T4387] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  176.584137][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.394036][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'.
[  178.397419][ T7550] netlink: 'syz.2.1286': attribute type 4 has an invalid length.
[  178.595592][ T7551] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  178.597452][ T7551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  178.599495][ T7552] vhci_hcd: connection closed
[  178.605647][ T7551] vhci_hcd vhci_hcd.0: Device attached
[  178.609990][    T9] vhci_hcd: stop threads
[  178.611230][    T9] vhci_hcd: release socket
[  178.612406][    T9] vhci_hcd: disconnect device
[  179.810746][ T7587] fuse: Bad value for 'fd'
[  181.024389][    T7] Bluetooth: hci0: command 0x0405 tx timeout
[  181.183484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  181.457467][ T7612] udc-core: couldn't find an available UDC or it's busy
[  181.474256][ T7612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  181.650386][ T7621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.465596][ T7671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.616827][   T26] audit: type=1326 audit(186.580:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.1336" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x0
[  186.833202][ T7711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  187.103499][ T7717] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.310837][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.830130][ T7752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.874130][ T4072] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  189.899034][ T7752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.987591][ T7752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.115856][ T4072] usb 1-1: Using ep0 maxpacket: 8
[  190.160863][ T7752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.974742][ T4072] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.978170][ T4072] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.983603][ T4072] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.004278][ T4072] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.005024][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'.
[  191.007722][ T4072] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  191.057375][ T4072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.239506][ T7764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.014250][ T7752] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.215775][ T7752] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.504190][ T7752] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.517292][ T7752] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.568869][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  193.570974][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  193.595890][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'.
[  193.598719][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'.
[  193.644040][ T4072] usb 1-1: usb_control_msg returned -71
[  193.645793][ T4072] usbtmc 1-1:16.0: can't read capabilities
[  193.678494][ T4072] usb 1-1: USB disconnect, device number 3
[  193.716933][ T7783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.900800][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'.
[  193.979139][ T7801] netlink: 'syz.2.1371': attribute type 4 has an invalid length.
[  194.754004][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.878981][ T7841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.931488][ T7845] netlink: 'syz.1.1386': attribute type 4 has an invalid length.
[  196.952683][ T7842] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  196.956372][ T7842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1376'.
[  197.043317][ T7851] udc-core: couldn't find an available UDC or it's busy
[  197.049842][ T7851] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  197.915093][ T7858] ubi31: attaching mtd0
[  197.916551][ T7858] ubi31 error: ubi_attach_mtd_dev: bad VID header (536871680) or data offsets (536871744)
[  198.816107][ T7882] netlink: 'syz.2.1398': attribute type 4 has an invalid length.
[  199.877213][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'.
[  199.880009][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'.
[  199.899347][ T7894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  200.245712][ T7911] lo speed is unknown, defaulting to 1000
[  200.247294][ T7911] lo speed is unknown, defaulting to 1000
[  200.249143][ T7911] lo speed is unknown, defaulting to 1000
[  200.326410][ T7911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  200.375865][ T7911] lo speed is unknown, defaulting to 1000
[  200.378140][ T7911] lo speed is unknown, defaulting to 1000
[  200.383689][ T7911] lo speed is unknown, defaulting to 1000
[  200.387786][ T7911] lo speed is unknown, defaulting to 1000
[  200.389918][ T7911] lo speed is unknown, defaulting to 1000
[  200.393562][ T7913] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1408'.
[  200.396180][ T7913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.497784][ T7923] netlink: 'syz.1.1412': attribute type 4 has an invalid length.
[  202.222473][ T7963] netlink: 'syz.3.1424': attribute type 4 has an invalid length.
[  203.223704][ T7982] netlink: 'syz.0.1431': attribute type 12 has an invalid length.
[  203.226110][ T7982] netlink: 'syz.0.1431': attribute type 29 has an invalid length.
[  203.228155][ T7982] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1431'.
[  203.230588][ T7982] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1431'.
[  203.555311][ T7997] netlink: 'syz.0.1439': attribute type 4 has an invalid length.
[  205.548832][ T8010] fuse: Bad value for 'fd'
[  207.158815][ T8026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1448'.
[  207.605980][ T8041] netlink: 'syz.1.1451': attribute type 4 has an invalid length.
[  209.304550][ T8068] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  209.454056][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1460'.
[  210.291200][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'.
[  210.295955][ T8085] netlink: 'syz.1.1465': attribute type 4 has an invalid length.
[  211.417460][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1469'.
[  211.457231][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'.
[  211.459660][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'.
[  211.571813][ T8103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1470'.
[  211.747726][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'.
[  211.763526][ T8120] netlink: 'syz.1.1478': attribute type 4 has an invalid length.
[  214.277082][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'.
[  214.392812][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'.
[  214.828414][ T8160] syzkaller0 speed is unknown, defaulting to 1000
[  214.838262][ T8160] lo speed is unknown, defaulting to 1000
[  217.454873][ T8185] netlink: 'syz.3.1492': attribute type 2 has an invalid length.
[  220.605723][ T8213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1499'.
[  223.281273][ T8252] device ip6erspan0 entered promiscuous mode
[  223.668093][ T8266] ODEBUG: Out of memory. ODEBUG disabled
[  225.514040][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'.
[  225.516689][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1535'.
[  225.530800][ T8314] device vxcan1 entered promiscuous mode
[  229.033613][ T8372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.785100][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'.
[  230.459373][ T4075] Bluetooth: hci0: command 0x0405 tx timeout
[  230.622093][ T8389] udc-core: couldn't find an available UDC or it's busy
[  230.624134][ T8389] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  230.702442][ T8390] syzkaller0 speed is unknown, defaulting to 1000
[  230.743010][ T8390] lo speed is unknown, defaulting to 1000
[  230.971508][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1563'.
[  230.974839][ T8403] udc-core: couldn't find an available UDC or it's busy
[  230.976730][ T8403] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  231.078709][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1565'.
[  231.261381][ T8415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1569'.
[  231.915791][ T8435] udc-core: couldn't find an available UDC or it's busy
[  231.917763][ T8435] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  231.920179][ T8433] fuse: Bad value for 'fd'
[  231.931797][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1576'.
[  232.134537][ T8446] udc-core: couldn't find an available UDC or it's busy
[  232.136463][ T8446] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  233.231506][ T8460] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.376982][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1585'.
[  233.836710][ T8476] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  233.888897][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1586'.
[  234.695878][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'.
[  236.485816][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'.
[  238.246039][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'.
[  239.460057][ T8546] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  239.500487][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1613'.
[  242.176278][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'.
[  243.958897][ T8596] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  243.965653][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'.
[  246.079371][ T8603] fuse: Bad value for 'fd'
[  246.238081][ T8618] udc-core: couldn't find an available UDC or it's busy
[  246.239987][ T8618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  247.305272][ T4072] atkbd serio0: keyboard reset failed on 
[  248.018606][ T8645] loop3: detected capacity change from 0 to 512
[  248.744980][ T8645] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1644: bg 0: block 248: padding at end of block bitmap is not set
[  248.758376][ T8645] Quota error (device loop3): write_blk: dquota write failed
[  248.761454][ T8645] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  248.770195][ T8645] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.1644: Failed to acquire dquot type 1
[  248.792312][ T8645] EXT4-fs (loop3): 1 truncate cleaned up
[  248.864652][ T8645] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback.
[  249.063816][ T8645] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  249.164665][ T8668] loop1: detected capacity change from 0 to 1024
[  249.195838][   T26] audit: type=1326 audit(249.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  249.213748][ T8668] EXT4-fs (loop1): Ignoring removed orlov option
[  249.235069][ T8668] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  250.289833][   T26] audit: type=1326 audit(249.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.314937][   T26] audit: type=1326 audit(249.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.339453][   T26] audit: type=1326 audit(249.720:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.350077][   T26] audit: type=1326 audit(249.720:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.357319][   T26] audit: type=1326 audit(249.720:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.363515][   T26] audit: type=1326 audit(249.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.370042][   T26] audit: type=1326 audit(249.720:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1648" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa996f728 code=0x7fc00000
[  250.561699][ T8700] device syzkaller0 entered promiscuous mode
[  250.643061][ T8696] loop0: detected capacity change from 0 to 4096
[  250.724506][ T8696] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  253.155227][ T8715] Device name cannot be null; rc = [-22]
[  254.264851][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  254.266751][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  254.439592][ T8729] loop3: detected capacity change from 0 to 128
[  254.503986][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  254.624357][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1670'.
[  254.744001][    T7] usb 1-1: Using ep0 maxpacket: 16
[  254.757961][ T8744] loop3: detected capacity change from 0 to 64
[  254.864160][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  254.874066][    T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  254.877574][    T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  254.881605][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.892689][    T7] usb 1-1: config 0 descriptor??
[  256.079767][ T8761] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  256.081822][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  256.096986][ T8761] vhci_hcd vhci_hcd.0: Device attached
[  256.116132][ T8764] vhci_hcd: connection closed
[  256.121740][    T9] vhci_hcd: stop threads
[  256.125165][    T9] vhci_hcd: release socket
[  256.126371][    T9] vhci_hcd: disconnect device
[  256.136767][ T8769] loop1: detected capacity change from 0 to 128
[  256.137288][    T7] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  256.825460][ T8769] EXT4-fs (loop1): Test dummy encryption mode enabled
[  256.885203][ T8769] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  256.933990][    T7] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device
[  256.936223][    T7] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse
[  256.939887][    T7] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71
[  256.992610][    T7] usb 1-1: USB disconnect, device number 4
[  257.094786][ T8782] loop3: detected capacity change from 0 to 1024
[  258.424558][ T8782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  258.582370][ T4036] Bluetooth: hci2: unexpected event for opcode 0x0c1c
[  258.690196][ T8803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  259.309510][ T8826] loop3: detected capacity change from 0 to 8
[  259.567154][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.582888][ T8842] device bridge_slave_0 left promiscuous mode
[  259.591966][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.698908][ T8842] device bridge_slave_1 left promiscuous mode
[  260.700708][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.810122][ T8842] bond0: (slave bond_slave_1): Releasing backup interface
[  260.905358][ T8842] team0: Port device team_slave_0 removed
[  260.970584][ T8842] team0: Port device team_slave_1 removed
[  260.972662][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.979056][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.990182][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.024116][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.189686][ T8846] team0: Mode changed to "loadbalance"
[  261.231128][ T4045] bond0 speed is unknown, defaulting to 1000
[  262.093116][ T8859] loop0: detected capacity change from 0 to 4096
[  262.643328][ T8859] EXT4-fs (loop0): Unrecognized mount option "obj_role=stripe" or missing value
[  263.654916][ T8872] netlink: 'syz.4.1723': attribute type 10 has an invalid length.
[  264.136250][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1728'.
[  265.283169][ T8909] netlink: 'syz.0.1736': attribute type 10 has an invalid length.
[  266.023541][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1741'.
[  267.342829][ T8922] loop1: detected capacity change from 0 to 32768
[  267.627360][ T8945] netlink: 'syz.4.1748': attribute type 10 has an invalid length.
[  268.382756][ T8922] XFS (loop1): Mounting V5 Filesystem
[  268.712862][ T8973] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  268.754948][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1751'.
[  269.474096][ T8922] XFS (loop1): Ending clean mount
[  269.529884][ T8922] XFS (loop1): Quotacheck needed: Please wait.
[  269.541662][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1754'.
[  269.751098][ T8922] XFS (loop1): Quotacheck: Done.
[  269.862413][ T4024] XFS (loop1): Unmounting Filesystem
[  270.701652][ T8991] netlink: 'syz.2.1761': attribute type 10 has an invalid length.
[  272.060124][ T9009] netlink: 'syz.0.1764': attribute type 10 has an invalid length.
[  272.062167][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1764'.
[  272.073429][ T9009] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.100216][ T9009] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.102444][ T9009] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.406587][ T9009] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.952443][ T9009] team0: Port device geneve0 added
[  275.262255][ T9028] udc-core: couldn't find an available UDC or it's busy
[  275.269094][ T9028] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  275.566000][ T9037] loop1: detected capacity change from 0 to 1024
[  275.614039][   T13] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  275.761832][ T9037] hfsplus: Filesystem is marked locked, mounting read-only.
[  275.865352][ T9037] hfsplus: invalid catalog entry type in lookup
[  276.014032][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  276.054206][   T13] usb 1-1: not running at top speed; connect to a high speed hub
[  276.059527][ T9048] netlink: 'syz.3.1777': attribute type 10 has an invalid length.
[  276.257210][ T9056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.466365][   T13] usb 1-1: config 122 has an invalid interface number: 25 but max is 0
[  276.468761][   T13] usb 1-1: config 122 has no interface number 0
[  276.470761][   T13] usb 1-1: config 122 interface 25 has no altsetting 0
[  277.352288][ T9069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.564029][   T13] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=6f.c6
[  277.566422][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.568421][   T13] usb 1-1: Product: syz
[  277.569573][   T13] usb 1-1: Manufacturer: syz
[  277.570874][   T13] usb 1-1: SerialNumber: syz
[  278.455027][   T13] cypress_m8 1-1:122.25: Nokia CA-42 V2 Adapter converter detected
[  278.458207][   T13] nokiaca42v2 ttyUSB0: required endpoint is missing
[  278.484067][   T13] usb 1-1: USB disconnect, device number 5
[  278.648371][   T13] cypress_m8 1-1:122.25: device disconnected
[  278.854603][ T9103] netlink: 'syz.2.1795': attribute type 10 has an invalid length.
[  280.641237][ T9100] loop3: detected capacity change from 0 to 32768
[  280.926208][ T9142] netlink: 'syz.4.1808': attribute type 10 has an invalid length.
[  281.326841][ T9100] XFS (loop3): Mounting V5 Filesystem
[  281.746088][ T9100] XFS (loop3): Ending clean mount
[  281.770071][ T9100] XFS (loop3): Quotacheck needed: Please wait.
[  281.835938][ T9100] XFS (loop3): Quotacheck: Done.
[  281.893523][ T4025] XFS (loop3): Unmounting Filesystem
[  281.902138][ T9159] loop0: detected capacity change from 0 to 2048
[  281.950373][ T9172] udc-core: couldn't find an available UDC or it's busy
[  281.952212][ T9172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  282.115912][ T9159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.083206][ T9186] netlink: 'syz.1.1822': attribute type 10 has an invalid length.
[  283.701061][ T9188] loop0: detected capacity change from 0 to 40427
[  283.770259][ T9188] F2FS-fs (loop0): invalid crc value
[  283.795938][ T9188] F2FS-fs (loop0): Found nat_bits in checkpoint
[  283.825916][ T9188] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  286.091272][ T4021] attempt to access beyond end of device
[  286.091272][ T4021] loop0: rw=2049, want=45104, limit=40427
[  286.617083][ T9237] netlink: 'syz.1.1838': attribute type 10 has an invalid length.
[  289.259854][ T9277] netlink: 'syz.3.1850': attribute type 10 has an invalid length.
[  290.890356][ T9296] loop1: detected capacity change from 0 to 512
[  290.908691][ T9294] loop0: detected capacity change from 0 to 1024
[  290.966370][ T9296] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  290.970084][ T9296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  291.015833][ T9296] EXT4-fs (loop1): 1 truncate cleaned up
[  291.017604][ T9296] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.110604][  T148] hfsplus: b-tree write err: -5, ino 4
[  291.181736][ T9296] overlayfs: metacopy with no lower data found - abort lookup (/file3)
[  291.396877][ T9315] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  291.439487][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1858'.
[  292.984183][ T9330] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  293.592917][ T9332] device ipvlan0 entered promiscuous mode
[  293.596641][ T9332] bridge0: port 1(ipvlan0) entered blocking state
[  293.604593][ T9332] bridge0: port 1(ipvlan0) entered disabled state
[  293.628649][ T1601] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.693444][ T9324] loop3: detected capacity change from 0 to 32768
[  293.752971][ T9345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  293.765258][ T1601] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.807577][ T1601] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.860288][ T9324] XFS (loop3): Mounting V5 Filesystem
[  293.935048][ T9324] XFS (loop3): Ending clean mount
[  293.941627][ T9324] XFS (loop3): Quotacheck needed: Please wait.
[  293.990716][ T9324] XFS (loop3): Quotacheck: Done.
[  294.006385][ T1601] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.101077][ T9362] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  294.140565][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1876'.
[  294.833989][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.898913][ T9339] bond0 speed is unknown, defaulting to 1000
[  294.901215][ T9339] syzkaller0 speed is unknown, defaulting to 1000
[  294.903583][ T9339] lo speed is unknown, defaulting to 1000
[  295.245762][ T9339] chnl_net:caif_netlink_parms(): no params data found
[  295.285040][ T4025] XFS (loop3): Unmounting Filesystem
[  295.353088][ T1601] tipc: Disabling bearer <udp:syz2>
[  295.355178][ T1601] tipc: Left network mode
[  295.469528][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.471498][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.481892][ T9339] device bridge_slave_0 entered promiscuous mode
[  295.485770][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.487676][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.490152][ T9339] device bridge_slave_1 entered promiscuous mode
[  295.505410][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.510564][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.562451][ T9339] team0: Port device team_slave_0 added
[  295.706242][ T9339] team0: Port device team_slave_1 added
[  295.771454][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.784046][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[  295.787135][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.102924][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.608730][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.610820][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.624086][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.071710][ T9339] device hsr_slave_0 entered promiscuous mode
[  297.264812][ T9339] device hsr_slave_1 entered promiscuous mode
[  298.056390][ T4075] Bluetooth: hci2: command 0x041b tx timeout
[  298.135070][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.137125][ T9339] Cannot create hsr debugfs directory
[  298.139726][ T9423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1889'.
[  298.510503][ T9445] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  298.558826][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'.
[  299.809493][ T9457] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  300.257025][ T4045] Bluetooth: hci2: command 0x040f tx timeout
[  300.382009][ T9339] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  300.486892][ T9339] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  301.455568][ T9339] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  301.506391][ T9339] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  302.263990][ T4045] Bluetooth: hci2: command 0x0419 tx timeout
[  302.463222][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.555579][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.558332][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.562879][ T9339] 8021q: adding VLAN 0 to HW filter on device team0
[  302.604748][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.614424][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.616889][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.619327][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.675202][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.677715][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.680910][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.685253][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.687219][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.700755][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.710886][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.798801][ T9339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.809717][ T9339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.970920][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.977309][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.988341][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.995860][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.000741][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.016215][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.223650][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.352567][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.474429][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  303.712328][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  304.822367][ T9493] loop0: detected capacity change from 0 to 40427
[  304.825452][ T1601] device hsr_slave_0 left promiscuous mode
[  304.888372][ T9528] loop3: detected capacity change from 0 to 512
[  304.894465][ T1601] device hsr_slave_1 left promiscuous mode
[  304.944489][ T9493] F2FS-fs (loop0): LFS not compatible with checkpoint=disable
[  304.965499][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.967657][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.971485][ T1601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.973521][ T1601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.978768][ T1601] device bridge_slave_1 left promiscuous mode
[  304.981632][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.001893][ T9528] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  305.045608][ T1601] device bridge_slave_0 left promiscuous mode
[  305.047398][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.087765][ T9528] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1912: couldn't read orphan inode 26 (err -116)
[  305.099790][ T9528] EXT4-fs (loop3): Remounting filesystem read-only
[  305.101644][ T9528] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nolazytime,journal_ioprio=0x0000000000000003,dax=never,barrier,. Quota mode: writeback.
[  305.133808][ T1601] device bond0 left promiscuous mode
[  305.145428][ T1601] device bond_slave_1 left promiscuous mode
[  306.504374][ T1601] device veth1_vlan left promiscuous mode
[  306.506399][ T1601] device veth0_vlan left promiscuous mode
[  308.113062][ T9539] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set
[  308.188634][ T9539] EXT4-fs (loop3): Remounting filesystem read-only
[  308.435558][ T1601] team0 (unregistering): Port device team_slave_1 removed
[  308.564891][ T1601] team0 (unregistering): Port device team_slave_0 removed
[  308.625708][ T1601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.140098][ T1601] bond0 (unregistering): Released all slaves
[  309.962912][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  309.979778][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  310.052809][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.100961][ T9597] netlink: 'syz.0.1931': attribute type 10 has an invalid length.
[  310.262244][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  310.532139][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  310.540830][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  310.582905][ T9339] device veth0_vlan entered promiscuous mode
[  310.591690][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  310.602017][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  310.605325][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  310.621519][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  310.630446][ T9339] device veth1_vlan entered promiscuous mode
[  310.696921][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  310.699633][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  310.713104][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  310.723399][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  310.735315][ T9339] device veth0_macvtap entered promiscuous mode
[  310.740224][ T9339] device veth1_macvtap entered promiscuous mode
[  310.773756][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.784752][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.798476][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.806902][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  310.809560][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  310.812122][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  310.818748][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  310.826797][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.829889][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.840603][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.847723][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  310.850468][ T7144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  310.858185][ T9339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.866386][ T9339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.875271][ T9339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.882299][ T9339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.092098][ T9627] batman_adv: Cannot find parent device
[  311.160412][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.163965][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.248888][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  311.270918][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.273519][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.291099][  T295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  312.383365][ T9647] loop3: detected capacity change from 0 to 1024
[  312.410631][ T9646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.473305][ T9643] loop5: detected capacity change from 0 to 4096
[  312.559751][ T9647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.670133][ T9655] netlink: 'syz.4.1934': attribute type 1 has an invalid length.
[  313.835415][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  314.296165][ T9677] netlink: 'syz.5.1943': attribute type 10 has an invalid length.
[  314.638642][ T9677] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  314.764046][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  315.034225][    T7] usb 1-1: Using ep0 maxpacket: 16
[  315.387365][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  315.389761][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  316.123994][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.314007][    T7] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  316.316505][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.318621][    T7] usb 1-1: Product: syz
[  316.319661][    T7] usb 1-1: Manufacturer: syz
[  316.991959][    T7] usb 1-1: SerialNumber: syz
[  317.010635][    T7] usb 1-1: config 0 descriptor??
[  317.029941][ T9730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  317.034075][    T7] usb 1-1: can't set config #0, error -71
[  317.036738][    T7] usb 1-1: USB disconnect, device number 6
[  317.166554][ T9733] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1958'.
[  318.491751][ T9754] netlink: 'syz.3.1964': attribute type 10 has an invalid length.
[  320.173026][ T9772] loop5: detected capacity change from 0 to 128
[  320.816592][ T9781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1970'.
[  321.798669][ T9797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  322.584669][ T9803] loop3: detected capacity change from 0 to 32768
[  322.687636][ T9818] loop0: detected capacity change from 0 to 4096
[  322.782387][ T9803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1978 (9803)
[  322.817852][ T9803] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  322.817945][ T9818] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  322.820645][ T9803] BTRFS info (device loop3): enabling auto defrag
[  323.570727][ T9818] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096)
[  323.575341][ T9803] BTRFS info (device loop3): doing ref verification
[  323.577284][ T9803] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  323.580152][ T9803] BTRFS info (device loop3): trying to use backup root at mount time
[  323.611742][ T9803] BTRFS info (device loop3): max_inline at 4096
[  323.613536][ T9803] BTRFS info (device loop3): enabling ssd optimizations
[  323.667834][ T9803] BTRFS info (device loop3): using spread ssd allocation scheme
[  323.669967][ T9803] BTRFS info (device loop3): using free space tree
[  323.671773][ T9803] BTRFS info (device loop3): has skinny extents
[  323.837291][ T9829] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  324.840733][ T4386] Bluetooth: hci2: command 0x0405 tx timeout
[  325.466484][ T9831] loop5: detected capacity change from 0 to 32768
[  326.579706][ T9831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1982 (9831)
[  327.509106][ T9831] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  327.511633][ T9831] BTRFS info (device loop5): using free space tree
[  327.513347][ T9831] BTRFS info (device loop5): has skinny extents
[  327.736070][ T9831] BTRFS error (device loop5): open_ctree failed: -12
[  331.129943][ T9999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  332.010384][T10018] loop5: detected capacity change from 0 to 4096
[  332.680030][T10032] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  334.074165][ T9872] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  334.814550][T10045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  334.934050][ T9872] usb 1-1: Using ep0 maxpacket: 16
[  334.983928][    T7] Bluetooth: hci2: command 0x0405 tx timeout
[  335.181939][ T9872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  335.184373][ T9872] usb 1-1: config 0 has no interface number 0
[  335.346239][T10064] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  335.864535][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  336.401908][ T9872] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  336.404663][ T9872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.406747][ T9872] usb 1-1: Product: syz
[  336.407853][ T9872] usb 1-1: Manufacturer: syz
[  336.409001][ T9872] usb 1-1: SerialNumber: syz
[  336.416130][ T9872] usb 1-1: config 0 descriptor??
[  336.456140][ T9872] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  336.574016][ T9872] gspca_spca1528: reg_w err -71
[  336.604089][ T9872] spca1528: probe of 1-1:0.1 failed with error -71
[  336.615839][ T9872] usb 1-1: USB disconnect, device number 7
[  337.296541][T10081] loop3: detected capacity change from 0 to 32768
[  337.450446][T10081] XFS (loop3): Mounting V5 Filesystem
[  337.477886][T10087] loop0: detected capacity change from 0 to 32768
[  337.517935][T10118] udc-core: couldn't find an available UDC or it's busy
[  337.519879][T10118] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  337.635894][T10087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  337.638280][T10087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  337.643184][T10081] XFS (loop3): Ending clean mount
[  337.646407][T10081] XFS (loop3): Quotacheck needed: Please wait.
[  337.870505][T10081] XFS (loop3): Quotacheck: Done.
[  338.526638][T10087] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  338.532601][ T9872] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  338.535658][ T9872] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  338.602198][ T9872] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms
[  338.624198][ T9872] gfs2: fsid=syz:syz.0: jid=0: Done
[  338.628754][T10087] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  338.670120][ T4025] XFS (loop3): Unmounting Filesystem
[  342.731077][T10189] xt_nfacct: accounting object `syz1' does not exists
[  345.583695][T10221] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2055'.
[  345.589521][T10214] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2055'.
[  345.641662][T10227] udc-core: couldn't find an available UDC or it's busy
[  345.662874][T10227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  349.353674][T10293] netlink: 'syz.5.2071': attribute type 10 has an invalid length.
[  351.188597][T10305] udc-core: couldn't find an available UDC or it's busy
[  351.190560][T10305] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  352.369875][T10323] netlink: 'syz.3.2083': attribute type 10 has an invalid length.
[  352.595359][T10327] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  353.615552][T10335] device veth0_vlan left promiscuous mode
[  353.617725][T10335] device veth0_vlan entered promiscuous mode
[  353.865363][T10332] loop3: detected capacity change from 0 to 512
[  353.872094][T10333] xt_cgroup: xt_cgroup: no path or classid specified
[  354.108709][T10343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  354.118416][T10332] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  354.154987][T10332] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2085: invalid indirect mapped block 4294967295 (level 1)
[  354.164061][T10332] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2085: invalid indirect mapped block 4294967295 (level 1)
[  354.178479][T10332] EXT4-fs (loop3): 2 truncates cleaned up
[  354.183629][T10332] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  355.357360][T10365] netlink: 'syz.4.2095': attribute type 10 has an invalid length.
[  357.271994][T10387] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  358.482734][T10399] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  358.496206][T10397] loop0: detected capacity change from 0 to 2048
[  358.569850][T10397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  358.600934][T10397] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  358.755675][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2107'.
[  359.554010][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  359.809864][T10415] xt_nfacct: accounting object `syz1' does not exists
[  359.912390][T10417] loop0: detected capacity change from 0 to 1756
[  360.216084][T10425] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  363.454018][T10449] xt_nfacct: accounting object `syz1' does not exists
[  363.510926][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2123'.
[  363.513772][T10451] netlink: 'syz.5.2123': attribute type 10 has an invalid length.
[  365.049318][T10475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  367.455749][T10495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  367.836616][T10512] loop0: detected capacity change from 0 to 1024
[  368.336510][T10521] loop0: detected capacity change from 0 to 1024
[  368.433971][T10521] EXT4-fs (loop0): Ignoring removed orlov option
[  368.475874][T10521] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.2145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  368.481241][T10521] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2145: couldn't read orphan inode 11 (err -117)
[  368.507463][T10521] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,orlov,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback.
[  368.925851][T10531] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.2145: Invalid block bitmap block 0 in block_group 0
[  368.944351][T10531] __quota_error: 59 callbacks suppressed
[  368.944390][T10531] Quota error (device loop0): write_blk: dquota write failed
[  368.948247][T10531] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  368.952584][T10531] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.2145: Failed to acquire dquot type 0
[  375.774324][T10603] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.776512][T10603] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.778695][T10603] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.780779][T10603] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.783115][T10603] device vxlan0 entered promiscuous mode
[  375.818139][T10603] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.820510][T10603] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.822716][T10603] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.824957][T10603] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.825428][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  376.827165][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  378.739059][T10640] loop3: detected capacity change from 0 to 40427
[  378.787641][T10640] F2FS-fs (loop3): invalid crc value
[  378.804600][T10640] F2FS-fs (loop3): Found nat_bits in checkpoint
[  378.827768][T10640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  379.903586][ T4025] attempt to access beyond end of device
[  379.903586][ T4025] loop3: rw=2049, want=45104, limit=40427
[  380.882897][T10683] xt_nfacct: accounting object `syz1' does not exists
[  383.939745][T10740] xt_nfacct: accounting object `syz1' does not exists
[  387.195753][T10773] loop5: detected capacity change from 0 to 1024
[  387.642469][  T136] hfsplus: b-tree write err: -5, ino 4
[  390.672303][T10812] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  393.034100][T10840] xt_nfacct: accounting object `syz1' does not exists
[  393.392378][ T4036] Bluetooth: hci0: unexpected event for opcode 0x203b
[  393.445873][T10857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  393.939954][T10866] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  394.150929][T10859] loop0: detected capacity change from 0 to 40427
[  394.193785][T10859] F2FS-fs (loop0): Unrecognized mount option "memory=low" or missing value
[  395.657074][T10885] loop0: detected capacity change from 0 to 128
[  395.753994][T10885] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  397.848548][T10907] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  398.757247][T10932] batman_adv: Cannot find parent device
[  401.376961][T10960] 9pnet: Could not find request transport: f��̳�՝d�s�V��{�i�}/�
[  402.503936][T10976] loop3: detected capacity change from 0 to 1024
[  402.609965][T10981] loop0: detected capacity change from 0 to 1024
[  402.618105][T10976] hfsplus: invalid attributes max_key_len 259
[  402.620043][T10976] hfsplus: failed to load attributes file
[  402.665610][T10981] 
[  402.666287][T10981] ======================================================
[  402.668153][T10981] WARNING: possible circular locking dependency detected
[  402.669878][T10981] 5.15.180-syzkaller #0 Not tainted
[  402.671299][T10981] ------------------------------------------------------
[  402.673260][T10981] syz.0.2282/10981 is trying to acquire lock:
[  402.674876][T10981] ffff0000d65920f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x88/0x7bc
[  402.677666][T10981] 
[  402.677666][T10981] but task is already holding lock:
[  402.679699][T10981] ffff0000d85ea988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x180/0x12f4
[  402.682700][T10981] 
[  402.682700][T10981] which lock already depends on the new lock.
[  402.682700][T10981] 
[  402.685560][T10981] 
[  402.685560][T10981] the existing dependency chain (in reverse order) is:
[  402.688045][T10981] 
[  402.688045][T10981] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  402.690463][T10981]        __mutex_lock_common+0x194/0x1edc
[  402.692094][T10981]        mutex_lock_nested+0xac/0x11c
[  402.693562][T10981]        hfsplus_get_block+0x2cc/0x11c8
[  402.695090][T10981]        block_read_full_page+0x298/0xc40
[  402.696721][T10981]        hfsplus_readpage+0x28/0x38
[  402.698271][T10981]        do_read_cache_page+0x5f4/0x8f8
[  402.699772][T10981]        read_cache_page+0x68/0x88
[  402.701173][T10981]        hfsplus_block_allocate+0xd8/0x7bc
[  402.702793][T10981]        hfsplus_file_extend+0x738/0x12f4
[  402.704321][T10981]        hfsplus_get_block+0x324/0x11c8
[  402.705813][T10981]        __block_write_begin_int+0x3e4/0x1588
[  402.707559][T10981]        cont_write_begin+0x4e4/0x6dc
[  402.709041][T10981]        hfsplus_write_begin+0xa8/0xf8
[  402.710635][T10981]        generic_perform_write+0x204/0x480
[  402.712250][T10981]        __generic_file_write_iter+0x23c/0x454
[  402.714004][T10981]        generic_file_write_iter+0xb0/0x1b4
[  402.715596][T10981]        vfs_write+0x7c8/0xa2c
[  402.716896][T10981]        ksys_write+0x120/0x210
[  402.718238][T10981]        __arm64_sys_write+0x7c/0x90
[  402.719697][T10981]        invoke_syscall+0x98/0x2b8
[  402.721115][T10981]        el0_svc_common+0x138/0x258
[  402.722553][T10981]        do_el0_svc+0x58/0x14c
[  402.723850][T10981]        el0_svc+0x78/0x1e0
[  402.725066][T10981]        el0t_64_sync_handler+0xcc/0xe4
[  402.726610][T10981]        el0t_64_sync+0x1a0/0x1a4
[  402.728015][T10981] 
[  402.728015][T10981] -> #0 (&sbi->alloc_mutex){+.+.}-{3:3}:
[  402.730144][T10981]        __lock_acquire+0x2928/0x651c
[  402.731590][T10981]        lock_acquire+0x1f4/0x620
[  402.732914][T10981]        __mutex_lock_common+0x194/0x1edc
[  402.734464][T10981]        mutex_lock_nested+0xac/0x11c
[  402.735869][T10981]        hfsplus_block_allocate+0x88/0x7bc
[  402.737464][T10981]        hfsplus_file_extend+0x738/0x12f4
[  402.739022][T10981]        hfsplus_bmap_reserve+0xe8/0x494
[  402.740559][T10981]        hfsplus_create_cat+0x170/0xdd4
[  402.742131][T10981]        hfsplus_fill_super+0xf8c/0x16dc
[  402.743701][T10981]        mount_bdev+0x264/0x358
[  402.745009][T10981]        hfsplus_mount+0x44/0x58
[  402.746350][T10981]        legacy_get_tree+0xd4/0x16c
[  402.747726][T10981]        vfs_get_tree+0x90/0x274
[  402.749092][T10981]        do_new_mount+0x228/0x810
[  402.750456][T10981]        path_mount+0x5b4/0x1000
[  402.751805][T10981]        __arm64_sys_mount+0x514/0x5e4
[  402.753307][T10981]        invoke_syscall+0x98/0x2b8
[  402.754702][T10981]        el0_svc_common+0x138/0x258
[  402.756176][T10981]        do_el0_svc+0x58/0x14c
[  402.757498][T10981]        el0_svc+0x78/0x1e0
[  402.758708][T10981]        el0t_64_sync_handler+0xcc/0xe4
[  402.760275][T10981]        el0t_64_sync+0x1a0/0x1a4
[  402.761600][T10981] 
[  402.761600][T10981] other info that might help us debug this:
[  402.761600][T10981] 
[  402.764403][T10981]  Possible unsafe locking scenario:
[  402.764403][T10981] 
[  402.766438][T10981]        CPU0                    CPU1
[  402.767888][T10981]        ----                    ----
[  402.769353][T10981]   lock(&HFSPLUS_I(inode)->extents_lock);
[  402.771007][T10981]                                lock(&sbi->alloc_mutex);
[  402.772963][T10981]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  402.775214][T10981]   lock(&sbi->alloc_mutex);
[  402.776403][T10981] 
[  402.776403][T10981]  *** DEADLOCK ***
[  402.776403][T10981] 
[  402.778653][T10981] 4 locks held by syz.0.2282/10981:
[  402.780129][T10981]  #0: ffff0000ec1b20e0 (&type->s_umount_key#70/1){+.+.}-{3:3}, at: alloc_super+0x1a8/0x824
[  402.782943][T10981]  #1: ffff0000d6592198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0xf30/0x16dc
[  402.785655][T10981]  #2: ffff0000ed7460b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc
[  402.788460][T10981]  #3: ffff0000d85ea988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x180/0x12f4
[  402.791602][T10981] 
[  402.791602][T10981] stack backtrace:
[  402.793285][T10981] CPU: 0 PID: 10981 Comm: syz.0.2282 Not tainted 5.15.180-syzkaller #0
[  402.795503][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  402.798221][T10981] Call trace:
[  402.799134][T10981]  dump_backtrace+0x0/0x43c
[  402.800382][T10981]  show_stack+0x2c/0x3c
[  402.801543][T10981]  __dump_stack+0x30/0x40
[  402.802698][T10981]  dump_stack_lvl+0xf8/0x160
[  402.804005][T10981]  dump_stack+0x1c/0x5c
[  402.805102][T10981]  print_circular_bug+0x148/0x1b0
[  402.806459][T10981]  check_noncircular+0x240/0x2d4
[  402.807785][T10981]  __lock_acquire+0x2928/0x651c
[  402.809117][T10981]  lock_acquire+0x1f4/0x620
[  402.810400][T10981]  __mutex_lock_common+0x194/0x1edc
[  402.811869][T10981]  mutex_lock_nested+0xac/0x11c
[  402.813211][T10981]  hfsplus_block_allocate+0x88/0x7bc
[  402.814703][T10981]  hfsplus_file_extend+0x738/0x12f4
[  402.816205][T10981]  hfsplus_bmap_reserve+0xe8/0x494
[  402.817600][T10981]  hfsplus_create_cat+0x170/0xdd4
[  402.818976][T10981]  hfsplus_fill_super+0xf8c/0x16dc
[  402.820403][T10981]  mount_bdev+0x264/0x358
[  402.821590][T10981]  hfsplus_mount+0x44/0x58
[  402.822789][T10981]  legacy_get_tree+0xd4/0x16c
[  402.824112][T10981]  vfs_get_tree+0x90/0x274
[  402.825383][T10981]  do_new_mount+0x228/0x810
[  402.826647][T10981]  path_mount+0x5b4/0x1000
[  402.827989][T10981]  __arm64_sys_mount+0x514/0x5e4
[  402.829293][T10981]  invoke_syscall+0x98/0x2b8
[  402.830593][T10981]  el0_svc_common+0x138/0x258
[  402.831806][T10981]  do_el0_svc+0x58/0x14c
[  402.832952][T10981]  el0_svc+0x78/0x1e0
[  402.834010][T10981]  el0t_64_sync_handler+0xcc/0xe4
[  402.835452][T10981]  el0t_64_sync+0x1a0/0x1a4