last executing test programs:

2m26.128770034s ago: executing program 0 (id=1426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)

2m24.90068131s ago: executing program 0 (id=1429):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180017000000000000000009000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setuid(0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4)

2m23.347611858s ago: executing program 1 (id=1434):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto(r0, &(0x7f00000001c0)="25ff8571999e1f778f0350a97e44f1b970763fa07dc8b9fe0b9017ffc8854e8baaf1413c31b7dba484267bac5aae083558afab07716cf0ad72832b1320411e32c81cd67fabb0652f0b850dfaf75004cfc278cdee43f3810d6f2d643c16f679b7697cb0", 0xfffffffffffffee9, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r2, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)

2m22.813637511s ago: executing program 0 (id=1441):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2m22.770375441s ago: executing program 0 (id=1442):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80801, 0x28f6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101080)
ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000040)=""/44)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x28e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x100001d, 0x100, &(0x7f00000000c0)="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"})
socket(0x2b, 0x1, 0x0)

2m22.424620193s ago: executing program 1 (id=1446):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2m21.555035787s ago: executing program 1 (id=1447):
r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), 0x0)
open_by_handle_at(r0, 0x0, 0xbc02707bd2564074)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r4, &(0x7f0000000280)="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", 0x103)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff010000", @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

2m21.423131788s ago: executing program 1 (id=1449):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x7, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xcd, &(0x7f0000000140)=""/205, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x81, 0xe8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x2, 0x2, 0x1, 0x6}], 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)

2m20.365849693s ago: executing program 1 (id=1450):
mmap(&(0x7f0000053000/0x4000)=nil, 0x4000, 0xb635773f07ebbee5, 0x10, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
writev(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8)

2m19.488320548s ago: executing program 1 (id=1455):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a00000000000000000000000000ac14141e82"], 0xffdd)

2m19.451728519s ago: executing program 0 (id=1456):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94)
shutdown(r0, 0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="c3", 0x1}], 0x1)

2m19.311969569s ago: executing program 0 (id=1457):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlockall(0x7)
setresuid(0x0, 0xee01, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x5, 0x500)
ioctl$MON_IOCG_STATS(r5, 0x80089203, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x1, {0x0, 0x0, 0x0, 0xffffffffffffff86, 0x7, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2984fcaf1860b5a61f8e2078de86be39f1bb99370491de6bb2c742bcf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ccfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca0206d8b02266a0443e8ae6", [0x3b, 0x4]}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0)
ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f00000002c0)={0xa0, 0x140, 0x30, 0xf0, 0xfffffffc, 0x5, 0xf, 0x0, {0x400000, 0x3ff, 0x1}, {0x3, 0x9be, 0x1}, {0x8, 0x57e2}, {0x5, 0x8, 0x1}, 0x7, 0x100, 0x1000, 0x401, 0x1, 0x1, 0xea7c, 0xef0, 0x4, 0xf1, 0x4, 0x8e, 0x8, 0x200})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x3c}}, 0x0)

2m3.922543508s ago: executing program 32 (id=1457):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlockall(0x7)
setresuid(0x0, 0xee01, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x5, 0x500)
ioctl$MON_IOCG_STATS(r5, 0x80089203, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x1, {0x0, 0x0, 0x0, 0xffffffffffffff86, 0x7, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2984fcaf1860b5a61f8e2078de86be39f1bb99370491de6bb2c742bcf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ccfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca0206d8b02266a0443e8ae6", [0x3b, 0x4]}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0)
ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f00000002c0)={0xa0, 0x140, 0x30, 0xf0, 0xfffffffc, 0x5, 0xf, 0x0, {0x400000, 0x3ff, 0x1}, {0x3, 0x9be, 0x1}, {0x8, 0x57e2}, {0x5, 0x8, 0x1}, 0x7, 0x100, 0x1000, 0x401, 0x1, 0x1, 0xea7c, 0xef0, 0x4, 0xf1, 0x4, 0x8e, 0x8, 0x200})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x3c}}, 0x0)

2m3.76345177s ago: executing program 33 (id=1455):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a00000000000000000000000000ac14141e82"], 0xffdd)

15.009589652s ago: executing program 4 (id=1872):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0)

14.788823193s ago: executing program 4 (id=1874):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x22080)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="1000"])

13.032720472s ago: executing program 5 (id=1880):
r0 = gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0e80706e6c06a79874342a0e0d13343972d01f"})
write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

12.983504022s ago: executing program 4 (id=1881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
userfaultfd(0x801)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(r3, &(0x7f0000000240)='./bus\x00', r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

10.515004125s ago: executing program 5 (id=1883):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[<r5=>0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000280)={0x0, r5, r1})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40044160, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)

10.514069816s ago: executing program 3 (id=1884):
socket(0x10, 0x400000000080803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000400)=[{{}, {<r1=>0x80000000}}, {{}, {<r2=>0x80000000}}]})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000fc0)={{r2, 0x0, 0x0, [0x7fff, 0x1]}, {r1, 0x0, 0xe, [0x8, 0x9]}, 0x2, [0x80000001, 0x1]})

10.460970635s ago: executing program 4 (id=1885):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setuid(0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4)

8.705297655s ago: executing program 4 (id=1886):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f0000000300))
r2 = socket(0x11, 0x800000003, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa8}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)

8.449684766s ago: executing program 5 (id=1887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180017000000000000000009000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getpid()
setuid(0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4)
recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4)

7.871414339s ago: executing program 3 (id=1891):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x200)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000180))
socket$inet6(0xa, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)

7.65096344s ago: executing program 5 (id=1893):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)

6.774546224s ago: executing program 3 (id=1895):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

4.804441165s ago: executing program 5 (id=1896):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setuid(0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4)

4.797128915s ago: executing program 3 (id=1897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
userfaultfd(0x801)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$eJzs3T9v004cx/HPOUmT9lf15/5BSCygQiVYKgoMiCUVysrOhIAmlSqiItoiAQsFMSIeAHufAkw8ARYQTwAmJh5AN6O7XP44sdM2JHED75fU6Hy+O39PtuP7WoIIwD/rduX7wfWf9s9IOeUk3ZICSSUpL+mMzpaebu9t7dVr1X4D5VwP+2fU6Gl62mxs15K62n6uhxfarbxmO+swGlEUrf/IOghkzt39CQKp6O9Dt7805rhGZV86n3UM49Z5gs2hDvVMcxmGAwA4BfzzP/CPiYKrMgoCacU/9nuf/0Fm4Q4gim0dZhbHSNyo91RFfTt0PP/d6i4y9vz+73a18z2Xwtn9QTNLPE4wha7tKTWuldgC0xyVVbpYgunNrbxWN16pGui1yl5HsyX3WY1fjEdEu5yQm/aRPlpBd2Yas3Erym7NkDa36rWiLSTEv3iyI/4589l8NfdMqPeqttZ/+cjY0+TOVNh1poKCjf9q+oj/uV62lXzaXy6X498N8+4g5/wRvJ5ZRrFrtpSckah5Rc23XxrstyJoxPkxvdeC4q8VGrNbS5+d67WY1CtsbaX0Wor1yvkrYXXjcb3vq5TRMu/MXbOsX/qgSsf6P7Dxreg4d6Zt41r6K6Mxn6nklnnXMuzJHNu3y4VWBF5xsInhJN7qoW5qbvf5i0e5er22YwsPEgpPZneMrym8kRLbDFAoDmkcW9B+uyayXkbRcbtHwwujqO6aK0MauVGw3x+tGnv7JDW2d1mrJkgf8JN6d80NLdRhFEoJEZ6WQuWL1L3roKdmAgr2iZuyK+svKIzDrmmedF8xnXFAGDe77jKRKTVX8n5V51Ik+xH2yUb6J5nxEddaGVx8KbjgPmeSM7j1tGFTM7iOI15LyRldznXxsnSpo9Kob84V+jj/Eqaib7rP+38AAAAAAAAAAAAAAAAAAIBJM45/aZD1HAEAAAAAAAAAAAAAAAAAAAAAmHQD/f5v0v8R737/N+T3f4EJ8jsAAP//Y/x7PA==")
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
renameat2(r3, &(0x7f0000000240)='./bus\x00', r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

4.752690785s ago: executing program 6 (id=1898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80801, 0x28f6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101080)
ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000040)=""/44)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000800}, 0x4000000)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x28e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x100001d, 0x100, &(0x7f00000000c0)="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"})
socket(0x2b, 0x1, 0x0)

2.253474908s ago: executing program 5 (id=1900):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f00000001c0)={[{@datacow}, {@clear_cache}, {@space_cache_v1}, {@thread_pool={'thread_pool', 0x3d, 0x7}}, {@acl}, {@ssd_spread}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0)
io_setup(0x205, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x400, 0x0, 0xc0a17836ed54a846}])

2.145091378s ago: executing program 2 (id=1902):
socket(0x10, 0x400000000080803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000fc0)={{0x80000000, 0x0, 0x0, [0x7fff, 0x1]}, {0x80000000, 0x0, 0xe, [0x8, 0x9]}, 0x2, [0x80000001, 0x1]})

2.143069628s ago: executing program 6 (id=1903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000000c0)={0x9})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
removexattr(0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)

2.140660058s ago: executing program 3 (id=1904):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
setuid(0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4)
recvmmsg$unix(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000024000900000000000000000009"], 0x14}}, 0x4)

2.029043109s ago: executing program 2 (id=1905):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x7, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xcd, &(0x7f0000000140)=""/205, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x81, 0xe8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[{0x2, 0x2, 0x1, 0x6}], 0x10, 0xffffffff, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

1.946394799s ago: executing program 6 (id=1906):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r4, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

943.948455ms ago: executing program 3 (id=1907):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000700)={[{@acl}, {@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@coherency_full}, {@resv_level}, {@err_cont}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x6603}}, {@data_writeback}, {@intr}, {@journal_async_commit}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

884.736605ms ago: executing program 6 (id=1908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4048010)

786.650895ms ago: executing program 6 (id=1909):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000003c0)="81d6125af513cb5fb54f4450bdef9c85ca3e9e90f3eb99c13eec96d5273e158d24632281ecb211701cf8f529d69bd4d386de1b711d464cd1b9e14f23016d9512aa4b807fa2119d26d1b9223532a95992b22f95be9bc0b8612d6aca4345a4f48474cdb11a187861a3cd385275c09495d5d95be7c242f10da0fc98555403d5", 0x7e, 0x400c084, &(0x7f0000000280)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @random="04c5cdaadf3f"}, 0x14)

729.975696ms ago: executing program 2 (id=1910):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240))

667.639346ms ago: executing program 6 (id=1911):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r3=>0x0)
io_pgetevents(r3, 0x6, 0x6, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0)

556.704537ms ago: executing program 2 (id=1912):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000004a40))

529.927717ms ago: executing program 4 (id=1913):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000140)={[{@gid}, {@noquota}, {@nodiscard}, {@nointegrity}, {@errors_continue}, {@errors_continue}, {@nointegrity, 0x0}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@quota}, {@noquota}, {@gid}, {@errors_remount}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@noquota}]}, 0x1, 0x60e5, &(0x7f000000c4c0)="$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")

256.520678ms ago: executing program 2 (id=1914):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000001540)=""/4115, 0x1013}, {&(0x7f00000012c0)=""/170, 0xaa}, {&(0x7f0000001380)=""/118, 0x76}], 0x4}, 0x0)

0s ago: executing program 2 (id=1915):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00')
read$FUSE(r3, &(0x7f0000004480)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

.26'.
[   52.635355][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   53.058441][ T3876] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   54.865614][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   54.913986][ T4508] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   54.985027][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   58.092437][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   58.318984][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.321225][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.454324][ T4552] process 'syz.1.52' launched './file0' with NULL argv: empty string added
[   59.317832][ T4564] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure
[   59.412077][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'.
[   59.414292][ T4562] device bridge_slave_1 left promiscuous mode
[   59.415702][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.480207][ T4562] device bridge_slave_0 left promiscuous mode
[   59.481893][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.787579][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   59.924641][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.927339][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.563733][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'.
[   61.825931][ T4626] Bluetooth: MGMT ver 1.22
[   61.832070][ T4626] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[   61.855164][ T4628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.83'.
[   61.859707][ T4628] netlink: 'syz.4.83': attribute type 10 has an invalid length.
[   61.881431][ T4628] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   61.945785][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'.
[   62.007419][ T4632] netlink: 'syz.4.85': attribute type 10 has an invalid length.
[   62.020551][ T4632] bridge0: port 3(team0) entered blocking state
[   62.026480][ T4632] bridge0: port 3(team0) entered disabled state
[   62.033772][ T4632] device team0 entered promiscuous mode
[   62.044713][ T4632] device team_slave_0 entered promiscuous mode
[   62.055003][ T4632] device team_slave_1 entered promiscuous mode
[   62.056929][ T4632] bridge0: port 3(team0) entered blocking state
[   62.058439][ T4632] bridge0: port 3(team0) entered forwarding state
[   62.075764][ T4632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.85'.
[   62.085849][ T4632] device team_slave_1 left promiscuous mode
[   62.118039][ T4632] team0: Port device team_slave_1 removed
[   62.363864][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'.
[   62.541144][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'.
[   62.543845][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'.
[   63.451393][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'.
[   63.565594][   T27] audit: type=1326 audit(63.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9934b328 code=0x7ffc0000
[   63.580606][   T27] audit: type=1326 audit(63.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=96 compat=0 ip=0xffff9934b328 code=0x7ffc0000
[   63.588443][   T27] audit: type=1326 audit(63.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9934b328 code=0x7ffc0000
[   63.608910][ T4664] netlink: 'syz.0.98': attribute type 4 has an invalid length.
[   63.842460][ T4677] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   64.529356][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   66.229291][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'.
[   66.324816][ T4696] netlink: 'syz.4.110': attribute type 3 has an invalid length.
[   66.326552][ T4696] netlink: 'syz.4.110': attribute type 1 has an invalid length.
[   70.229025][   T24] cfg80211: failed to load regulatory.db
[   70.419938][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[   70.422183][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[   70.473166][ T4756] netlink: 'syz.2.130': attribute type 10 has an invalid length.
[   70.606743][ T4757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'.
[   70.902870][   T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.088588][   T14] usb 1-1: Using ep0 maxpacket: 16
[   71.105352][   T14] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[   71.107330][   T14] usb 1-1: config 0 has no interface number 0
[   71.108876][   T14] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   71.174774][   T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[   71.176756][   T14] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   71.188244][   T14] usb 1-1: Product: syz
[   71.189241][   T14] usb 1-1: SerialNumber: syz
[   71.202477][   T14] usb 1-1: config 0 descriptor??
[   71.211010][   T14] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[   71.276644][ T4760] team0: Port device team_slave_1 removed
[   71.289740][ T4769] tipc: Started in network mode
[   71.290903][ T4769] tipc: Node identity ac1414aa, cluster identity 4711
[   71.292839][ T4769] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.294437][ T4769] tipc: Enabled bearer <udp:s>, priority 10
[   71.402541][   T27] audit: type=1326 audit(71.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4775 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[   71.408349][   T27] audit: type=1326 audit(71.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4775 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[   71.413039][   T27] audit: type=1326 audit(71.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4775 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[   71.429406][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.536539][ T4787] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.568323][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.708247][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.848267][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   71.988249][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   72.357766][ T4384] tipc: Node number set to 2886997162
[   72.482089][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   72.488351][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   72.602644][ T4813] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   72.614325][ T4813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'.
[   72.667010][ T4813] team0: Port device team_slave_1 removed
[   72.758318][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   72.983122][ T4825] fuse: Bad value for 'fd'
[   73.090551][ T4839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.092900][ T4839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.268390][   T24] usb 1-1: USB disconnect, device number 3
[   73.466477][ T4851] netlink: 'syz.0.169': attribute type 10 has an invalid length.
[   73.468822][ T4851] bridge0: port 3(team0) entered blocking state
[   73.470406][ T4851] bridge0: port 3(team0) entered disabled state
[   73.472880][ T4851] device team0 entered promiscuous mode
[   73.474235][ T4851] device team_slave_0 entered promiscuous mode
[   73.475762][ T4851] device team_slave_1 entered promiscuous mode
[   73.479915][ T4851] bridge0: port 3(team0) entered blocking state
[   73.481490][ T4851] bridge0: port 3(team0) entered forwarding state
[   73.490711][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'.
[   73.493615][ T4851] device team_slave_1 left promiscuous mode
[   73.507032][ T4851] team0: Port device team_slave_1 removed
[   73.633820][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   73.963453][ T4877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'.
[   74.080887][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'.
[   74.163279][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.178860][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.187537][ T4897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.189875][ T4897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.656895][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'.
[   74.874539][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   75.629226][ T4309] Bluetooth: hci3: command 0x2021 tx timeout
[   75.733032][ T4953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'.
[   76.387864][ T4345] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   76.418249][    C0] net_ratelimit: 3 callbacks suppressed
[   76.418268][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   77.008230][ T4345] usb 1-1: Using ep0 maxpacket: 16
[   77.010917][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.013391][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.015285][ T4345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   77.023412][ T4345] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   77.025278][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.032790][ T4345] usb 1-1: config 0 descriptor??
[   77.457621][ T4345] usbhid 1-1:0.0: can't add hid device: -71
[   77.459041][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   77.460775][ T4345] usbhid: probe of 1-1:0.0 failed with error -71
[   77.471768][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'.
[   77.473707][ T4345] usb 1-1: USB disconnect, device number 4
[   77.475232][ T4989] netlink: 'syz.4.218': attribute type 10 has an invalid length.
[   77.476904][ T4990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.218'.
[   77.523548][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'.
[   78.498243][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   78.735151][ T5021] netlink: 'syz.0.230': attribute type 10 has an invalid length.
[   78.756269][ T5021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'.
[   78.772014][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'.
[   78.960894][   T27] audit: type=1326 audit(78.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5012 comm="syz.3.228" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x0
[   79.538260][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   79.754160][   T27] audit: type=1326 audit(79.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[   79.759622][   T27] audit: type=1326 audit(79.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=260 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[   79.922613][   T27] audit: type=1326 audit(79.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[   80.578348][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   80.680047][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'.
[   80.767319][ T5069] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   80.814692][ T5073] netlink: 'syz.4.245': attribute type 10 has an invalid length.
[   80.822726][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'.
[   81.628236][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   82.624779][ T5105] netlink: 'syz.2.260': attribute type 10 has an invalid length.
[   82.654259][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   82.658256][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   83.670390][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.672411][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.698238][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   84.748258][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   84.842831][ T5138] sctp: [Deprecated]: syz.0.270 (pid 5138) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.842831][ T5138] Use struct sctp_sack_info instead
[   85.519164][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'.
[   85.593345][ T5147] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[   85.658653][ T5152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.276'.
[   85.673738][ T5152] 0ªX¹¦À: renamed from caif0
[   85.758373][ T5152] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   85.778265][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   86.057695][ T5161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.082102][ T5161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.818243][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   87.853409][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   87.858302][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   87.907922][ T5183] netlink: 'syz.1.287': attribute type 10 has an invalid length.
[   88.908261][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   89.714960][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.716953][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.722123][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'.
[   89.938280][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   91.235167][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   91.303078][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'.
[   92.211016][ T5230] netlink: 'syz.2.303': attribute type 10 has an invalid length.
[   92.221686][ T5230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'.
[   92.258288][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   93.298272][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   93.965566][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   94.314321][ T5272] netlink: 'syz.2.317': attribute type 10 has an invalid length.
[   94.317719][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[   94.338271][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   94.578416][ T5277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.580404][ T5277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.378238][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   96.418279][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   96.434399][ T5291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.322'.
[   96.759448][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'.
[   97.044124][ T5305] netlink: 'syz.4.329': attribute type 10 has an invalid length.
[   97.067072][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'.
[   97.458253][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   98.163151][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   98.248995][ T5330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'.
[   98.466045][ T5341] netlink: 'syz.2.342': attribute type 10 has an invalid length.
[   98.471012][ T5341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.342'.
[   98.498283][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   99.548238][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   99.625144][ T5361] netlink: 3 bytes leftover after parsing attributes in process `syz.1.347'.
[   99.627535][ T5361] 0ªX¹¦À: renamed from caif0
[   99.708409][ T5361] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   99.854412][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  100.393822][ T5383] netlink: 'syz.2.354': attribute type 10 has an invalid length.
[  100.417101][ T5383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.354'.
[  100.578288][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  101.630836][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  102.493868][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  102.516974][ T5402] mmap: syz.2.361 (5402) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  102.527209][ T5406] tipc: Started in network mode
[  102.529960][ T5406] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  102.532886][ T5406] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  102.550256][ T5406] tipc: Enabled bearer <udp:syz1>, priority 10
[  102.658272][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  102.883041][ T5425] netlink: 'syz.4.368': attribute type 10 has an invalid length.
[  102.891423][ T5425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.368'.
[  103.121076][ T5431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'.
[  103.698354][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  104.090427][ T4384] tipc: Node number set to 1
[  104.151157][ T5438] netlink: 3 bytes leftover after parsing attributes in process `syz.0.371'.
[  104.153323][ T5438] 0ªX¹¦À: renamed from caif0
[  104.383962][ T5438] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  104.738295][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  105.313100][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  105.778259][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  106.818267][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  106.976277][ T5476] device vlan2 entered promiscuous mode
[  106.977649][ T5476] device vlan0 entered promiscuous mode
[  106.997482][ T5476] device vlan0 left promiscuous mode
[  107.226167][ T5481] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[  107.228401][ T5483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'.
[  107.858252][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  108.179107][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  108.576618][ T5506] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  108.898298][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  109.939283][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  110.982563][ T5526] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  110.985808][ T5526] Cannot find add_set index 0 as target
[  111.216984][ T5522] netlink: 'syz.1.395': attribute type 10 has an invalid length.
[  111.240005][ T5522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'.
[  111.349126][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  111.597980][ T5536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.606879][ T5536] device batadv_slave_0 entered promiscuous mode
[  112.771731][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'.
[  112.922724][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  113.046738][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[  113.938269][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  114.261462][ T5570] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  114.988667][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  115.844380][ T5569] netlink: 'syz.2.406': attribute type 10 has an invalid length.
[  115.846429][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'.
[  115.996004][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.997996][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.018278][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  116.043509][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'.
[  117.069199][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  117.733969][ T5603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.412'.
[  117.899421][ T5607] netlink: 'syz.3.421': attribute type 10 has an invalid length.
[  117.915558][ T5607] bridge0: port 3(team0) entered blocking state
[  117.925740][ T5607] bridge0: port 3(team0) entered disabled state
[  118.057761][ T5607] device team0 entered promiscuous mode
[  118.077242][ T5607] device team_slave_0 entered promiscuous mode
[  118.098287][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  118.532280][ T5607] device team_slave_1 entered promiscuous mode
[  118.637423][ T5607] bridge0: port 3(team0) entered blocking state
[  118.639071][ T5607] bridge0: port 3(team0) entered forwarding state
[  118.693970][ T5609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'.
[  118.705388][ T5607] device team_slave_1 left promiscuous mode
[  118.775357][ T5607] team0: Port device team_slave_1 removed
[  119.032772][ T5617] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  119.100799][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[  119.148547][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  120.178291][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  121.383740][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  122.418291][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  122.702638][ T4299] Bluetooth: hci0: Ignoring error of Inquiry Cancel command
[  122.720797][ T5647] netlink: 'syz.3.433': attribute type 10 has an invalid length.
[  122.725559][ T5647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'.
[  123.458459][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  123.679189][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  124.498295][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  125.548451][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  126.417255][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  126.469644][ T5678] netlink: 'syz.0.444': attribute type 10 has an invalid length.
[  126.503547][ T5678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'.
[  126.645256][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  126.726657][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'.
[  127.708480][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  128.738327][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  129.102584][ T5720] netlink: 'syz.1.459': attribute type 10 has an invalid length.
[  129.115155][ T5720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'.
[  129.591050][ T5731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  129.788486][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  130.113636][ T5734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'.
[  130.179313][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[  130.818286][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  131.868461][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  132.732465][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'.
[  132.898324][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  133.027719][ T5776] ipt_CLUSTERIP: Please specify destination IP
[  133.948469][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  134.978270][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  134.997895][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'.
[  135.018519][   T27] audit: type=1326 audit(134.990:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.040023][   T27] audit: type=1326 audit(135.010:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.073176][   T27] audit: type=1326 audit(135.010:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.077778][   T27] audit: type=1326 audit(135.010:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.110158][   T27] audit: type=1326 audit(135.010:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.114822][   T27] audit: type=1326 audit(135.040:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbcf49a60 code=0x7ffc0000
[  135.148188][   T27] audit: type=1326 audit(135.040:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  135.158466][   T27] audit: type=1326 audit(135.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.0.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbcf4b328 code=0x7ffc0000
[  136.018556][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  136.612327][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.614304][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.817793][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'.
[  136.835689][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'.
[  137.058296][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  138.362743][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  139.378368][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  139.738554][ T5866] block device autoloading is deprecated and will be removed.
[  140.352294][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  140.428476][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.736380][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  142.738544][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  143.299689][ T4299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  143.301838][ T4299] Bluetooth: hci3: Injecting HCI hardware error event
[  143.305828][ T4299] Bluetooth: hci3: hardware error 0x00
[  143.788254][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  143.871883][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'.
[  144.795134][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.804895][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  145.902101][ T4299] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  146.826439][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  146.965379][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.539'.
[  147.349963][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[  147.839982][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  148.855674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  149.970751][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  150.053926][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[  150.590577][ T6007] ipt_CLUSTERIP: Please specify destination IP
[  152.022342][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  152.065526][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.070212][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.253293][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[  152.307046][ T6028] binder: 6027 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[  152.307072][ T6028] binder: 6027:6028 ioctl c018620c 20000000 returned -22
[  153.088833][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  153.478212][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'.
[  154.111471][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.058877][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'.
[  155.125199][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  155.285968][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'.
[  156.416748][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  157.421963][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  158.438989][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  159.160249][ T4309] Bluetooth: hci0: command 0x0406 tx timeout
[  159.161610][ T4309] Bluetooth: hci2: command 0x0406 tx timeout
[  159.162850][ T4309] Bluetooth: hci1: command 0x0406 tx timeout
[  159.279249][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  159.476111][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  160.494892][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  161.523813][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.003553][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.015087][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.553804][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.830198][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[  163.594003][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.192273][ T4309] Bluetooth: hci4: command 0x0406 tx timeout
[  164.615376][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  164.877056][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'.
[  164.993947][ T4299] Bluetooth: hci2: command 0x0409 tx timeout
[  165.024693][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  165.320831][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'.
[  165.358232][ T6232] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  165.362148][ T6232] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  165.583714][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.646814][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  166.679187][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.410283][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'.
[  167.461253][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  167.711681][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  167.839613][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  167.889022][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'.
[  168.745053][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  168.968173][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[  169.098590][ T6305] netlink: 'syz.4.656': attribute type 10 has an invalid length.
[  169.101871][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'.
[  169.778485][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  170.322568][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'.
[  170.361002][ T6335] netlink: 'syz.4.671': attribute type 10 has an invalid length.
[  170.364265][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'.
[  170.822605][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  171.059177][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'.
[  172.208467][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.001952][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.004110][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.116572][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  173.276630][ T6372] netlink: 'syz.4.684': attribute type 10 has an invalid length.
[  173.279935][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  173.317798][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'.
[  174.315029][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  176.180605][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.183391][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.205443][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'.
[  177.245939][ T6410] netlink: 'syz.2.695': attribute type 10 has an invalid length.
[  177.264813][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'.
[  177.371307][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.373961][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.219923][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.256231][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  179.701201][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  179.757349][ T6450] netlink: 'syz.4.709': attribute type 10 has an invalid length.
[  179.766696][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'.
[  180.177098][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.707'.
[  180.293091][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  181.329911][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  181.334744][ T6485] netlink: 'syz.2.722': attribute type 10 has an invalid length.
[  181.357675][ T6488] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.720'.
[  181.365721][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'.
[  181.377238][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'.
[  181.405522][ T6488] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96
[  181.825288][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'.
[  182.367294][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  183.168811][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  183.345534][ T6527] netlink: 'syz.2.734': attribute type 10 has an invalid length.
[  183.349649][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.734'.
[  183.404442][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  184.442094][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  185.186630][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'.
[  185.479708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  186.517647][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  186.738853][ T4384] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  186.928015][ T4384] usb 1-1: config 0 has an invalid interface number: 229 but max is 0
[  186.928475][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  186.930078][ T4384] usb 1-1: config 0 has no interface number 0
[  186.932847][ T4384] usb 1-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64
[  186.935437][ T4384] usb 1-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.968399][ T4384] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  186.970345][ T4384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.971932][ T4384] usb 1-1: Product: syz
[  186.972841][ T4384] usb 1-1: Manufacturer: syz
[  186.973980][ T4384] usb 1-1: SerialNumber: syz
[  186.987772][ T4384] usb 1-1: config 0 descriptor??
[  186.989870][ T6569] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  187.010573][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.012862][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.072694][ T6577] netlink: 'syz.4.750': attribute type 10 has an invalid length.
[  187.077155][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'.
[  187.555460][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  188.424069][ T4384] usb 1-1: USB disconnect, device number 5
[  188.733925][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  191.250009][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  191.876046][ T6628] ebtables: ebtables: counters copy to user failed while replacing table
[  191.933539][ T6616] netlink: 'syz.0.761': attribute type 10 has an invalid length.
[  191.938472][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.761'.
[  192.277928][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  192.330284][ T6641] binder: 6632:6641 DecRefs 0 refcount change on invalid ref 3 ret -22
[  192.332336][ T6641] binder: 6632:6641 got reply transaction with no transaction stack
[  192.334136][ T6641] binder: 6632:6641 transaction reply to 0:0 failed 1/29201/-71, size 0-0 line 2955
[  192.536557][  T111] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  192.737273][  T111] usb 1-1: Using ep0 maxpacket: 16
[  192.925010][ T3876] binder: undelivered TRANSACTION_ERROR: 29201
[  192.929774][  T111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.932031][  T111] usb 1-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00
[  192.933968][  T111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.014859][  T111] usb 1-1: config 0 descriptor??
[  193.035929][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  193.316322][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  194.882886][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  195.159701][  T111] asus 0003:0B05:1837.0001: unknown main item tag 0x0
[  195.161353][  T111] asus 0003:0B05:1837.0001: unknown main item tag 0x0
[  195.162770][  T111] asus 0003:0B05:1837.0001: unknown main item tag 0x0
[  195.166644][  T111] asus 0003:0B05:1837.0001: unknown main item tag 0x0
[  195.168103][  T111] asus 0003:0B05:1837.0001: unknown main item tag 0x0
[  195.943255][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  196.747340][  T111] asus 0003:0B05:1837.0001: hidraw0: USB HID v0.00 Device [HID 0b05:1837] on usb-dummy_hcd.0-1/input0
[  196.749536][  T111] asus 0003:0B05:1837.0001: Asus input not registered
[  196.982295][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  197.486683][  T111] asus: probe of 0003:0B05:1837.0001 failed with error -12
[  197.495304][  T111] usb 1-1: USB disconnect, device number 6
[  197.644847][ T6661] netlink: 'syz.3.775': attribute type 10 has an invalid length.
[  197.646761][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'.
[  198.021098][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  199.060327][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  199.357352][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'.
[  200.099205][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  200.127215][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.138510][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.138557][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  201.732883][ T6733] netlink: 'syz.4.791': attribute type 10 has an invalid length.
[  201.746834][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'.
[  202.014351][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[  202.383530][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  203.349357][ T6766] netlink: 'syz.2.805': attribute type 10 has an invalid length.
[  203.356536][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'.
[  203.372705][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'.
[  203.456840][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  204.391465][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'.
[  204.495982][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  205.859272][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  206.256260][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'.
[  206.278302][ T6802] netlink: 'syz.4.818': attribute type 10 has an invalid length.
[  206.295535][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.818'.
[  206.894651][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  208.194216][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  209.724620][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  209.978999][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.981166][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.079593][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.081540][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.094180][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.096349][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.169472][ T6854] netlink: 'syz.2.832': attribute type 10 has an invalid length.
[  210.207912][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[  210.317193][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.319213][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.749845][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  211.772289][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  212.812082][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  213.009696][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.019256][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.219183][ T6889] netlink: 'syz.1.846': attribute type 10 has an invalid length.
[  213.222526][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'.
[  213.270595][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.276333][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.311220][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.314563][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.851558][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  214.286507][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.427567][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.476785][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  216.231399][ T6923] netlink: 'syz.4.858': attribute type 10 has an invalid length.
[  216.325512][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.858'.
[  216.490699][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  216.640862][   T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  216.840649][   T22] usb 1-1: Using ep0 maxpacket: 8
[  216.907080][   T22] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  216.908835][   T22] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  216.925970][   T22] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  216.959666][   T22] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  216.987718][   T22] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  217.029278][   T22] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  217.074977][   T22] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  217.087007][   T22] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  217.252306][   T22] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  217.258406][   T22] usb 1-1: string descriptor 0 read error: -22
[  217.259765][   T22] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  217.261700][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.266490][   T22] adutux 1-1:168.0: interrupt endpoints not found
[  217.385963][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'.
[  217.387788][ T6946] netlink: 'syz.4.867': attribute type 1 has an invalid length.
[  217.491072][ T4345] usb 1-1: USB disconnect, device number 7
[  217.530565][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  219.297650][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  219.328212][ T6960] netlink: 'syz.4.871': attribute type 10 has an invalid length.
[  219.401203][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'.
[  220.341420][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  221.369471][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  221.837990][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'.
[  221.985896][ T7002] netlink: 'syz.1.887': attribute type 10 has an invalid length.
[  221.989547][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'.
[  222.409462][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  223.449091][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  224.489048][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.528685][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.651934][ T7024] ubi0: attaching mtd0
[  225.654448][ T7024] ubi0: scanning is finished
[  225.655462][ T7024] ubi0: empty MTD device detected
[  226.212371][ T7024] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  226.568848][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  227.519570][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'.
[  227.521709][ T7044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.899'.
[  227.608422][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  228.869527][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.782453][ T7079] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.784733][ T7079] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.786433][ T7079] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.788413][ T7079] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.928081][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.252994][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'.
[  230.288141][  T111] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  230.470338][  T111] usb 1-1: Using ep0 maxpacket: 32
[  230.958575][  T111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.960930][  T111] usb 1-1: config 0 has no interfaces?
[  230.968134][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.988597][  T111] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  230.990789][  T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.992782][  T111] usb 1-1: Product: syz
[  230.993807][  T111] usb 1-1: Manufacturer: syz
[  230.994802][  T111] usb 1-1: SerialNumber: syz
[  231.019356][  T111] usb 1-1: config 0 descriptor??
[  231.050731][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'.
[  231.365922][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.370344][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.382150][   T22] usb 1-1: USB disconnect, device number 8
[  231.859603][ T7109] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  231.864423][ T7109] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  232.007910][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  232.857958][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'.
[  233.047897][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.087632][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.730367][ T7149] binder: 7147:7149 got transaction to invalid handle, 1
[  234.732046][ T7149] binder: 7149:7147 cannot find target node
[  234.733266][ T7149] binder: 7147:7149 transaction call to 0:0 failed 2/29201/-22, size 0-0 line 3054
[  235.669396][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  235.720308][ T4346] binder: undelivered TRANSACTION_ERROR: 29201
[  235.747390][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.749521][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.944865][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.947145][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.953568][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.936'.
[  236.727572][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  237.819797][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  238.479976][ T7207] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[  238.486998][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'.
[  238.887224][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  239.234697][ T7213] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.236566][ T7213] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.238437][ T7213] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.240146][ T7213] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.927406][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  240.297252][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.299386][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.783340][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.859874][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.967101][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.037385][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.960'.
[  242.053507][ T7255] device macsec1 entered promiscuous mode
[  245.334939][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'.
[  246.181569][ T7308] ip6t_rpfilter: unknown options
[  247.828953][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'.
[  248.387777][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  248.795550][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1000'.
[  251.681659][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1004'.
[  251.782581][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.784587][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.132935][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'.
[  256.730611][   T27] audit: type=1326 audit(257.187:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.1022" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb154b328 code=0x0
[  258.651109][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.653023][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.354241][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.356174][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.814629][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'.
[  261.502920][ T7511] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  261.610912][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.612839][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.859289][ T7025] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  262.916668][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'.
[  263.090420][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.092592][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.106923][ T7025] usb 1-1: Using ep0 maxpacket: 8
[  263.112203][ T7025] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  263.114378][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.116135][ T7025] usb 1-1: Product: syz
[  263.117276][ T7025] usb 1-1: Manufacturer: syz
[  263.118336][ T7025] usb 1-1: SerialNumber: syz
[  263.222691][ T7550] input: syz0 as /devices/virtual/input/input7
[  263.818540][ T7025] usb 1-1: config 0 descriptor??
[  264.032625][ T7025] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  266.471870][ T7025] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  266.478377][ T7025] usb 1-1: USB disconnect, device number 9
[  267.369225][ T7620] netlink: 'syz.0.1077': attribute type 13 has an invalid length.
[  267.371026][ T7620] netlink: 149 bytes leftover after parsing attributes in process `syz.0.1077'.
[  267.378744][ T7620] syz_tun: refused to change device tx_queue_len
[  267.380240][ T7620] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  267.768269][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'.
[  269.969344][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'.
[  272.041066][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1097'.
[  272.152426][ T7696] xt_TCPMSS: Only works on TCP SYN packets
[  272.208156][ T7696] netlink: 'syz.2.1099': attribute type 10 has an invalid length.
[  272.331426][ T7696] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  273.887897][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1111'.
[  277.014231][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'.
[  277.078798][ T7782] block nbd2: shutting down sockets
[  277.143781][ T7784] xt_TCPMSS: Only works on TCP SYN packets
[  277.175414][ T7784] netlink: 'syz.1.1124': attribute type 10 has an invalid length.
[  277.376087][ T7784] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  278.168277][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.170421][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.798511][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'.
[  279.929188][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.931294][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.761810][ T7854] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  281.789568][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  283.072293][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.074244][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.946707][ T7876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.949500][ T7876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.334815][ T7876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.380905][ T7876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.852006][ T7876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.854142][ T7876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.890920][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.893037][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.011953][ T7876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.016673][ T7876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.168119][ T7876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.170345][ T7876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.183880][ T7876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  285.185925][ T7876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.203081][ T7876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  285.217622][ T7876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.228457][ T7876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.229693][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.232117][ T7876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.232520][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.782909][ T7913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  287.785276][ T7913] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  288.494481][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'.
[  289.727409][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.729377][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.245718][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'.
[  291.656344][ T7974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  291.658858][ T7974] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  293.738795][ T4972] udevd[4972]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory
[  296.559361][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  299.568782][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'.
[  299.708128][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'.
[  301.078289][ T8089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'.
[  301.436111][  T111] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  301.619948][  T111] usb 1-1: config 0 has no interfaces?
[  301.621145][  T111] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  301.623069][  T111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.638927][  T111] usb 1-1: config 0 descriptor??
[  301.854178][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.865780][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.874427][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.894637][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.905538][   T24] usb 1-1: USB disconnect, device number 10
[  304.734952][  T111] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  304.788048][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'.
[  307.074099][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'.
[  309.769035][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  311.261053][ T8214] syz.2.1252 uses obsolete (PF_INET,SOCK_PACKET)
[  314.591837][   T27] audit: type=1326 audit(315.047:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.597032][   T27] audit: type=1326 audit(315.047:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.602066][   T27] audit: type=1326 audit(315.047:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.619238][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.622478][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.626558][   T27] audit: type=1326 audit(315.047:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.641635][   T27] audit: type=1326 audit(315.057:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.651885][   T27] audit: type=1326 audit(315.057:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.666707][   T27] audit: type=1326 audit(315.057:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.671150][   T27] audit: type=1326 audit(315.057:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.697031][   T27] audit: type=1326 audit(315.057:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  314.732897][ T8263] netlink: 'syz.3.1269': attribute type 10 has an invalid length.
[  314.738018][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'.
[  315.052257][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.054392][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.172991][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  316.516147][   T24] usb 1-1: Using ep0 maxpacket: 32
[  316.519697][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  316.521925][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  316.524203][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  316.548493][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  316.570334][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  316.591301][   T24] usb 1-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27
[  316.605956][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.619367][   T24] usb 1-1: Product: syz
[  316.624565][   T24] usb 1-1: Manufacturer: syz
[  316.631376][   T24] usb 1-1: SerialNumber: syz
[  316.737729][   T24] usb 1-1: config 0 descriptor??
[  316.739568][ T8271] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  316.754099][   T24] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  316.779518][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.781471][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.098842][ T4345] usb 1-1: USB disconnect, device number 12
[  317.170017][ T8300] netlink: 'syz.3.1281': attribute type 10 has an invalid length.
[  317.182584][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1281'.
[  317.733451][ T8312] netlink: 'syz.0.1285': attribute type 10 has an invalid length.
[  317.777217][ T8312] bond0: (slave bond_slave_0): Releasing backup interface
[  318.330770][ T8320] binder: 8311:8320 Acquire 1 refcount change on invalid ref 0 ret -22
[  319.662774][ T8338] netlink: 'syz.2.1292': attribute type 10 has an invalid length.
[  319.667154][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'.
[  320.954008][ T8357] Bluetooth: MGMT ver 1.22
[  321.725735][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1296'.
[  322.277512][   T27] audit: type=1326 audit(322.507:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[  322.379493][   T27] audit: type=1326 audit(322.507:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[  322.684890][   T27] audit: type=1326 audit(322.507:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[  322.770101][   T27] audit: type=1326 audit(322.507:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[  322.774838][   T27] audit: type=1326 audit(322.507:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc34b328 code=0x7ffc0000
[  322.782945][ T8375] netlink: 'syz.1.1304': attribute type 10 has an invalid length.
[  322.787235][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'.
[  325.468106][ T8406] netlink: 'syz.4.1314': attribute type 10 has an invalid length.
[  325.532267][ T8406] bond0: (slave bond_slave_0): Releasing backup interface
[  325.604717][ T8410] netlink: 'syz.2.1316': attribute type 10 has an invalid length.
[  325.623545][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  325.767270][ T8414] netlink: 'syz.2.1317': attribute type 4 has an invalid length.
[  325.805790][ T8411] binder: 8405:8411 Acquire 1 refcount change on invalid ref 0 ret -22
[  327.611233][ T8444] netlink: 'syz.0.1327': attribute type 10 has an invalid length.
[  327.629209][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'.
[  327.795701][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1326'.
[  328.935403][   T27] audit: type=1326 audit(328.807:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  328.991921][   T27] audit: type=1326 audit(328.807:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  329.027260][   T27] audit: type=1326 audit(328.837:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  329.031970][   T27] audit: type=1326 audit(328.837:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  329.070342][   T27] audit: type=1326 audit(328.837:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb4b328 code=0x7ffc0000
[  330.513458][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.524247][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.573709][ T8486] netlink: 'syz.4.1339': attribute type 10 has an invalid length.
[  330.592906][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'.
[  330.913680][ T8495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.915629][ T8495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.104520][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1340'.
[  332.473214][ T8520] binder: 8514:8520 DecRefs 0 refcount change on invalid ref 3 ret -22
[  332.475051][ T8520] binder: 8514:8520 got reply transaction with no transaction stack
[  332.476802][ T8520] binder: 8514:8520 transaction reply to 0:0 failed 3/29201/-71, size 0-0 line 2955
[  332.883462][ T4346] binder: undelivered TRANSACTION_ERROR: 29201
[  332.981443][ T8523] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  333.001709][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'.
[  333.399747][ T8539] netlink: 'syz.0.1367': attribute type 10 has an invalid length.
[  333.403028][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'.
[  333.425267][ T8542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.431337][ T8542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.524581][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'.
[  335.671477][ T8580] netlink: 'syz.3.1370': attribute type 10 has an invalid length.
[  335.674952][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'.
[  335.894863][ T8586] netlink: 'syz.4.1364': attribute type 4 has an invalid length.
[  335.896619][ T8586] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1364'.
[  338.996374][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'.
[  339.710986][ T8616] device batadv_slave_1 entered promiscuous mode
[  339.713546][ T8616] device vlan0 entered promiscuous mode
[  339.719129][ T8615] device vlan0 left promiscuous mode
[  339.720850][ T8615] device batadv_slave_1 left promiscuous mode
[  339.819012][ T8624] netlink: 'syz.0.1382': attribute type 10 has an invalid length.
[  339.828494][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'.
[  339.975641][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.995983][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.838103][ T8667] netlink: 'syz.3.1396': attribute type 10 has an invalid length.
[  342.851583][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'.
[  345.500579][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1405'.
[  345.573773][ T8700] netlink: 'syz.3.1408': attribute type 10 has an invalid length.
[  345.577827][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1408'.
[  346.471086][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1400'.
[  347.790248][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1418'.
[  347.833922][ T8742] netlink: 'syz.2.1420': attribute type 10 has an invalid length.
[  348.117581][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1420'.
[  348.817552][ T8756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'.
[  351.309123][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.311153][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.060876][ T8789] netlink: 'syz.3.1432': attribute type 10 has an invalid length.
[  353.069059][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'.
[  353.113118][ T8793] netlink: 'syz.2.1445': attribute type 10 has an invalid length.
[  353.122243][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  353.347009][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.349059][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.998432][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'.
[  354.004817][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'.
[  354.877165][ T8830] netlink: 'syz.1.1447': attribute type 10 has an invalid length.
[  354.883892][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'.
[  355.985382][ T8838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1443'.
[  356.948126][ T8854] device syzkaller0 entered promiscuous mode
[  358.282759][ T8866] input: syz0 as /devices/virtual/input/input8
[  365.616824][ T8914] ceph: No mds server is up or the cluster is laggy
[  371.206771][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  372.325831][ T8868] netlink: 'syz.2.1459': attribute type 10 has an invalid length.
[  372.333395][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1459'.
[  372.343935][ T8879] bridge0: port 4(gretap0) entered blocking state
[  372.345740][ T8879] bridge0: port 4(gretap0) entered disabled state
[  372.348897][ T8879] device gretap0 entered promiscuous mode
[  372.350983][ T8879] bridge0: port 4(gretap0) entered blocking state
[  372.352963][ T8879] bridge0: port 4(gretap0) entered forwarding state
[  372.356648][ T8917] lo speed is unknown, defaulting to 1000
[  372.358125][ T8917] lo speed is unknown, defaulting to 1000
[  372.359999][ T8917] lo speed is unknown, defaulting to 1000
[  372.364601][ T8917] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  372.371469][ T8880] device gretap0 left promiscuous mode
[  372.372984][ T8880] bridge0: port 4(gretap0) entered disabled state
[  372.474433][ T8917] lo speed is unknown, defaulting to 1000
[  372.476520][ T8917] lo speed is unknown, defaulting to 1000
[  372.478247][ T8917] lo speed is unknown, defaulting to 1000
[  372.479912][ T8917] lo speed is unknown, defaulting to 1000
[  372.481636][ T8917] lo speed is unknown, defaulting to 1000
[  372.758245][ T8933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.773598][ T4299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.775905][ T8933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.779530][ T8933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.783864][ T8933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  372.785717][ T8933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  372.801129][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.802945][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.805854][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.816379][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.829622][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  372.845612][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.676785][ T8933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.687258][ T8933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.689500][ T8933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.692264][ T8933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.694285][ T8933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  374.695944][ T8933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.973862][ T8925] lo speed is unknown, defaulting to 1000
[  375.045624][ T8946] lo speed is unknown, defaulting to 1000
[  375.515501][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.558461][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.643760][ T8946] chnl_net:caif_netlink_parms(): no params data found
[  375.653857][ T8925] chnl_net:caif_netlink_parms(): no params data found
[  375.734373][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.736003][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.743671][ T8925] device bridge_slave_0 entered promiscuous mode
[  375.748765][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.750362][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.752707][ T8946] device bridge_slave_0 entered promiscuous mode
[  375.761786][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.763357][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.765478][ T8925] device bridge_slave_1 entered promiscuous mode
[  375.771867][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.773408][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.775561][ T8946] device bridge_slave_1 entered promiscuous mode
[  375.821302][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.828518][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.833093][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.842163][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.856557][ T4299] Bluetooth: hci2: command 0x0409 tx timeout
[  375.889964][ T8946] team0: Port device team_slave_0 added
[  375.893923][ T8925] team0: Port device team_slave_0 added
[  375.904371][ T8925] team0: Port device team_slave_1 added
[  375.909114][ T8946] team0: Port device team_slave_1 added
[  375.953528][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.955227][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.961169][ T8925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.965646][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.975295][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.981309][ T8925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.998706][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.000344][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.013349][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.035967][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.039361][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.045225][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.469084][ T8925] device hsr_slave_0 entered promiscuous mode
[  376.727834][ T4299] Bluetooth: hci0: command 0x0409 tx timeout
[  376.846741][ T8925] device hsr_slave_1 entered promiscuous mode
[  376.906306][ T8925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.907939][ T8925] Cannot create hsr debugfs directory
[  376.937842][ T8946] device hsr_slave_0 entered promiscuous mode
[  376.976967][ T8946] device hsr_slave_1 entered promiscuous mode
[  376.997209][ T8946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.998828][ T8946] Cannot create hsr debugfs directory
[  377.001667][ T8989] netlink: 'syz.2.1483': attribute type 10 has an invalid length.
[  377.003505][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  377.142719][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.148188][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.046206][ T4309] Bluetooth: hci2: command 0x041b tx timeout
[  378.197803][ T8925] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  378.284030][ T8925] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  378.415538][ T8925] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  378.488171][ T8925] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  378.678121][ T8946] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  378.759101][ T8946] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  378.824764][ T8946] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  378.866513][ T4299] Bluetooth: hci0: command 0x041b tx timeout
[  378.903497][ T8946] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  379.293561][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.295707][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.404224][ T9019] netlink: 'syz.3.1494': attribute type 10 has an invalid length.
[  379.409054][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'.
[  379.448104][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.485893][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.759572][ T9025] siw: device registration error -23
[  379.973619][ T4422] libceph: connect (1)[c::]:6789 error -101
[  379.979434][ T4422] libceph: mon0 (1)[c::]:6789 connect error
[  380.183552][ T4309] Bluetooth: hci2: command 0x040f tx timeout
[  380.212821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  380.215085][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  380.221844][ T8925] 8021q: adding VLAN 0 to HW filter on device team0
[  380.233450][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  380.236294][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  380.239777][ T8946] 8021q: adding VLAN 0 to HW filter on device team0
[  380.243547][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  380.245843][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  380.248833][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.250323][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.255963][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  380.258524][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  380.260801][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  380.262969][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.264478][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.277384][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  380.280098][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  380.282239][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  380.284292][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.285769][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.287941][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  380.290419][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  380.292462][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.293958][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.321675][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  380.324106][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  380.331886][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  380.340619][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  380.344668][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  380.356516][ T9022] ceph: No mds server is up or the cluster is laggy
[  380.359471][ T4422] libceph: connect (1)[c::]:6789 error -101
[  380.360835][ T4422] libceph: mon0 (1)[c::]:6789 connect error
[  380.380369][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  380.382862][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  380.385246][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  380.390105][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  380.392389][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  380.394777][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  380.886332][ T4299] Bluetooth: hci0: command 0x040f tx timeout
[  381.132672][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  381.135988][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  381.138803][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  381.141043][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  381.143305][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  381.145545][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  381.147708][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  381.149724][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  381.151899][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  381.160715][ T8925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.165659][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  381.196093][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  381.198726][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  382.493487][ T4309] Bluetooth: hci2: command 0x0419 tx timeout
[  382.976347][ T4299] Bluetooth: hci0: command 0x0419 tx timeout
[  383.976006][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  383.977980][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  384.029665][ T8925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.370728][ T9072] netlink: 'syz.3.1503': attribute type 2 has an invalid length.
[  384.372462][ T9072] netlink: 'syz.3.1503': attribute type 8 has an invalid length.
[  384.374189][ T9072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1503'.
[  385.001107][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.046497][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  385.048245][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  385.242820][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  385.245107][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  385.265694][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  385.270919][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  385.273642][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  385.275695][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  385.285928][ T8925] device veth0_vlan entered promiscuous mode
[  385.295529][ T8925] device veth1_vlan entered promiscuous mode
[  385.327925][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  385.330173][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  385.333383][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  385.338594][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  385.342704][ T8925] device veth0_macvtap entered promiscuous mode
[  385.349089][ T8925] device veth1_macvtap entered promiscuous mode
[  385.383267][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.385417][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.396654][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.398851][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.400733][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.402930][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.404902][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.407905][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.411330][ T8925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.412958][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  385.415301][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  385.423890][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  385.429205][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  385.433245][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.435403][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.438176][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.440506][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.442509][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.444651][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.447295][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.449314][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.451397][ T8925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.453560][ T8925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.458374][ T8925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.460113][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  385.462572][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.486214][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  385.488413][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  385.494190][ T8925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.495969][ T8925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.505445][ T8925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.508058][ T8925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.512464][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  385.514775][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  385.525250][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  385.530893][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  385.549005][ T8946] device veth0_vlan entered promiscuous mode
[  385.555406][ T8946] device veth1_vlan entered promiscuous mode
[  385.620647][ T8946] device veth0_macvtap entered promiscuous mode
[  385.623307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  385.625493][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  385.635905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  385.639901][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  385.642180][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  385.654744][ T8946] device veth1_macvtap entered promiscuous mode
[  385.667961][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.669638][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.674721][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  385.677910][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  385.703034][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.705253][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.708893][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.711025][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.713021][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.715347][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.727289][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.734401][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.740521][ T9089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.742482][ T9089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.744254][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.751294][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.755022][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.857537][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.859321][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.884590][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  385.898283][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  385.900630][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  385.905906][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.909902][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.912081][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.914247][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.923346][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.925652][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.941367][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.943646][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.945783][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.083046][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.089491][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.092201][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.112341][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.260161][ T9095] siw: device registration error -23
[  386.351758][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  386.484033][  T111] libceph: connect (1)[c::]:6789 error -101
[  386.495436][  T111] libceph: mon0 (1)[c::]:6789 connect error
[  386.681176][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  386.690379][ T8946] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.692421][ T8946] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.699726][ T8946] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.701678][ T8946] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.716877][ T9092] ceph: No mds server is up or the cluster is laggy
[  386.833301][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'.
[  386.852273][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.854073][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.859434][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  386.884287][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.890085][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.898393][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  389.466279][ T9125] netlink: 'syz.2.1507': attribute type 1 has an invalid length.
[  389.649628][ T9125] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.726695][ T9128] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.033230][ T9128] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  390.427963][ T9128] bond1: (slave vcan1): Error -95 calling set_mac_address
[  390.525630][ T9129] netlink: 'syz.5.1516': attribute type 2 has an invalid length.
[  390.527426][ T9129] netlink: 'syz.5.1516': attribute type 8 has an invalid length.
[  390.529061][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1516'.
[  394.145607][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.156665][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.173917][ T9183] binder: 9183:9182 cannot find target node
[  394.175050][ T9183] binder: 9182:9183 transaction call to 0:0 failed 5/29189/-22, size 88-24 line 3054
[  394.486210][ T9178] netlink: 'syz.4.1529': attribute type 2 has an invalid length.
[  394.487972][ T9178] netlink: 'syz.4.1529': attribute type 8 has an invalid length.
[  394.489565][ T9178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1529'.
[  395.268592][ T1515] binder: undelivered TRANSACTION_ERROR: 29189
[  395.281907][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.284014][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.012926][ T9340] binder: 9337:9340 tried to acquire reference to desc 0, got 1 instead
[  406.156728][ T9340] binder: 9337:9340 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  406.159459][ T9340] binder: 9340 RLIMIT_NICE not set
[  406.198629][ T9340] binder: undelivered transaction 10, fd fixups failed
[  406.200266][ T9340] binder: 9337:9340 async transaction 10 fd fixups failed 29201/-12, line 4675
[  406.925250][ T4344] binder: undelivered TRANSACTION_COMPLETE
[  411.166901][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1596'.
[  411.808651][ T9394] netlink: 'syz.6.1602': attribute type 10 has an invalid length.
[  411.810512][ T9394] bridge0: port 3(team0) entered blocking state
[  411.811896][ T9394] bridge0: port 3(team0) entered disabled state
[  411.822766][ T9394] device team0 entered promiscuous mode
[  411.824158][ T9394] device team_slave_0 entered promiscuous mode
[  411.825539][ T9394] device team_slave_1 entered promiscuous mode
[  411.828334][ T9394] bridge0: port 3(team0) entered blocking state
[  411.829773][ T9394] bridge0: port 3(team0) entered forwarding state
[  411.838318][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1602'.
[  411.840921][ T9394] device team_slave_1 left promiscuous mode
[  411.924731][ T9394] team0: Port device team_slave_1 removed
[  414.213296][ T9434] netlink: 'syz.6.1616': attribute type 10 has an invalid length.
[  415.593630][ T9472] netlink: 'syz.2.1632': attribute type 10 has an invalid length.
[  416.839851][ T9510] netlink: 'syz.3.1648': attribute type 10 has an invalid length.
[  418.047048][ T9544] netlink: 'syz.5.1665': attribute type 10 has an invalid length.
[  418.073323][ T9544] bridge0: port 3(team0) entered blocking state
[  418.076388][ T9544] bridge0: port 3(team0) entered disabled state
[  418.111974][ T9544] device team0 entered promiscuous mode
[  418.113309][ T9544] device team_slave_0 entered promiscuous mode
[  418.114752][ T9544] device team_slave_1 entered promiscuous mode
[  418.145157][ T9544] bridge0: port 3(team0) entered blocking state
[  418.146658][ T9544] bridge0: port 3(team0) entered forwarding state
[  418.149797][ T9555] device team_slave_1 left promiscuous mode
[  418.285874][ T9555] team0: Port device team_slave_1 removed
[  420.556995][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.559011][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.574586][ T9600] netlink: 'syz.3.1686': attribute type 10 has an invalid length.
[  420.631070][ T9570] loop4: detected capacity change from 0 to 40427
[  420.673132][ T9570] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  420.690742][ T9570] F2FS-fs (loop4): invalid crc value
[  420.712924][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.715344][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.738186][ T9603] usb usb8: usbfs: process 9603 (syz.6.1688) did not claim interface 1 before use
[  420.757059][ T9570] F2FS-fs (loop4): Found nat_bits in checkpoint
[  420.831545][ T9570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  420.950301][ T4307] syz-executor: attempt to access beyond end of device
[  420.950301][ T4307] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  422.483211][ T9636] netlink: 'syz.4.1699': attribute type 10 has an invalid length.
[  422.819092][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'.
[  423.992605][ T9670] netlink: 'syz.2.1713': attribute type 10 has an invalid length.
[  424.231074][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1709'.
[  426.176155][ T4309] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  426.178422][ T4309] Bluetooth: hci0: Injecting HCI hardware error event
[  426.183516][ T4309] Bluetooth: hci0: hardware error 0x00
[  426.833001][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1721'.
[  427.032986][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'.
[  428.976344][ T4309] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  429.092714][ T9734] loop5: detected capacity change from 0 to 1024
[  429.146664][ T9734] =======================================================
[  429.146664][ T9734] WARNING: The mand mount option has been deprecated and
[  429.146664][ T9734]          and is ignored by this kernel. Remove the mand
[  429.146664][ T9734]          option from the mount to silence this warning.
[  429.146664][ T9734] =======================================================
[  429.241286][ T9734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  429.260795][ T9729] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.357364][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'.
[  429.945701][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.954631][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.120510][ T9751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  430.122101][ T9751] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  430.144475][ T8925] EXT4-fs (loop5): unmounting filesystem.
[  430.146332][ T9751] vhci_hcd vhci_hcd.0: Device attached
[  430.150952][ T9757] vhci_hcd: connection closed
[  430.153859][ T9630] vhci_hcd: stop threads
[  430.158390][ T9630] vhci_hcd: release socket
[  430.160551][ T9630] vhci_hcd: disconnect device
[  430.180820][ T9729] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.297900][ T9729] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.408273][ T9729] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.571526][ T9729] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.579802][ T9729] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.587016][ T9729] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.594500][ T9729] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.856965][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  433.967037][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'.
[  434.294977][ T9800] binder: 9788:9800 DecRefs 0 refcount change on invalid ref 3 ret -22
[  434.296753][ T9800] binder: 9788:9800 got reply transaction with no transaction stack
[  434.298447][ T9800] binder: 9788:9800 transaction reply to 0:0 failed 11/29201/-71, size 0-0 line 2955
[  434.918005][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  435.655729][ T9812] loop6: detected capacity change from 0 to 32768
[  437.344877][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'.
[  438.592926][ T9836] loop3: detected capacity change from 0 to 4096
[  440.126173][ T9844] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  442.096251][ T9859] netlink: 'syz.4.1767': attribute type 1 has an invalid length.
[  443.521899][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'.
[  443.547737][ T4296] cgroup: fork rejected by pids controller in /syz2
[  444.378645][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  444.384436][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  444.387200][ T4299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  444.401289][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  444.403643][ T4299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  444.405521][ T4299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  445.491171][ T4471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.347278][ T4471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.381091][ T9883] lo speed is unknown, defaulting to 1000
[  446.536235][ T4309] Bluetooth: hci1: command 0x0409 tx timeout
[  446.686067][ T9911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1784'.
[  447.302688][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'.
[  447.390737][ T4471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.026964][ T4471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.068160][ T9883] chnl_net:caif_netlink_parms(): no params data found
[  448.254410][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.256594][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.265963][ T9883] device bridge_slave_0 entered promiscuous mode
[  448.304587][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.309696][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.320033][ T9883] device bridge_slave_1 entered promiscuous mode
[  448.460185][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.472111][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.566619][ T4309] Bluetooth: hci1: command 0x041b tx timeout
[  448.758729][ T9883] team0: Port device team_slave_0 added
[  448.805300][ T9954] loop3: detected capacity change from 0 to 1024
[  448.863870][ T9883] team0: Port device team_slave_1 added
[  448.895531][ T9954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  448.933328][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.026437][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.032608][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.134573][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.266276][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.272287][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.654522][ T4305] EXT4-fs (loop3): unmounting filesystem.
[  450.656729][ T4309] Bluetooth: hci1: command 0x040f tx timeout
[  452.448585][   T27] audit: type=1326 audit(452.907:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb154b328 code=0x7ffc0000
[  452.473519][   T27] audit: type=1326 audit(452.927:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb154b328 code=0x7ffc0000
[  452.490503][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.492476][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.726513][ T4309] Bluetooth: hci1: command 0x0419 tx timeout
[  453.668417][ T9883] device hsr_slave_0 entered promiscuous mode
[  453.726629][ T9883] device hsr_slave_1 entered promiscuous mode
[  453.936353][ T9883] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.939889][ T9883] Cannot create hsr debugfs directory
[  457.205864][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.215386][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.226428][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'.
[  457.227278][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.228445][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.230344][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.231675][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.249006][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.250785][T10035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.530788][ T4471] bond0: (slave wlan1): Releasing backup interface
[  461.888374][T10085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1827'.
[  462.307569][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'.
[  462.309669][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.311400][T10083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.319032][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.320813][T10083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.337856][ T4471] device hsr_slave_0 left promiscuous mode
[  463.382903][ T4471] device hsr_slave_1 left promiscuous mode
[  463.838149][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.840663][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.948991][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.041763][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.486722][ T4471] device veth1_macvtap left promiscuous mode
[  464.488678][ T4471] device veth0_macvtap left promiscuous mode
[  464.490035][ T4471] device veth1_vlan left promiscuous mode
[  464.492417][ T4471] device veth0_vlan left promiscuous mode
[  464.950258][T10124] loop6: detected capacity change from 0 to 32768
[  465.005029][T10124] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  465.016665][T10124] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  465.056709][T10124] gfs2: fsid=syz:syz.0: journal 0 mapped with 20 extents in 0ms
[  465.062421][ T4597] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  465.063958][ T4597] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  465.143665][ T4597] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms
[  465.146007][ T4597] gfs2: fsid=syz:syz.0: jid=0: Done
[  465.148341][T10124] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  465.497873][ T4471] bond1 (unregistering): Released all slaves
[  469.060331][ T4471] team0 (unregistering): Port device team_slave_0 removed
[  469.633585][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.133270][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.839455][ T4471] bond0 (unregistering): Released all slaves
[  473.949917][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.986394][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.891026][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'.
[  474.892924][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.894623][T10155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.925870][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.927618][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.905598][T10223] netlink: 'syz.5.1861': attribute type 29 has an invalid length.
[  477.985628][T10223] netlink: 'syz.5.1861': attribute type 29 has an invalid length.
[  477.994906][T10225] netlink: 'syz.5.1861': attribute type 29 has an invalid length.
[  478.048137][ T9883] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  478.130766][ T9883] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  478.186288][ T9883] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  478.439015][ T9883] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  478.768054][ T9883] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.096270][ T9883] 8021q: adding VLAN 0 to HW filter on device team0
[  482.098489][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  482.100614][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  482.113628][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  482.119257][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  482.123642][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.125284][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.148088][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  482.154202][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  482.158936][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  482.161284][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.162916][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.164760][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  482.172204][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  482.182233][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  482.188877][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  482.191302][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  482.193691][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  482.205714][ T9883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  482.210930][ T9883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  482.251753][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  482.254205][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  482.261671][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  482.294491][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  482.308371][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  482.331803][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  485.280634][T10317] loop4: detected capacity change from 0 to 64
[  486.125385][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.917005][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  487.918816][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.920472][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  487.922802][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  487.925003][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  487.950984][T10318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  487.968967][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  487.972775][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  487.993269][ T9883] device veth0_vlan entered promiscuous mode
[  488.022847][ T9883] device veth1_vlan entered promiscuous mode
[  488.063567][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  488.065810][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  488.082926][ T9883] device veth0_macvtap entered promiscuous mode
[  488.097811][ T9883] device veth1_macvtap entered promiscuous mode
[  488.117772][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.120048][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.122020][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.124159][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.157513][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.159372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  488.161865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  488.164316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  488.183443][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  488.198330][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.200558][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.202829][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.216813][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.219016][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.246192][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.249639][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.251707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  488.255123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  488.270420][ T9883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.272174][ T9883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.273819][ T9883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.275725][ T9883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.395059][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.398668][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.404004][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  488.462660][T10318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.466189][T10318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.478263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  490.366244][T10387] binder: 10377:10387 DecRefs 0 refcount change on invalid ref 3 ret -22
[  490.368242][T10387] binder: 10377:10387 got reply transaction with no transaction stack
[  490.370024][T10387] binder: 10377:10387 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2955
[  491.546003][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  493.230237][T10406] loop3: detected capacity change from 0 to 64
[  494.092732][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  495.748529][T10412] loop5: detected capacity change from 0 to 32768
[  495.798814][T10412] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1900 (10412)
[  495.859604][T10451] loop2: detected capacity change from 0 to 512
[  495.862591][T10412] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  495.865139][T10412] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  495.876269][T10412] BTRFS info (device loop5): force clearing of disk cache
[  495.878009][T10412] BTRFS info (device loop5): enabling disk space caching
[  495.879605][T10412] BTRFS info (device loop5): enabling ssd optimizations
[  495.881184][T10412] BTRFS info (device loop5): using spread ssd allocation scheme
[  495.910966][T10412] BTRFS info (device loop5): disk space caching is enabled
[  495.936835][T10451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  496.108501][ T9883] EXT4-fs (loop2): unmounting filesystem.
[  496.160949][T10412] BTRFS info (device loop5): rebuilding free space tree
[  496.166479][ T4309] Bluetooth: hci2: command 0x0406 tx timeout
[  496.211526][T10432] loop3: detected capacity change from 0 to 32768
[  496.232065][ T4440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.234433][ T4440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.322001][T10412] BTRFS info (device loop5): disabling free space tree
[  496.323717][T10412] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  496.329746][T10412] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  496.375639][T10432] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  496.412504][T10456] loop4: detected capacity change from 0 to 32768
[  496.422559][T10432] 
[  496.423079][T10432] ======================================================
[  496.424567][T10432] WARNING: possible circular locking dependency detected
[  496.426041][T10432] 6.1.118-syzkaller #0 Not tainted
[  496.427104][T10432] ------------------------------------------------------
[  496.428546][T10432] syz.3.1907/10432 is trying to acquire lock:
[  496.429751][T10432] ffff0000da87d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x180/0x6b8
[  496.432211][T10432] 
[  496.432211][T10432] but task is already holding lock:
[  496.433567][T10432] ffff0000f2ad8660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x650/0x4640
[  496.435857][T10432] 
[  496.435857][T10432] which lock already depends on the new lock.
[  496.435857][T10432] 
[  496.438099][T10432] 
[  496.438099][T10432] the existing dependency chain (in reverse order) is:
[  496.440033][T10432] 
[  496.440033][T10432] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  496.441877][T10432]        down_read+0x64/0x308
[  496.442838][T10432]        ocfs2_read_virt_blocks+0x2bc/0x9f8
[  496.444199][T10432]        ocfs2_find_entry+0x3ac/0x2620
[  496.445341][T10432]        ocfs2_find_files_on_disk+0x130/0x468
[  496.446615][T10432]        ocfs2_lookup_ino_from_name+0xb8/0x1d4
[  496.447939][T10432]        ocfs2_get_system_file_inode+0x2c8/0x6b8
[  496.449357][T10432]        ocfs2_init_global_system_inodes+0x2bc/0x618
[  496.450779][T10432]        ocfs2_fill_super+0x278c/0x4a0c
[  496.451895][T10432]        mount_bdev+0x274/0x370
[  496.452924][T10432]        ocfs2_mount+0x44/0x58
[  496.453945][T10432]        legacy_get_tree+0xd4/0x16c
[  496.455082][T10432]        vfs_get_tree+0x90/0x274
[  496.456174][T10432]        do_new_mount+0x278/0x8fc
[  496.457171][T10432]        path_mount+0x590/0xe5c
[  496.458247][T10432]        __arm64_sys_mount+0x45c/0x594
[  496.459427][T10432]        invoke_syscall+0x98/0x2bc
[  496.460488][T10432]        el0_svc_common+0x138/0x258
[  496.461591][T10432]        do_el0_svc+0x58/0x13c
[  496.462575][T10432]        el0_svc+0x58/0x168
[  496.463516][T10432]        el0t_64_sync_handler+0x84/0xf0
[  496.464763][T10432]        el0t_64_sync+0x18c/0x190
[  496.465791][T10432] 
[  496.465791][T10432] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}:
[  496.467679][T10432]        __lock_acquire+0x3338/0x7680
[  496.468831][T10432]        lock_acquire+0x26c/0x7cc
[  496.469978][T10432]        __mutex_lock_common+0x190/0x21a0
[  496.471148][T10432]        mutex_lock_nested+0x38/0x44
[  496.472174][T10432]        ocfs2_get_system_file_inode+0x180/0x6b8
[  496.473560][T10432]        ocfs2_reserve_suballoc_bits+0x14c/0x4428
[  496.475037][T10432]        ocfs2_reserve_new_metadata_blocks+0x384/0x848
[  496.476500][T10432]        ocfs2_extend_dir+0xba8/0x4640
[  496.477754][T10432]        ocfs2_prepare_dir_for_insert+0x2d98/0x5204
[  496.479182][T10432]        ocfs2_symlink+0x7b8/0x25cc
[  496.480294][T10432]        vfs_symlink+0x244/0x3a8
[  496.481366][T10432]        do_symlinkat+0x1bc/0x45c
[  496.482446][T10432]        __arm64_sys_symlinkat+0xa4/0xbc
[  496.483638][T10432]        invoke_syscall+0x98/0x2bc
[  496.484731][T10432]        el0_svc_common+0x138/0x258
[  496.485876][T10432]        do_el0_svc+0x58/0x13c
[  496.486895][T10432]        el0_svc+0x58/0x168
[  496.487917][T10432]        el0t_64_sync_handler+0x84/0xf0
[  496.489089][T10432]        el0t_64_sync+0x18c/0x190
[  496.490212][T10432] 
[  496.490212][T10432] other info that might help us debug this:
[  496.490212][T10432] 
[  496.492461][T10432]  Possible unsafe locking scenario:
[  496.492461][T10432] 
[  496.494221][T10432]        CPU0                    CPU1
[  496.495381][T10432]        ----                    ----
[  496.496546][T10432]   lock(&ocfs2_file_ip_alloc_sem_key);
[  496.497726][T10432]                                lock(&osb->system_file_mutex);
[  496.499251][T10432]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  496.500934][T10432]   lock(&osb->system_file_mutex);
[  496.502086][T10432] 
[  496.502086][T10432]  *** DEADLOCK ***
[  496.502086][T10432] 
[  496.503907][T10432] 3 locks held by syz.3.1907/10432:
[  496.505005][T10432]  #0: ffff0000f6c8e460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  496.506970][T10432]  #1: ffff0000f2ad89c8 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: filename_create+0x204/0x468
[  496.509355][T10432]  #2: ffff0000f2ad8660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x650/0x4640
[  496.511693][T10432] 
[  496.511693][T10432] stack backtrace:
[  496.513059][T10432] CPU: 1 PID: 10432 Comm: syz.3.1907 Not tainted 6.1.118-syzkaller #0
[  496.514832][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  496.516814][T10432] Call trace:
[  496.517512][T10432]  dump_backtrace+0x1c8/0x1f4
[  496.518507][T10432]  show_stack+0x2c/0x3c
[  496.519490][T10432]  dump_stack_lvl+0x108/0x170
[  496.520452][T10432]  dump_stack+0x1c/0x5c
[  496.521335][T10432]  print_circular_bug+0x150/0x1b8
[  496.522427][T10432]  check_noncircular+0x2cc/0x378
[  496.523493][T10432]  __lock_acquire+0x3338/0x7680
[  496.524551][T10432]  lock_acquire+0x26c/0x7cc
[  496.525483][T10432]  __mutex_lock_common+0x190/0x21a0
[  496.526565][T10432]  mutex_lock_nested+0x38/0x44
[  496.527673][T10432]  ocfs2_get_system_file_inode+0x180/0x6b8
[  496.528959][T10432]  ocfs2_reserve_suballoc_bits+0x14c/0x4428
[  496.530198][T10432]  ocfs2_reserve_new_metadata_blocks+0x384/0x848
[  496.531512][T10432]  ocfs2_extend_dir+0xba8/0x4640
[  496.532615][T10432]  ocfs2_prepare_dir_for_insert+0x2d98/0x5204
[  496.533884][T10432]  ocfs2_symlink+0x7b8/0x25cc
[  496.534979][T10432]  vfs_symlink+0x244/0x3a8
[  496.535883][T10432]  do_symlinkat+0x1bc/0x45c
[  496.536935][T10432]  __arm64_sys_symlinkat+0xa4/0xbc
[  496.538140][T10432]  invoke_syscall+0x98/0x2bc
[  496.539110][T10432]  el0_svc_common+0x138/0x258
[  496.540163][T10432]  do_el0_svc+0x58/0x13c
[  496.541189][T10432]  el0_svc+0x58/0x168
[  496.542020][T10432]  el0t_64_sync_handler+0x84/0xf0
[  496.543064][T10432]  el0t_64_sync+0x18c/0x190
[  496.568463][ T4440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.571812][ T4440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.621340][ T4305] ocfs2: Unmounting device (7,3) on (node local)
[  496.651530][ T8925] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  496.700661][ T4440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.702814][ T4440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.809562][ T4440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.811657][ T4440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.287391][ T4440] bond0: (slave wlan1): Releasing backup interface
[  498.461576][ T4440] device hsr_slave_0 left promiscuous mode
[  498.496301][ T4440] device hsr_slave_1 left promiscuous mode
[  498.556292][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.558539][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.560147][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.686394][ T4440] device veth1_macvtap left promiscuous mode
[  498.687757][ T4440] device veth0_macvtap left promiscuous mode
[  498.689197][ T4440] device veth1_vlan left promiscuous mode
[  498.690484][ T4440] device veth0_vlan left promiscuous mode
[  500.549521][ T4440] team0 (unregistering): Port device team_slave_0 removed
[  500.706702][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.906759][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.290130][ T4440] bond0 (unregistering): Released all slaves