last executing test programs:

1m32.265205837s ago: executing program 3 (id=234):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r1, 0x0, 0x0)
close_range(r0, r1, 0x0)

1m32.097508176s ago: executing program 3 (id=237):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x10000032, 0x0, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2})

1m31.665566291s ago: executing program 3 (id=240):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f84", 0x83}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df3", 0x77}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5", 0xc5}, {&(0x7f0000000640)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1be98a365a9f2201578cc9ab6245f5da49e84e942e433c35fdf8bb8dea5d50b0ecc669f57ebcf355987f75bf145cd6f738a1ae8995e16b254730723f6015dfffe4805a5e4b0d0a5d65d334658622e2b26b4a1f", 0x91}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1da", 0x26}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831692ec6b873fd77d10d2dad93fe6c91c512642975ee56e49f55095952b3f13d13c8fccc2410378f6469a8e1e04d3a9642f5ee714672c9de817233992c0ad8234921cc929670", 0xd5}], 0x6}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

1m31.402791048s ago: executing program 3 (id=244):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f0000000400000008000000b263"], 0x48)

1m31.212778426s ago: executing program 3 (id=246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x1, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf1}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

1m27.085584394s ago: executing program 3 (id=265):
r0 = socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x84}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206090000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500020000000500040000000000"], 0x48}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x800)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

1m10.876259192s ago: executing program 32 (id=265):
r0 = socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x84}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000206090000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500020000000500040000000000"], 0x48}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x800)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

16.258101454s ago: executing program 0 (id=498):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
syz_usb_connect(0x4, 0x469, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x58, 0xbd, 0x74, 0x40, 0x50d, 0x905c, 0xe541, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x457, 0x4, 0x9, 0x5c, 0x10, 0x7, [{{0x9, 0x4, 0x80, 0xf, 0x9, 0x6c, 0xfd, 0xdb, 0x24, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x2f88, 0x9, "f45f9410"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x1a}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x4, 0xd, "3007edc325fe5c"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x0, 0x3, 0x3, 0x8, [@generic={0x7d, 0xc, "1707c8e6c9053d713fd71d9fcfbf53047e5b62aacb56d7b65a7d7b60a332075ab73fd6b4bb0537bb1f2af2904f7331b00dfaf3e1f8e88ae8144b9878ccbc108f38927f700468457923d990ee6d965de51fa618fc4fab51f55076bd94a279514cd4bdf889a07412c23dab3f7dc3ca12e0423e220c4c841e703cba82"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xa}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x2, 0x5, 0x8, [@generic={0xe, 0x24, "2b02e8f07eb3c7c826eafa88"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x81, 0xf2, 0x10, [@generic={0xdf, 0x7, "0f47da81cd4f04e0db718e6e121e94d196fc3fd6385ca44e7424baa157c502cda6476d4bad90878cd96869073ce3cfd3cb4ce3ac1af82c4b632d98b4f5018616d4da1db1993eac0e457687d1c07f9bc8bafe4e863f97c505e1f2657ad200a2b3a03f0526e9830d36c10c8fe5be0f514f4bc79897231e9d91448e8f5c67fcfac35d1a4ec9c9b4046aae2f67fa8d533cc323a741f719983e0ae6ba5df981e8ba4a1aa24d8c7ba864d796745adedc8f9fec260756ab479c54d1057b55147a97d0f90564b89ff597ee3dac014655213b2d9d2c24b55d0ee0e7d5238b896490"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x4, 0x4, 0x64}}, {{0x9, 0x5, 0xf, 0xb, 0x200, 0x1, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xa, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xf94}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0x11, 0xa4}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x80, 0x7, 0xf6}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xfb, 0x57, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x2b, 0xd, 0x0, 0xff, 0x9e, 0x37, 0x1}}, {{0x9, 0x4, 0xee, 0x5, 0x3, 0xb6, 0x69, 0x57, 0x76, [@hid_hid={0x9, 0x21, 0xb32, 0x18, 0x1, {0x22, 0xd02}}, @uac_control={{0xa, 0x24, 0x1, 0x773, 0x7}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x40, "c4"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x40, 0x4b, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8a24001a6919c8a0, 0x7, 0x3, 0xff, [@generic={0x5, 0x30, "b5fe25"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xda, 0x1, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x3, 0xea0}]}}]}}, {{0x9, 0x4, 0xc7, 0x5, 0x5, 0xff, 0xff, 0xff, 0xb7, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7505"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0x7, 0xff, 0x2, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xa6, 0x0, 0x1}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4cd, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x4, 0x81, 0x1, 0x7, 0x2}]}], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}, @generic={0x36, 0x24, "60d3527079814f16ebd1825a52b1a44be5ebbb6baa42a1a036e91a08ea78c139cd02f091851fd076c3afbe92a6e37178b75195fb"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x40, 0x3, 0x7, [@generic={0xf0, 0x21, "c5c80f81a32a7b0f34dcefdddb55707bcda3f8c1f9076cd1282574d7206961be62ee301b64643b215f8ca75a508c6120e3b7bf2a8d076a6a43416297e268750f7ada6c8e8a11c2abe73f0b61431f62b2c2c61557a95ef559bff05a7806256ceba5461e9a40a94a9f697fb765c6d38185995f0cc4fc03fa1ef8775570d200c458b874d897221794527a7d29823883445a699816d738da4f287d836dcff0dbc69222c401ff33261ad2d4e5246e4c67387d3828582ced3aa9416f47b36f6bb04aafe432d83fb21139fa2efd7a79a10489d678876735806e21b8f9411f37d030388f7608d3eee46f0c0837a602bb4597"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x2, 0x4, 0x9, [@generic={0x37, 0x4, "18345646465af8f38553438540a10d92c66e1304d1bea42a09e7e09b4cfc1f5f5ada9256f855cf6dabc2e3ddc8882f0ba20cf9f928"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5f, 0x9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x3, 0xe, 0x60}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xd, 0x10, 0x2, 0xff, 0x4}, 0x7f, &(0x7f0000000080)={0x5, 0xf, 0x7f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "8f0632589f608e7a49b1409f60d86e0a"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0xf000, 0x9, [0x140, 0xc0, 0x3f00, 0x1f8f]}, @generic={0x47, 0x10, 0x1, "5966757795d16a746ba2a82fa506a11078f38aa8a410910cb667ad612f2e4a8f798b9ccfcaccdfad9c319c827e046b02ae24d1e154f52c51390ddb69c129bb49e9320a8a"}]}, 0x8, [{0x1c, &(0x7f0000000200)=@string={0x1c, 0x3, "b0fa557946244cc0d359b54ad2c4d1c14753133fc6de3f3fe8e5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c09}}, {0x27, &(0x7f0000000d00)=@string={0x27, 0x3, "8f6248c87b0e6365aa94a92e164127b34e7e550c647c220743196b671b610eb5b52b324bc2"}}, {0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "309a07859b75bb3930a9035396a4bc90b44b9d190d3f683fbb279c7f4510c5f7b42d6b4b57bc74652cf24ec6e1ba28a335f4164a421f1ebfde2452bb53102edb1e712e0d4ae59698bab9db688dff35d053480963895cab9fc4ad4e4ea3678a72"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x409}}, {0x0, 0x0}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x419}}]})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x154)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x8, 0x3, 0x1000000, 0x2, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x982f})
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0)

12.066771415s ago: executing program 1 (id=505):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]})

10.710406957s ago: executing program 1 (id=508):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)

10.217490632s ago: executing program 4 (id=509):
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0x9471)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = dup(r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2040, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

10.206867831s ago: executing program 2 (id=510):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
socket$key(0xf, 0x3, 0x2)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9})
socket(0x10, 0x80002, 0x0)
fsopen(0x0, 0x1)
socket(0x10, 0x3, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil)

9.606652037s ago: executing program 0 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
bind$can_j1939(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="81b43c6c5812b8e8b79d5790d3a0597c18e4bcc001146acffdb6f9ca74d684970e2077734a236fc7a567fcfffdff5609ddcb684dd27550b4bc6e6d891c91e7cc5538ccf4fc0200335fb9c3f3dc73b59159cd296f2ce78217e1ea6e7a395c542b83d89faa15baef4f95807deb14a336e048c0a238ef43d291855bafbba3", 0x7d}], 0x1}, 0x48005)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
connect$can_j1939(r1, &(0x7f0000000300)={0x1d, r3, 0xfffffffffffffffe, {0x1, 0xf0}, 0xff}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0x1}, {0x8, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)

9.233528777s ago: executing program 1 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

9.189360552s ago: executing program 1 (id=513):
r0 = socket$netlink(0x10, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x10000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

8.919896934s ago: executing program 5 (id=514):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.912757214s ago: executing program 4 (id=515):
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0xb3)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlink(&(0x7f00000001c0)='./control/file0\x00')
rmdir(&(0x7f0000000040)='./control\x00')

8.85345765s ago: executing program 2 (id=516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000080)=0x1000, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x1, 0x0, 0x1, "ff00f7000000000000000000af88008300"})
r6 = syz_open_pts(r5, 0x141601)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"})

8.040397444s ago: executing program 0 (id=517):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x149a82, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x3889807, &(0x7f0000000040), 0x3a, 0x532, &(0x7f0000000bc0)="$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")
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0)

7.954660154s ago: executing program 4 (id=518):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

7.690001098s ago: executing program 5 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
get_mempolicy(0x0, 0x0, 0xd8a, &(0x7f0000240000/0x1000)=nil, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7.113177649s ago: executing program 2 (id=520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
mkdir(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@umask}, {}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x9, 0x2180)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioperm(0xb, 0x40, 0x8)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)

7.024737057s ago: executing program 1 (id=521):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
syz_usb_connect(0x4, 0x469, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x58, 0xbd, 0x74, 0x40, 0x50d, 0x905c, 0xe541, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x457, 0x4, 0x9, 0x5c, 0x10, 0x7, [{{0x9, 0x4, 0x80, 0xf, 0x9, 0x6c, 0xfd, 0xdb, 0x24, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x2f88, 0x9, "f45f9410"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x1a}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x4, 0xd, "3007edc325fe5c"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x0, 0x3, 0x3, 0x8, [@generic={0x7d, 0xc, "1707c8e6c9053d713fd71d9fcfbf53047e5b62aacb56d7b65a7d7b60a332075ab73fd6b4bb0537bb1f2af2904f7331b00dfaf3e1f8e88ae8144b9878ccbc108f38927f700468457923d990ee6d965de51fa618fc4fab51f55076bd94a279514cd4bdf889a07412c23dab3f7dc3ca12e0423e220c4c841e703cba82"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xa}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x2, 0x5, 0x8, [@generic={0xe, 0x24, "2b02e8f07eb3c7c826eafa88"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x81, 0xf2, 0x10, [@generic={0xdf, 0x7, "0f47da81cd4f04e0db718e6e121e94d196fc3fd6385ca44e7424baa157c502cda6476d4bad90878cd96869073ce3cfd3cb4ce3ac1af82c4b632d98b4f5018616d4da1db1993eac0e457687d1c07f9bc8bafe4e863f97c505e1f2657ad200a2b3a03f0526e9830d36c10c8fe5be0f514f4bc79897231e9d91448e8f5c67fcfac35d1a4ec9c9b4046aae2f67fa8d533cc323a741f719983e0ae6ba5df981e8ba4a1aa24d8c7ba864d796745adedc8f9fec260756ab479c54d1057b55147a97d0f90564b89ff597ee3dac014655213b2d9d2c24b55d0ee0e7d5238b896490"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x4, 0x4, 0x64}}, {{0x9, 0x5, 0xf, 0xb, 0x200, 0x1, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xa, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xf94}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0x11, 0xa4}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x80, 0x7, 0xf6}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xfb, 0x57, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x2b, 0xd, 0x0, 0xff, 0x9e, 0x37, 0x1}}, {{0x9, 0x4, 0xee, 0x5, 0x3, 0xb6, 0x69, 0x57, 0x76, [@hid_hid={0x9, 0x21, 0xb32, 0x18, 0x1, {0x22, 0xd02}}, @uac_control={{0xa, 0x24, 0x1, 0x773, 0x7}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x40, "c4"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x40, 0x4b, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8a24001a6919c8a0, 0x7, 0x3, 0xff, [@generic={0x5, 0x30, "b5fe25"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xda, 0x1, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x3, 0xea0}]}}]}}, {{0x9, 0x4, 0xc7, 0x5, 0x5, 0xff, 0xff, 0xff, 0xb7, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "7505"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0x7, 0xff, 0x2, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xa6, 0x0, 0x1}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4cd, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x4, 0x81, 0x1, 0x7, 0x2}]}], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}, @generic={0x36, 0x24, "60d3527079814f16ebd1825a52b1a44be5ebbb6baa42a1a036e91a08ea78c139cd02f091851fd076c3afbe92a6e37178b75195fb"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x40, 0x3, 0x7, [@generic={0xf0, 0x21, "c5c80f81a32a7b0f34dcefdddb55707bcda3f8c1f9076cd1282574d7206961be62ee301b64643b215f8ca75a508c6120e3b7bf2a8d076a6a43416297e268750f7ada6c8e8a11c2abe73f0b61431f62b2c2c61557a95ef559bff05a7806256ceba5461e9a40a94a9f697fb765c6d38185995f0cc4fc03fa1ef8775570d200c458b874d897221794527a7d29823883445a699816d738da4f287d836dcff0dbc69222c401ff33261ad2d4e5246e4c67387d3828582ced3aa9416f47b36f6bb04aafe432d83fb21139fa2efd7a79a10489d678876735806e21b8f9411f37d030388f7608d3eee46f0c0837a602bb4597"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x2, 0x4, 0x9, [@generic={0x37, 0x4, "18345646465af8f38553438540a10d92c66e1304d1bea42a09e7e09b4cfc1f5f5ada9256f855cf6dabc2e3ddc8882f0ba20cf9f928"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5f, 0x9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x3, 0xe, 0x60}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xd, 0x10, 0x2, 0xff, 0x4}, 0x7f, &(0x7f0000000080)={0x5, 0xf, 0x7f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "8f0632589f608e7a49b1409f60d86e0a"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0xf000, 0x9, [0x140, 0xc0, 0x3f00, 0x1f8f]}, @generic={0x47, 0x10, 0x1, "5966757795d16a746ba2a82fa506a11078f38aa8a410910cb667ad612f2e4a8f798b9ccfcaccdfad9c319c827e046b02ae24d1e154f52c51390ddb69c129bb49e9320a8a"}]}, 0x8, [{0x1c, &(0x7f0000000200)=@string={0x1c, 0x3, "b0fa557946244cc0d359b54ad2c4d1c14753133fc6de3f3fe8e5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c09}}, {0x27, &(0x7f0000000d00)=@string={0x27, 0x3, "8f6248c87b0e6365aa94a92e164127b34e7e550c647c220743196b671b610eb5b52b324bc2"}}, {0x62, &(0x7f0000000d80)=@string={0x62, 0x3, "309a07859b75bb3930a9035396a4bc90b44b9d190d3f683fbb279c7f4510c5f7b42d6b4b57bc74652cf24ec6e1ba28a335f4164a421f1ebfde2452bb53102edb1e712e0d4ae59698bab9db688dff35d053480963895cab9fc4ad4e4ea3678a72"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x409}}, {0x0, 0x0}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x419}}]})
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x154)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0x8, 0x3, 0x1000000, 0x2, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0x982f})
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c000900580004020a0000000d0085a168d0bf46d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f3250", 0x78, 0x0, 0x0, 0x0)

5.76700822s ago: executing program 5 (id=522):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0)
ftruncate(r6, 0x200004)
read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)

5.392709552s ago: executing program 2 (id=523):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

5.050300403s ago: executing program 4 (id=524):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000100), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0002004001"], 0x48}}, 0x0)

5.025515114s ago: executing program 0 (id=525):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x10000, 0x9, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000, 0x0, 0x0, 0x1], [0x0, 0x1001000], [0x0, 0x5, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0xffffffffffffff89})

1.981553467s ago: executing program 0 (id=526):
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0x9471)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = dup(r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2040, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

1.739645655s ago: executing program 2 (id=527):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x14, r3, 0x0, r1})

1.738203016s ago: executing program 5 (id=528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10)
getcwd(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan0\x00'})

1.737259429s ago: executing program 4 (id=529):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

909.931581ms ago: executing program 4 (id=530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000080)=0x1000, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x1, 0x0, 0x1, "ff00f7000000000000000000af88008300"})
r6 = syz_open_pts(r5, 0x141601)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"})

846.12228ms ago: executing program 0 (id=531):
r0 = socket$netlink(0x10, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x10000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

831.13139ms ago: executing program 2 (id=532):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

494.439139ms ago: executing program 1 (id=533):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$cgroup_type(r1, &(0x7f0000000600), 0x9)

111.422631ms ago: executing program 5 (id=534):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@remote, @netrom, @remote, @bcast, @rose, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x11c, 0x1, 0x0, 0xfffffffffffffdde)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4004000)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 5 (id=535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = gettid()
fsmount(r3, 0x0, 0x0)
tkill(r4, 0xb)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts.
[   82.419625][ T5829] cgroup: Unknown subsys name 'net'
[   82.557355][ T5829] cgroup: Unknown subsys name 'cpuset'
[   82.567257][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.256898][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.053360][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.061119][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.062046][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.069390][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.077922][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.091118][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.091235][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.098490][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.106596][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.118366][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.126908][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.133110][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.141107][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.163942][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.203392][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.206075][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.219909][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.221325][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.235727][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.243056][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.251273][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.251321][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.275950][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.298750][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.310938][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.934769][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   88.060454][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   88.092172][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   88.174348][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   88.294503][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.301853][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.310406][ T5840] bridge_slave_0: entered allmulticast mode
[   88.318126][ T5840] bridge_slave_0: entered promiscuous mode
[   88.387477][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.394946][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.402098][ T5840] bridge_slave_1: entered allmulticast mode
[   88.410086][ T5840] bridge_slave_1: entered promiscuous mode
[   88.480316][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.487654][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.495394][ T5854] bridge_slave_0: entered allmulticast mode
[   88.502805][ T5854] bridge_slave_0: entered promiscuous mode
[   88.510839][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   88.556612][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.563868][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.571024][ T5854] bridge_slave_1: entered allmulticast mode
[   88.580130][ T5854] bridge_slave_1: entered promiscuous mode
[   88.598019][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.674757][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.710808][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.718957][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.726340][ T5843] bridge_slave_0: entered allmulticast mode
[   88.734894][ T5843] bridge_slave_0: entered promiscuous mode
[   88.764353][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.786494][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.794243][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.801421][ T5839] bridge_slave_0: entered allmulticast mode
[   88.808955][ T5839] bridge_slave_0: entered promiscuous mode
[   88.816652][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.824113][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.831293][ T5843] bridge_slave_1: entered allmulticast mode
[   88.838773][ T5843] bridge_slave_1: entered promiscuous mode
[   88.853044][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.881806][ T5840] team0: Port device team_slave_0 added
[   88.890271][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.897484][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.904745][ T5839] bridge_slave_1: entered allmulticast mode
[   88.912049][ T5839] bridge_slave_1: entered promiscuous mode
[   88.959148][ T5840] team0: Port device team_slave_1 added
[   89.021743][ T5854] team0: Port device team_slave_0 added
[   89.058730][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.070853][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.098385][ T5854] team0: Port device team_slave_1 added
[   89.105202][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.112152][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.142625][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.156992][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.164171][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.190652][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.193950][ T5858] Bluetooth: hci1: command tx timeout
[   89.209060][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.220587][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.230084][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.237314][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.244930][ T5841] bridge_slave_0: entered allmulticast mode
[   89.252164][ T5841] bridge_slave_0: entered promiscuous mode
[   89.272940][ T5858] Bluetooth: hci0: command tx timeout
[   89.314421][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.321649][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.328956][ T5841] bridge_slave_1: entered allmulticast mode
[   89.337291][ T5841] bridge_slave_1: entered promiscuous mode
[   89.352718][ T5858] Bluetooth: hci2: command tx timeout
[   89.353383][ T5848] Bluetooth: hci4: command tx timeout
[   89.358486][ T5858] Bluetooth: hci3: command tx timeout
[   89.389661][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.396684][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.422708][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.467669][ T5843] team0: Port device team_slave_0 added
[   89.487320][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.495145][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.521816][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.536933][ T5839] team0: Port device team_slave_0 added
[   89.546169][ T5839] team0: Port device team_slave_1 added
[   89.555884][ T5843] team0: Port device team_slave_1 added
[   89.564457][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.636264][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.652053][ T5840] hsr_slave_0: entered promiscuous mode
[   89.658870][ T5840] hsr_slave_1: entered promiscuous mode
[   89.750465][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.757807][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.784610][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.797622][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.804712][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.831514][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.844244][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.851213][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.877511][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.906888][ T5841] team0: Port device team_slave_0 added
[   89.918415][ T5854] hsr_slave_0: entered promiscuous mode
[   89.925632][ T5854] hsr_slave_1: entered promiscuous mode
[   89.933688][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.941540][ T5854] Cannot create hsr debugfs directory
[   89.955209][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.962205][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.988774][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.019361][ T5841] team0: Port device team_slave_1 added
[   90.056695][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.064015][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.090666][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.133604][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.140608][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.167315][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.251249][ T5839] hsr_slave_0: entered promiscuous mode
[   90.258772][ T5839] hsr_slave_1: entered promiscuous mode
[   90.265924][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.273778][ T5839] Cannot create hsr debugfs directory
[   90.387859][ T5841] hsr_slave_0: entered promiscuous mode
[   90.395062][ T5841] hsr_slave_1: entered promiscuous mode
[   90.401222][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.408872][ T5841] Cannot create hsr debugfs directory
[   90.420909][ T5843] hsr_slave_0: entered promiscuous mode
[   90.428044][ T5843] hsr_slave_1: entered promiscuous mode
[   90.434819][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.442944][ T5843] Cannot create hsr debugfs directory
[   90.979154][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.996924][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.008134][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.028262][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.082067][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.098091][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.110818][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.148174][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.210183][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.226744][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.240295][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.272661][ T5858] Bluetooth: hci1: command tx timeout
[   91.280073][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.352626][ T5858] Bluetooth: hci0: command tx timeout
[   91.364278][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.378487][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.389028][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.433274][ T5858] Bluetooth: hci3: command tx timeout
[   91.433298][ T5154] Bluetooth: hci2: command tx timeout
[   91.444395][ T5848] Bluetooth: hci4: command tx timeout
[   91.445256][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.521275][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.538369][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.550683][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.570562][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.593903][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.684118][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   91.740033][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.747692][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.790230][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.802156][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.826781][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.833991][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.844661][   T24] cfg80211: failed to load regulatory.db
[   91.908388][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   91.920957][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   91.940026][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.947218][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.001795][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.011745][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.018945][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.052101][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.059250][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.069808][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.076948][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.116653][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.171633][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   92.229262][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.236466][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.271016][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.278255][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.308276][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   92.376785][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.400432][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.407667][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.417983][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.425214][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.600017][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.817749][ T5840] veth0_vlan: entered promiscuous mode
[   92.831963][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.871668][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.899257][ T5840] veth1_vlan: entered promiscuous mode
[   93.054879][ T5840] veth0_macvtap: entered promiscuous mode
[   93.071235][ T5839] veth0_vlan: entered promiscuous mode
[   93.101909][ T5840] veth1_macvtap: entered promiscuous mode
[   93.161916][ T5839] veth1_vlan: entered promiscuous mode
[   93.201099][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.219259][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.260940][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.274947][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.283991][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.293257][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.302138][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.330484][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.359552][ T5154] Bluetooth: hci1: command tx timeout
[   93.409377][ T5841] veth0_vlan: entered promiscuous mode
[   93.433293][ T5154] Bluetooth: hci0: command tx timeout
[   93.459111][ T5841] veth1_vlan: entered promiscuous mode
[   93.491059][ T5839] veth0_macvtap: entered promiscuous mode
[   93.513286][ T5154] Bluetooth: hci3: command tx timeout
[   93.518752][ T5154] Bluetooth: hci2: command tx timeout
[   93.523798][ T5848] Bluetooth: hci4: command tx timeout
[   93.545224][ T5854] veth0_vlan: entered promiscuous mode
[   93.564135][ T5839] veth1_macvtap: entered promiscuous mode
[   93.588528][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.609833][ T5841] veth0_macvtap: entered promiscuous mode
[   93.616049][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.620643][ T5854] veth1_vlan: entered promiscuous mode
[   93.638771][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.651187][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.664105][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.680233][ T5841] veth1_macvtap: entered promiscuous mode
[   93.704019][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.715655][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.727451][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.760944][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.774052][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.787365][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.797806][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.806924][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.816270][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.830369][ T5843] veth0_vlan: entered promiscuous mode
[   93.867313][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.881912][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.892471][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.903642][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.915974][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.943561][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.948190][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.954998][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.985572][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.996500][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.008371][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.033917][ T5854] veth0_macvtap: entered promiscuous mode
[   94.041384][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.055220][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.067654][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.082120][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.127974][ T5843] veth1_vlan: entered promiscuous mode
[   94.168756][ T5854] veth1_macvtap: entered promiscuous mode
[   94.237077][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.255969][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.295442][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.306033][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.316750][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.331139][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.341266][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.352683][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.365025][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.389500][ T5843] veth0_macvtap: entered promiscuous mode
[   94.401321][ T1208] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   94.412306][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.415349][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.427206][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.440050][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.450089][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.461068][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.474743][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.485298][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.496300][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.530345][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.539208][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.549177][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.558077][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.570040][ T5843] veth1_macvtap: entered promiscuous mode
[   94.585837][ T1208] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[   94.592568][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.618968][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.630519][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.642011][ T1208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.646413][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.652174][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.661351][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.680552][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.680659][ T1208] usb 2-1: Product: 䀊
[   94.690414][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.690435][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.690448][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.690462][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.692333][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.702226][ T1208] usb 2-1: Manufacturer: ѕ
[   94.726322][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.734507][ T1208] usb 2-1: SerialNumber: ౓椾ﱂⲡ⥴䫝ㅛ瘩ૺ挬䢉庳⾹ꅯ貰ሞل㿟꟏͈罥䣎᳹ꭗ㾫琯ᷕ袾㥰쥋ẜ檩ᵐ꓄㾘止曓屧泈鴒擩㒱邌Ｂᾝゝ롿뉗겅ꜝ⠇炇叼Ὓ긝℈ㆇﯓ鉑ꨒ뿴삂⻻ᗘ蛯⎻ꍮ厤蔟쏏⫿喈ꢤ鈛ꜩ㽆컋鲂틃햕㑆ﵥ⼎띅ぶ톈귫帩瑽ﴟ痳귣賂짆ઔ疩ꡠ諷蛽ꍒ贈㓖짠쯻亗鷌核
[   94.752571][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.811264][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.821826][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.831732][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.842941][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.852841][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.863685][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.879335][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.948250][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.956800][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.966701][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.978401][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.996387][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.005500][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.057340][ T1208] cdc_ncm 2-1:1.0: bind() failure
[   95.097024][ T1208] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   95.104767][ T1208] cdc_ncm 2-1:1.1: bind() failure
[   95.131645][ T1208] usb 2-1: USB disconnect, device number 2
[   95.449430][ T5848] Bluetooth: hci1: command tx timeout
[   95.513096][ T5848] Bluetooth: hci0: command tx timeout
[   95.593525][ T5848] Bluetooth: hci4: command tx timeout
[   95.605390][ T5858] Bluetooth: hci3: command tx timeout
[   95.611438][ T5848] Bluetooth: hci2: command tx timeout
[   95.737273][ T5939] Zero length message leads to an empty skb
[   96.179334][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.231025][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.295178][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.334280][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.466967][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.506849][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.664147][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.672033][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.839404][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'.
[   97.073617][ T5952] bridge0: port 3(macsec0) entered blocking state
[   97.080270][ T5952] bridge0: port 3(macsec0) entered disabled state
[   97.095124][ T5952] macsec0: entered allmulticast mode
[   97.100565][ T5952] veth1_macvtap: entered allmulticast mode
[   97.141009][ T5952] macsec0: entered promiscuous mode
[   97.157861][ T5952] bridge0: port 3(macsec0) entered blocking state
[   97.164708][ T5952] bridge0: port 3(macsec0) entered forwarding state
[   97.557862][ T5965] mmap: syz.4.14 (5965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.778862][   T30] audit: type=1326 audit(1744055890.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3984127 code=0x7ffc0000
[   99.903261][   T30] audit: type=1326 audit(1744055890.314:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3929359 code=0x7ffc0000
[  100.601795][   T30] audit: type=1326 audit(1744055890.314:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  100.684547][   T30] audit: type=1326 audit(1744055890.314:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3984127 code=0x7ffc0000
[  100.742286][   T30] audit: type=1326 audit(1744055890.314:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3929359 code=0x7ffc0000
[  100.798131][   T30] audit: type=1326 audit(1744055890.314:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3984127 code=0x7ffc0000
[  100.928911][   T30] audit: type=1326 audit(1744055890.314:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3929359 code=0x7ffc0000
[  101.010320][   T30] audit: type=1326 audit(1744055890.314:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3984127 code=0x7ffc0000
[  101.038491][   T30] audit: type=1326 audit(1744055890.314:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3929359 code=0x7ffc0000
[  101.062122][   T30] audit: type=1326 audit(1744055890.314:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3984127 code=0x7ffc0000
[  101.118816][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[  101.963390][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[  102.003924][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[  102.489925][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[  103.250816][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[  103.393030][ T6078] loop4: detected capacity change from 0 to 256
[  103.519888][ T6078] FAT-fs (loop4): Directory bread(block 64) failed
[  103.547827][ T6078] FAT-fs (loop4): Directory bread(block 65) failed
[  103.581285][ T6078] FAT-fs (loop4): Directory bread(block 66) failed
[  103.602532][ T6078] FAT-fs (loop4): Directory bread(block 67) failed
[  103.609244][ T6078] FAT-fs (loop4): Directory bread(block 68) failed
[  103.628877][ T6078] FAT-fs (loop4): Directory bread(block 69) failed
[  103.635969][ T6078] FAT-fs (loop4): Directory bread(block 70) failed
[  103.642817][ T6078] FAT-fs (loop4): Directory bread(block 71) failed
[  103.649451][ T6078] FAT-fs (loop4): Directory bread(block 72) failed
[  103.681583][ T6078] FAT-fs (loop4): Directory bread(block 73) failed
[  103.767380][ T6090] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[  103.853680][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'.
[  103.905811][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'.
[  103.969569][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'.
[  105.113398][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'.
[  105.851225][ T6115] loop3: detected capacity change from 0 to 512
[  105.904231][ T6115] =======================================================
[  105.904231][ T6115] WARNING: The mand mount option has been deprecated and
[  105.904231][ T6115]          and is ignored by this kernel. Remove the mand
[  105.904231][ T6115]          option from the mount to silence this warning.
[  105.904231][ T6115] =======================================================
[  105.947418][ T6114] wޣ� uses obsolete (PF_INET,SOCK_PACKET)
[  106.059451][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.073185][ T6115] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.193018][ T6127] sd 0:0:1:0: device reset
[  106.640304][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.139740][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  107.248941][   T30] kauditd_printk_skb: 84 callbacks suppressed
[  107.248961][   T30] audit: type=1326 audit(1744055898.694:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7fc00000
[  107.470009][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #2: comm syz.3.74: corrupted inode contents
[  107.550602][ T6131] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.74: mark_inode_dirty error
[  107.563696][ T6151] hub 4-0:1.0: USB hub found
[  107.587071][ T6151] hub 4-0:1.0: 1 port detected
[  107.712711][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5182: inode #2: comm syz.3.74: corrupted inode contents
[  107.757406][ T6131] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.74: mark_inode_dirty error
[  108.194809][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.827254][ T6196] netlink: 'syz.0.102': attribute type 21 has an invalid length.
[  108.859976][ T6186] loop3: detected capacity change from 0 to 128
[  108.882771][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.102'.
[  109.112639][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  109.380268][ T6205] hsr0: entered promiscuous mode
[  109.602787][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'.
[  109.633565][ T6203] hsr_slave_0: left promiscuous mode
[  109.726399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.930724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.939582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  110.405352][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  110.826039][ T6203] hsr_slave_1: left promiscuous mode
[  111.039947][   T30] audit: type=1326 audit(1744055902.484:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.091957][   T30] audit: type=1326 audit(1744055902.484:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.094451][ T6215] xt_CT: No such helper "netbios-ns"
[  111.162178][   T30] audit: type=1326 audit(1744055902.514:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.251285][   T30] audit: type=1326 audit(1744055902.534:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.322197][   T30] audit: type=1326 audit(1744055902.534:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.405781][   T30] audit: type=1326 audit(1744055902.534:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.471918][   T30] audit: type=1326 audit(1744055902.574:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.520754][ T6238] loop3: detected capacity change from 0 to 128
[  111.532165][ T6238] EXT4-fs: Ignoring removed nobh option
[  111.560302][   T30] audit: type=1326 audit(1744055902.574:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.647635][   T30] audit: type=1326 audit(1744055902.574:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f39c398d169 code=0x7ffc0000
[  111.706852][ T6241] netlink: 'syz.2.119': attribute type 1 has an invalid length.
[  111.739424][ T6238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.781065][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'.
[  111.795915][ T6238] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.826882][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'.
[  111.847795][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.923480][ T6247] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  112.030339][ T5843] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.047282][ T6251] netlink: 'syz.4.121': attribute type 21 has an invalid length.
[  112.069941][ T6251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.121'.
[  112.306858][ T6262] hsr0: entered promiscuous mode
[  112.374842][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[  112.746276][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'.
[  112.766716][ T6262] hsr_slave_0: left promiscuous mode
[  112.802196][ T6262] hsr_slave_1: left promiscuous mode
[  112.906565][ T6262] hsr0 (unregistering): left promiscuous mode
[  112.954080][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  112.995294][ T6267] TCP: out of memory -- consider tuning tcp_mem
[  112.995832][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028cf9000: rx timeout, send abort
[  113.184265][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  113.184285][   T30] audit: type=1326 audit(1744055904.634:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.220025][   T30] audit: type=1326 audit(1744055904.634:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.247439][   T30] audit: type=1326 audit(1744055904.634:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.276317][   T30] audit: type=1326 audit(1744055904.634:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.321990][   T30] audit: type=1326 audit(1744055904.634:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.345103][   T30] audit: type=1326 audit(1744055904.634:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.368049][   T30] audit: type=1326 audit(1744055904.634:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.390797][   T30] audit: type=1326 audit(1744055904.634:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.422532][   T30] audit: type=1326 audit(1744055904.634:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.463622][   T30] audit: type=1326 audit(1744055904.634:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  113.495965][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028cf9800: rx timeout, send abort
[  113.510713][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028cf9000: abort rx timeout. Force session deactivation
[  113.549120][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[  113.565542][ T6279] netlink: 'syz.0.132': attribute type 13 has an invalid length.
[  113.588878][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[  113.732308][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.741316][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.933507][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.975940][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.004313][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028cf9800: abort rx timeout. Force session deactivation
[  114.099860][ T6296] netlink: 'syz.1.139': attribute type 21 has an invalid length.
[  114.105070][ T6295] TCP: out of memory -- consider tuning tcp_mem
[  114.157943][ T6279] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.171611][ T6279] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.183588][ T6279] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.192761][ T6279] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.317735][ T6283] veth0_macvtap: left promiscuous mode
[  114.355479][ T6296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.139'.
[  114.511008][ T6302] dvmrp5: entered allmulticast mode
[  114.594729][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[  114.625198][ T6304] dvmrp5: left allmulticast mode
[  114.673212][ T6312] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  114.860837][ T6316] loop3: detected capacity change from 0 to 164
[  114.893694][ T6316] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  114.979405][ T6316] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  115.345094][ T6328] netlink: 96 bytes leftover after parsing attributes in process `syz.2.152'.
[  115.395261][ T6330] TCP: out of memory -- consider tuning tcp_mem
[  115.696173][ T6338] process 'syz.1.156' launched './file0' with NULL argv: empty string added
[  115.808573][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'.
[  115.914397][ T6349] netlink: 'syz.2.160': attribute type 21 has an invalid length.
[  115.937527][ T6351] lo: entered promiscuous mode
[  115.942671][ T6351] lo: entered allmulticast mode
[  115.957628][ T6349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.160'.
[  116.045585][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[  116.058145][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ab89800: rx timeout, send abort
[  116.162184][ T6358] TCP: out of memory -- consider tuning tcp_mem
[  116.296340][ T6366] SET target dimension over the limit!
[  116.534791][ T6373] loop3: detected capacity change from 0 to 128
[  116.551036][ T6373] EXT4-fs: Ignoring removed nobh option
[  116.558249][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ab89400: rx timeout, send abort
[  116.566715][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ab89800: abort rx timeout. Force session deactivation
[  116.732988][ T6373] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.796818][ T6373] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.066523][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ab89400: abort rx timeout. Force session deactivation
[  117.134642][ T5843] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.147863][ T6387] TCP: out of memory -- consider tuning tcp_mem
[  118.779438][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.184'.
[  118.793155][ T6415] netlink: 'syz.3.183': attribute type 21 has an invalid length.
[  118.826560][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.183'.
[  118.833313][ T6398] SET target dimension over the limit!
[  118.868194][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'.
[  118.981479][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  118.981498][   T30] audit: type=1326 audit(1744055910.424:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.4.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x0
[  119.568541][ T6424] TCP: out of memory -- consider tuning tcp_mem
[  120.256760][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'.
[  120.271559][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[  120.559915][ T6450] TCP: out of memory -- consider tuning tcp_mem
[  120.619192][ T6452] netlink: 'syz.1.199': attribute type 21 has an invalid length.
[  120.638221][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.199'.
[  120.971569][ T6459] netlink: 'syz.0.203': attribute type 3 has an invalid length.
[  121.883805][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[  122.092452][   T30] audit: type=1326 audit(1744055913.524:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe368584127 code=0x7ffc0000
[  122.174673][   T30] audit: type=1326 audit(1744055913.524:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe368529359 code=0x7ffc0000
[  122.197860][ T6478] TCP: out of memory -- consider tuning tcp_mem
[  122.262584][   T30] audit: type=1326 audit(1744055913.524:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe368584127 code=0x7ffc0000
[  122.342463][   T30] audit: type=1326 audit(1744055913.524:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe368529359 code=0x7ffc0000
[  122.412520][   T30] audit: type=1326 audit(1744055913.524:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe368584127 code=0x7ffc0000
[  122.502460][   T30] audit: type=1326 audit(1744055913.524:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe368529359 code=0x7ffc0000
[  122.580045][   T30] audit: type=1326 audit(1744055913.524:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe368584127 code=0x7ffc0000
[  122.665610][   T30] audit: type=1326 audit(1744055913.524:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe368529359 code=0x7ffc0000
[  122.731887][   T30] audit: type=1326 audit(1744055913.524:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe368584127 code=0x7ffc0000
[  122.785810][ T6495] netlink: 'syz.4.219': attribute type 21 has an invalid length.
[  122.860746][ T6495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.219'.
[  123.119515][ T6500] netlink: 332 bytes leftover after parsing attributes in process `syz.1.221'.
[  123.129094][ T6500] netlink: 'syz.1.221': attribute type 9 has an invalid length.
[  123.142902][ T6500] netlink: 108 bytes leftover after parsing attributes in process `syz.1.221'.
[  123.525099][ T6509] TCP: out of memory -- consider tuning tcp_mem
[  123.633313][ T6512] netlink: 'syz.1.226': attribute type 13 has an invalid length.
[  123.876049][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.884416][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.097894][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.167536][ T6522] xt_TCPMSS: Only works on TCP SYN packets
[  124.205686][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.874100][ T6512] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.892661][ T6512] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.901582][ T6512] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.926946][ T6512] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.746696][ T6395] Set syz1 is full, maxelem 65536 reached
[  125.753699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  125.861160][ T6544] TCP: out of memory -- consider tuning tcp_mem
[  125.972950][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.183685][ T6561] __nla_validate_parse: 1 callbacks suppressed
[  126.183705][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[  126.483549][ T6569] netlink: 'syz.3.246': attribute type 13 has an invalid length.
[  127.367922][ T6577] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.523922][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.531736][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.373388][ T6584] TCP: out of memory -- consider tuning tcp_mem
[  128.545648][ T6586] futex_wake_op: syz.0.254 tries to shift op by -1; fix this program
[  128.631827][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.752509][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.909625][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'.
[  129.159904][ T6569] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.180462][ T6569] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.442497][ T6569] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.944883][ T6569] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.056700][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'.
[  130.451366][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'.
[  130.915196][ T6626] capability: warning: `syz.0.269' uses deprecated v2 capabilities in a way that may be insecure
[  131.230094][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  131.332483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  131.514183][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'.
[  131.882805][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.270'.
[  131.907184][ T6619] SET target dimension over the limit!
[  132.899087][ T6643] netlink: 96 bytes leftover after parsing attributes in process `syz.0.275'.
[  132.924578][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.933530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.231716][ T6648] netlink: 'syz.1.276': attribute type 13 has an invalid length.
[  137.123341][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'.
[  137.757344][ T6689] netlink: 96 bytes leftover after parsing attributes in process `syz.1.288'.
[  138.205724][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  138.530531][ T5895] IPVS: starting estimator thread 0...
[  138.831111][ T6698] IPVS: using max 24 ests per chain, 57600 per kthread
[  138.930861][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[  138.991353][ T6704] netlink: 'syz.2.294': attribute type 13 has an invalid length.
[  139.297336][ T6710] xt_time: invalid argument - start or stop time greater than 23:59:59
[  140.276917][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.295'.
[  140.357479][ T6704] bridge0: port 3(macsec0) entered disabled state
[  140.364272][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.371971][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.607870][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.683957][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.803402][ T6704] veth1_macvtap: left allmulticast mode
[  140.882959][ T6704] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.052722][ T6704] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.088990][ T6704] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.225757][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'.
[  141.860537][ T6704] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.531491][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[  145.339238][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'.
[  145.669683][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'.
[  146.978406][ T6770] netlink: 'syz.2.314': attribute type 21 has an invalid length.
[  146.989645][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.314'.
[  147.116316][ T6775] netlink: 'syz.4.316': attribute type 13 has an invalid length.
[  147.193255][ T6779] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[  147.334170][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.342012][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.946306][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  147.963595][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  147.967029][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.978637][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  147.987029][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  147.995862][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  148.005917][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.255617][ T6775] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.278356][ T6775] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.301299][ T6775] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.324675][ T6775] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.338414][ T6614] Set syz1 is full, maxelem 65536 reached
[  148.455211][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.469027][ T6779] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  148.497376][ T6774] bond0: entered promiscuous mode
[  148.515784][ T6774] bond_slave_0: entered promiscuous mode
[  148.531970][ T6774] bond_slave_1: entered promiscuous mode
[  148.544955][ T6774] batadv0: entered promiscuous mode
[  148.800838][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  148.800856][   T30] audit: type=1326 audit(1744055940.244:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba2584127 code=0x7ffc0000
[  148.901281][   T30] audit: type=1326 audit(1744055940.274:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ba2529359 code=0x7ffc0000
[  148.932923][   T30] audit: type=1326 audit(1744055940.284:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba258d169 code=0x7ffc0000
[  149.005015][   T30] audit: type=1326 audit(1744055940.284:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba2584127 code=0x7ffc0000
[  149.092171][   T30] audit: type=1326 audit(1744055940.284:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ba2529359 code=0x7ffc0000
[  149.334003][   T30] audit: type=1326 audit(1744055940.284:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba2584127 code=0x7ffc0000
[  149.376496][   T30] audit: type=1326 audit(1744055940.284:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ba2529359 code=0x7ffc0000
[  149.912569][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.323'.
[  150.349338][ T5858] Bluetooth: hci5: command tx timeout
[  150.373419][   T30] audit: type=1326 audit(1744055940.284:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba2584127 code=0x7ffc0000
[  150.741275][   T30] audit: type=1326 audit(1744055940.284:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ba2529359 code=0x7ffc0000
[  150.775621][   T30] audit: type=1326 audit(1744055940.284:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ba2584127 code=0x7ffc0000
[  150.899554][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'.
[  151.006295][ T6812] netlink: 'syz.1.328': attribute type 21 has an invalid length.
[  151.041302][ T6812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.328'.
[  151.367880][ T6817] syzkaller0: entered allmulticast mode
[  151.414373][ T6817] syzkaller0 (unregistering): left allmulticast mode
[  151.657333][ T6787] chnl_net:caif_netlink_parms(): no params data found
[  152.662444][ T5858] Bluetooth: hci5: command tx timeout
[  152.883108][ T3012] bridge_slave_1: left allmulticast mode
[  152.895621][ T3012] bridge_slave_1: left promiscuous mode
[  152.908652][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.996803][ T3012] bridge_slave_0: left allmulticast mode
[  153.013107][ T3012] bridge_slave_0: left promiscuous mode
[  153.019514][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.109460][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'.
[  153.242658][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  153.412667][ T5895] usb 5-1: Using ep0 maxpacket: 8
[  153.444141][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.464744][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  153.475907][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  153.487966][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  153.500302][ T5895] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  153.510399][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.585564][ T5895] hub 5-1:1.0: bad descriptor, ignoring hub
[  153.591898][ T5895] hub 5-1:1.0: probe with driver hub failed with error -5
[  153.606220][ T5895] cdc_wdm 5-1:1.0: skipping garbage
[  153.612327][ T5895] cdc_wdm 5-1:1.0: skipping garbage
[  153.659696][ T5895] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  153.666758][ T5895] cdc_wdm 5-1:1.0: Unknown control protocol
[  153.916378][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.926827][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.042722][ T5895] usb 5-1: USB disconnect, device number 2
[  154.196142][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.206743][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.216400][ T3012] bond0 (unregistering): Released all slaves
[  154.464021][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.471326][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.479236][ T6787] bridge_slave_0: entered allmulticast mode
[  154.487188][ T6787] bridge_slave_0: entered promiscuous mode
[  154.496069][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.503508][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.703572][ T6787] bridge_slave_1: entered allmulticast mode
[  154.713827][ T6787] bridge_slave_1: entered promiscuous mode
[  154.722430][ T5858] Bluetooth: hci5: command tx timeout
[  155.902133][ T6873] netlink: 'syz.4.344': attribute type 21 has an invalid length.
[  155.912034][ T6873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.344'.
[  155.964046][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.018995][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.303553][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.316569][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.981964][ T5858] Bluetooth: hci5: command tx timeout
[  157.720651][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'.
[  157.729546][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'.
[  158.103216][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'.
[  158.341122][ T3012] team0 (unregistering): Port device team_slave_1 removed
[  158.379216][ T3012] team0 (unregistering): Port device team_slave_0 removed
[  158.725294][ T6787] team0: Port device team_slave_0 added
[  158.855731][ T6787] team0: Port device team_slave_1 added
[  159.912768][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.919772][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.979168][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.999295][ T6903] syzkaller1: entered promiscuous mode
[  160.005060][ T6903] syzkaller1: entered allmulticast mode
[  160.025792][ T6913] netlink: 'syz.4.356': attribute type 21 has an invalid length.
[  160.033910][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.041127][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.047886][ T6906] netlink: 'syz.2.354': attribute type 13 has an invalid length.
[  160.067588][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.096873][ T6913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.356'.
[  160.230679][ T6787] hsr_slave_0: entered promiscuous mode
[  160.237721][ T6787] hsr_slave_1: entered promiscuous mode
[  160.244285][ T6787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.251883][ T6787] Cannot create hsr debugfs directory
[  160.446476][ T6920] loop0: detected capacity change from 0 to 1024
[  160.556996][ T6923] hfsplus: bad catalog entry type
[  162.095347][   T13] hfsplus: b-tree write err: -5, ino 4
[  162.107200][ T6787] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  162.128562][ T6787] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  162.139268][ T6787] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  162.161690][ T6787] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  162.319247][ T6937] netlink: 'syz.2.366': attribute type 13 has an invalid length.
[  162.327477][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  162.554223][ T6941] IPVS: length: 231 != 24
[  163.182539][ T5895] usb 2-1: Using ep0 maxpacket: 8
[  163.197310][ T5895] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  163.230209][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.242641][ T5895] usb 2-1: Product: syz
[  163.246864][ T5895] usb 2-1: Manufacturer: syz
[  163.260584][ T5895] usb 2-1: SerialNumber: syz
[  163.291309][ T5895] usb 2-1: config 0 descriptor??
[  163.310998][ T5895] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  163.319659][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.343043][ T5895] usb 2-1: setting power ON
[  163.349470][ T5895] dvb-usb: bulk message failed: -22 (2/0)
[  163.377798][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  163.471892][ T6787] 8021q: adding VLAN 0 to HW filter on device team0
[  163.496111][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.503430][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.532146][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.539417][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.568564][ T6931] dvb-usb: bulk message failed: -22 (3/0)
[  163.578331][ T6931] usb 2-1: gpio_write failed.
[  163.585786][ T6931] cxusb: i2c rd: len=99 is too big!
[  163.585786][ T6931] 
[  163.593198][ T5895] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  163.603393][ T5895] usb 2-1: media controller created
[  163.630309][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  164.287561][ T6787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.394099][ T5895] usb 2-1: selecting invalid altsetting 6
[  164.400070][ T5895] usb 2-1: digital interface selection failed (-22)
[  164.412491][ T5895] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  164.423408][ T5895] usb 2-1: setting power OFF
[  164.428272][ T5895] dvb-usb: bulk message failed: -22 (2/0)
[  164.452612][ T5895] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  164.461961][ T5895] (NULL device *): no alternate interface
[  164.597550][ T6961] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.275508][ T6964] netlink: 'syz.2.371': attribute type 21 has an invalid length.
[  166.445671][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.371'.
[  166.650015][ T5895] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  166.792698][ T5895] usb 2-1: USB disconnect, device number 3
[  167.079901][ T6957] hsr0: entered promiscuous mode
[  167.149949][ T6955] hsr0: left promiscuous mode
[  167.418467][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.544470][ T6976] netlink: 'syz.4.377': attribute type 13 has an invalid length.
[  167.782045][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[  170.436998][ T6787] veth0_vlan: entered promiscuous mode
[  170.586398][ T6787] veth1_vlan: entered promiscuous mode
[  170.774038][ T6787] veth0_macvtap: entered promiscuous mode
[  170.795027][ T6787] veth1_macvtap: entered promiscuous mode
[  170.810572][ T7019] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  170.929389][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.061161][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.088583][ T6787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.099070][ T6787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.114320][ T6787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.129195][ T6787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.231309][ T7026] loop0: detected capacity change from 0 to 1024
[  171.252003][ T7026] EXT4-fs: Ignoring removed nobh option
[  171.266917][ T7026] EXT4-fs: Ignoring removed bh option
[  171.317745][ T7026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.336088][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'.
[  171.360693][ T7028] block device autoloading is deprecated and will be removed.
[  171.404436][ T7028] syz.1.391: attempt to access beyond end of device
[  171.404436][ T7028] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  171.521040][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.582752][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.599552][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.652941][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.660822][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.163215][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[  173.193878][ T7059] netlink: 'syz.4.398': attribute type 3 has an invalid length.
[  173.661790][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'.
[  176.456563][ T7096] netlink: 'syz.2.410': attribute type 3 has an invalid length.
[  179.765229][ T7140] netlink: 'syz.1.423': attribute type 3 has an invalid length.
[  179.783936][ T7135] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  179.883706][ T7142] netlink: 'syz.2.422': attribute type 13 has an invalid length.
[  180.180176][ T7156] loop5: detected capacity change from 0 to 128
[  180.187657][ T7156] EXT4-fs: Ignoring removed nobh option
[  180.208607][ T7156] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.225540][ T7156] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.366439][ T7171] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[7171]
[  182.561502][ T6787] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.040423][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'.
[  183.983951][ T7184] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  184.031037][ T7185] netlink: 'syz.1.437': attribute type 3 has an invalid length.
[  186.901595][ T7209] Invalid ELF header magic: != ELF
[  186.992793][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.447'.
[  187.021138][ T7208] netlink: 'syz.2.445': attribute type 13 has an invalid length.
[  187.077383][ T7215] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  187.229827][ T7221] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  187.259409][ T7223] netlink: 'syz.4.452': attribute type 3 has an invalid length.
[  192.954649][ T7263] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  193.144295][ T7265] netlink: 'syz.0.464': attribute type 3 has an invalid length.
[  193.632750][ T5858] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2
[  194.732193][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.739205][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  195.865026][ T7301] netlink: 'syz.0.478': attribute type 3 has an invalid length.
[  196.191922][ T7305] netlink: 'syz.0.480': attribute type 10 has an invalid length.
[  196.203667][ T7305] 8021q: adding VLAN 0 to HW filter on device team0
[  196.625433][ T7314] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  196.678140][ T7305] bond0: (slave team0): Enslaving as an active interface with an up link
[  196.939803][ T7316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  197.733529][ T5858] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  197.743375][ T5858] Bluetooth: hci1: Injecting HCI hardware error event
[  197.753697][ T5858] Bluetooth: hci1: hardware error 0x00
[  200.503588][ T5858] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  200.906252][ T7344] xt_CT: No such helper "pptp"
[  202.378684][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'.
[  203.523508][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  203.716286][ T7394] veth0_vlan: entered allmulticast mode
[  204.582474][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  204.589553][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.605775][ T5894] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  204.615896][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.981600][ T7395] kernel profiling enabled (shift: 7)
[  205.540853][ T5894] usb 3-1: config 0 descriptor??
[  207.164090][ T5894] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  207.242017][ T5894] usb 3-1: USB disconnect, device number 2
[  207.523664][ T7411] loop5: detected capacity change from 0 to 1024
[  207.546845][ T7411] EXT4-fs: Ignoring removed nobh option
[  207.552785][ T7411] EXT4-fs: Ignoring removed bh option
[  207.795249][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.868797][ T7417] Invalid ELF header magic: != ELF
[  208.694051][ T6787] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.822023][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  210.498956][ T7450] loop2: detected capacity change from 0 to 1024
[  211.439015][ T7455] hfsplus: bad catalog entry type
[  211.752814][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  211.762934][ T5154] Bluetooth: hci2: command 0x0406 tx timeout
[  212.121269][   T79] hfsplus: b-tree write err: -5, ino 4
[  215.775743][ T7476] Invalid ELF header magic: != ELF
[  216.519247][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.422969][ T7496] loop1: detected capacity change from 0 to 512
[  217.469847][ T7496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  218.061224][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.304644][ T7506] ------------[ cut here ]------------
[  218.310347][ T7506] do not call blocking ops when !TASK_RUNNING; state=1 set at [<ffffffff819c19fc>] prepare_to_wait_event+0x3ac/0x460
[  218.323150][ T7506] WARNING: CPU: 1 PID: 7506 at kernel/sched/core.c:8745 __might_sleep+0xb9/0xe0
[  218.332233][ T7506] Modules linked in:
[  218.336510][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.5.535 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) 
[  218.347644][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  218.357789][ T7506] RIP: 0010:__might_sleep+0xb9/0xe0
[  218.363082][ T7506] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  218.382824][ T7506] RSP: 0000:ffffc900047bf988 EFLAGS: 00010246
[  218.388952][ T7506] RAX: fb358c1fcc791b00 RBX: 1ffff1100606e2f1 RCX: 0000000000080000
[  218.397005][ T7506] RDX: ffffc9001c85c000 RSI: 0000000000027056 RDI: 0000000000027057
[  218.405182][ T7506] RBP: ffff888030371788 R08: ffffffff81828012 R09: fffffbfff1d7a980
[  218.413246][ T7506] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000
[  218.421248][ T7506] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740
[  218.429350][ T7506] FS:  00007f2a39fb46c0(0000) GS:ffff88812508f000(0000) knlGS:0000000000000000
[  218.438431][ T7506] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.445095][ T7506] CR2: 00007f2a39fd4f98 CR3: 00000000334b6000 CR4: 00000000003526f0
[  218.453201][ T7506] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  218.461222][ T7506] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  218.469298][ T7506] Call Trace:
[  218.472660][ T7506]  <TASK>
[  218.475637][ T7506]  __mutex_lock+0x12c/0x10c0
[  218.480296][ T7506]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  218.486311][ T7506]  ? __ceph_open_session+0x471/0xa30
[  218.491646][ T7506]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  218.497655][ T7506]  ? __pfx___mutex_lock+0x10/0x10
[  218.502805][ T7506]  ? __up_read+0x2c4/0x6b0
[  218.507275][ T7506]  ? prepare_to_wait_event+0x3ac/0x460
[  218.512834][ T7506]  ? prepare_to_wait_event+0x40c/0x460
[  218.518344][ T7506]  __ceph_open_session+0x471/0xa30
[  218.523603][ T7506]  ? bdi_register_va+0x593/0x770
[  218.528724][ T7506]  ? __pfx___ceph_open_session+0x10/0x10
[  218.535086][ T7506]  ? __pfx_autoremove_wake_function+0x10/0x10
[  218.541248][ T7506]  ? sget_fc+0x960/0xa50
[  218.546117][ T7506]  ? __pfx_ceph_set_super+0x10/0x10
[  218.551813][ T7506]  ceph_get_tree+0xac4/0x17b0
[  218.556914][ T7506]  vfs_get_tree+0x90/0x2b0
[  218.561365][ T7506]  vfs_cmd_create+0xa0/0x1f0
[  218.566083][ T7506]  ? __se_sys_fsconfig+0xa14/0xf40
[  218.571223][ T7506]  __se_sys_fsconfig+0xa20/0xf40
[  218.576247][ T7506]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  218.581742][ T7506]  ? __x64_sys_fsconfig+0x20/0xc0
[  218.586837][ T7506]  do_syscall_64+0xf3/0x230
[  218.591372][ T7506]  ? clear_bhb_loop+0x45/0xa0
[  218.596113][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.602025][ T7506] RIP: 0033:0x7f2a3c18d169
[  218.606518][ T7506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.626281][ T7506] RSP: 002b:00007f2a39fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  218.634782][ T7506] RAX: ffffffffffffffda RBX: 00007f2a3c3a6160 RCX: 00007f2a3c18d169
[  218.642807][ T7506] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  218.650787][ T7506] RBP: 00007f2a3c20e2a0 R08: 0000000000000000 R09: 0000000000000000
[  218.658854][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.666930][ T7506] R13: 0000000000000000 R14: 00007f2a3c3a6160 R15: 00007ffdf5e21668
[  218.674983][ T7506]  </TASK>
[  218.678036][ T7506] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  218.685352][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.5.535 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) 
[  218.696395][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  218.706472][ T7506] Call Trace:
[  218.709770][ T7506]  <TASK>
[  218.712721][ T7506]  dump_stack_lvl+0x241/0x360
[  218.717437][ T7506]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.722670][ T7506]  ? __pfx__printk+0x10/0x10
[  218.727301][ T7506]  ? vscnprintf+0x5d/0x90
[  218.731659][ T7506]  panic+0x349/0x880
[  218.735588][ T7506]  ? __warn+0x174/0x4d0
[  218.739775][ T7506]  ? __pfx_panic+0x10/0x10
[  218.744244][ T7506]  __warn+0x344/0x4d0
[  218.748257][ T7506]  ? __might_sleep+0xb9/0xe0
[  218.752884][ T7506]  report_bug+0x2b3/0x500
[  218.757246][ T7506]  ? __might_sleep+0xb9/0xe0
[  218.761857][ T7506]  ? __might_sleep+0xb9/0xe0
[  218.766462][ T7506]  ? __might_sleep+0xbb/0xe0
[  218.771067][ T7506]  handle_bug+0x89/0x170
[  218.775329][ T7506]  exc_invalid_op+0x1a/0x50
[  218.779850][ T7506]  asm_exc_invalid_op+0x1a/0x20
[  218.784712][ T7506] RIP: 0010:__might_sleep+0xb9/0xe0
[  218.789927][ T7506] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  218.809539][ T7506] RSP: 0000:ffffc900047bf988 EFLAGS: 00010246
[  218.815621][ T7506] RAX: fb358c1fcc791b00 RBX: 1ffff1100606e2f1 RCX: 0000000000080000
[  218.823603][ T7506] RDX: ffffc9001c85c000 RSI: 0000000000027056 RDI: 0000000000027057
[  218.831606][ T7506] RBP: ffff888030371788 R08: ffffffff81828012 R09: fffffbfff1d7a980
[  218.839586][ T7506] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000
[  218.847564][ T7506] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740
[  218.855566][ T7506]  ? __warn_printk+0x2a2/0x360
[  218.860396][ T7506]  ? __might_sleep+0xb8/0xe0
[  218.865042][ T7506]  __mutex_lock+0x12c/0x10c0
[  218.869695][ T7506]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  218.875642][ T7506]  ? __ceph_open_session+0x471/0xa30
[  218.880979][ T7506]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  218.886926][ T7506]  ? __pfx___mutex_lock+0x10/0x10
[  218.892002][ T7506]  ? __up_read+0x2c4/0x6b0
[  218.896483][ T7506]  ? prepare_to_wait_event+0x3ac/0x460
[  218.902070][ T7506]  ? prepare_to_wait_event+0x40c/0x460
[  218.907587][ T7506]  __ceph_open_session+0x471/0xa30
[  218.912747][ T7506]  ? bdi_register_va+0x593/0x770
[  218.917790][ T7506]  ? __pfx___ceph_open_session+0x10/0x10
[  218.923478][ T7506]  ? __pfx_autoremove_wake_function+0x10/0x10
[  218.929621][ T7506]  ? sget_fc+0x960/0xa50
[  218.933922][ T7506]  ? __pfx_ceph_set_super+0x10/0x10
[  218.939178][ T7506]  ceph_get_tree+0xac4/0x17b0
[  218.943945][ T7506]  vfs_get_tree+0x90/0x2b0
[  218.948450][ T7506]  vfs_cmd_create+0xa0/0x1f0
[  218.953095][ T7506]  ? __se_sys_fsconfig+0xa14/0xf40
[  218.958272][ T7506]  __se_sys_fsconfig+0xa20/0xf40
[  218.963245][ T7506]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  218.968734][ T7506]  ? __x64_sys_fsconfig+0x20/0xc0
[  218.973776][ T7506]  do_syscall_64+0xf3/0x230
[  218.978300][ T7506]  ? clear_bhb_loop+0x45/0xa0
[  218.982996][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.988903][ T7506] RIP: 0033:0x7f2a3c18d169
[  218.993331][ T7506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.012963][ T7506] RSP: 002b:00007f2a39fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  219.021401][ T7506] RAX: ffffffffffffffda RBX: 00007f2a3c3a6160 RCX: 00007f2a3c18d169
[  219.029385][ T7506] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  219.037363][ T7506] RBP: 00007f2a3c20e2a0 R08: 0000000000000000 R09: 0000000000000000
[  219.045345][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.053329][ T7506] R13: 0000000000000000 R14: 00007f2a3c3a6160 R15: 00007ffdf5e21668
[  219.061326][ T7506]  </TASK>
[  219.064612][ T7506] Kernel Offset: disabled
[  219.068945][ T7506] Rebooting in 86400 seconds..