last executing test programs:

14m5.529252239s ago: executing program 0 (id=55):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, &(0x7f0000000540)=0x5})
socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27c9a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f06f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d8224fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d784cfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0xb29}}, 0x1006)

14m2.868751828s ago: executing program 0 (id=57):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, 0x0)
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0x29, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a)

13m57.37809967s ago: executing program 0 (id=59):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000280)="0f", 0x1)
splice(r1, 0x0, r3, 0x0, 0x25a5, 0x0)

13m50.680322458s ago: executing program 0 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, &(0x7f0000000540)=0x5})
socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006)

13m49.529133774s ago: executing program 0 (id=66):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xc}, 0x0)
unlinkat$binderfs_device(0xffffff9c, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)

13m46.770412285s ago: executing program 0 (id=69):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = socket$inet(0x2, 0x802, 0x1)
write(r4, &(0x7f0000000080)="08008edf773c8000", 0xfd)

13m31.116607802s ago: executing program 32 (id=69):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = socket$inet(0x2, 0x802, 0x1)
write(r4, &(0x7f0000000080)="08008edf773c8000", 0xfd)

13m30.515174196s ago: executing program 3 (id=85):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x8502, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x8001, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12)

13m30.067065165s ago: executing program 3 (id=86):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f00330050000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

13m28.572717629s ago: executing program 3 (id=87):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x8f440c7b3e4383c3, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

13m25.093850006s ago: executing program 3 (id=89):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0)
r6 = dup(r5)
write$evdev(r6, 0x0, 0x0)
fanotify_mark(r6, 0x201, 0x40000036, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f00000004c0)={&(0x7f0000000400)=[{0x1, 0x0, 0x7, 0xfffffffffffffffa, 0x9, 0x1, 0x9, 0x5}], 0x1, 0x38, 0x1, 0x3})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

13m23.10447451s ago: executing program 3 (id=91):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xc}, 0x0)
unlinkat$binderfs_device(0xffffff9c, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)

13m16.823867579s ago: executing program 3 (id=94):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f00330050000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

13m1.528232728s ago: executing program 33 (id=94):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f00330050000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

10m17.994239845s ago: executing program 5 (id=245):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x8502, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x8001, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12)

10m15.212695266s ago: executing program 5 (id=249):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9)

10m13.373426877s ago: executing program 5 (id=250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)

10m12.498840336s ago: executing program 5 (id=252):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYBLOB="e18284af80c70e9113c63224dfa33f38ce20a753d0a26a800c1047a49bc19037239c2bd131c2d2ba022c7b892cd3ed438124e6d70ad8fb642fa1f4170e0276ed0ec783a65bc107a21c9faa27af02cc5d8b0fd7927179f6f9b6df84f55bf8c07573b5392627b1270c43deac59f98faa6d42f44c9cb2ee44eb7829fbc877226115a63da003bb2d04018e7a905ece8f85d0d96d4c8e90", @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20040090}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x80c0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000040)={0x7, 0x2})
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0)

10m3.809067259s ago: executing program 4 (id=262):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x300000c, &(0x7f0000000080)=ANY=[], 0xfe, 0x26e, &(0x7f0000000640)="$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")
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4)
sched_setaffinity(0x0, 0xffffff79, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x20004800)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r4, 0x4)

10m2.640043755s ago: executing program 4 (id=263):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, &(0x7f0000000540)=0x5})
socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27c9a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f06f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d8224fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d784cfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0xb29}}, 0x1006)

10m2.287092023s ago: executing program 5 (id=264):
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x70}}, 0x484)
setsockopt$sock_int(r5, 0x1, 0x7, 0x0, 0x0)

9m58.517191827s ago: executing program 4 (id=266):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0xe5c, 0x80000)
r3 = eventfd2(0x7e, 0x80800)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2, r3})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0x95c, 0x61, 0x7, 0x2, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0x6, 0x0, 0x2, 0x0, 0x4, 0x5, 0x1, 0x7a, 0xc0, 0x5, 0x3, 0x401}, {0x4, 0x5, 0x40, 0x5, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0xf, 0x2c, 0xc}], 0x6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

9m58.491585887s ago: executing program 5 (id=267):
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20007, 0x200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, 0x0)

9m55.853233996s ago: executing program 4 (id=270):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x8502, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x8001, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12)

9m54.261258541s ago: executing program 4 (id=273):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ppp(0xffffffffffffff9c, 0x0, 0xa8002, 0x0)

9m52.291902324s ago: executing program 4 (id=274):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, &(0x7f0000000540)=0x5})
socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006)

9m42.835071904s ago: executing program 34 (id=267):
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x20007, 0x200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, 0x0)

9m36.519172814s ago: executing program 35 (id=274):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_vhci(0x0, 0x17)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x90}, {0x3}}}}, 0xd)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x9, 0x0, &(0x7f0000000540)=0x5})
socket$inet(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006)

7m22.193990913s ago: executing program 2 (id=417):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
creat(0x0, 0x100)

7m21.656756484s ago: executing program 2 (id=418):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00')
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4010, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x3)
fchdir(r4)
r5 = fanotify_init(0x1a, 0x1)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r5, 0x1, 0x13, r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r8, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)

7m18.613154302s ago: executing program 2 (id=420):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000000})

7m16.785950332s ago: executing program 2 (id=423):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7m14.805215087s ago: executing program 2 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x4, 0xc}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc)

7m9.816867967s ago: executing program 2 (id=430):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x8001, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12)

6m54.440582518s ago: executing program 36 (id=430):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./cgroup/../file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x8001, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12)

3m4.322620972s ago: executing program 8 (id=735):
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x3})
request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='syz', 0xffffffffffffffff)

3m3.537478269s ago: executing program 8 (id=737):
syz_open_dev$video(&(0x7f0000000000), 0x9, 0x1e3a00)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m1.330113808s ago: executing program 8 (id=740):
openat$vcs(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x4a, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfff5}}}}}}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
open(0x0, 0x0, 0x157)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r2 = getpgrp(r0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x609}, 0x8000000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001440)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/177}, 0x20)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0x2}, 0x10}}, 0x0)

2m59.266862503s ago: executing program 8 (id=741):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
kexec_load(0x1, 0x0, 0x0, 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x7, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m49.629628866s ago: executing program 8 (id=751):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
io_setup(0x10, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "5109aec555cb97530b4b6dbd60cee1437b17e8751dc5872c3a8d73d134f9b7"}, 0x2a)

2m48.278119536s ago: executing program 8 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x1b7b, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044)

2m32.259651339s ago: executing program 37 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x1b7b, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x74, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044)

29.363382042s ago: executing program 6 (id=902):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x10, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "5109aec555cb97530b4b6dbd60cee1437b17e8751dc5872c3a8d73d134f9b7"}, 0x2a)

23.845572844s ago: executing program 7 (id=910):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x3})

20.189965024s ago: executing program 6 (id=913):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

16.802098908s ago: executing program 7 (id=918):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xb4, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote}}, 0x1e)

14.879924011s ago: executing program 6 (id=919):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
r3 = syz_open_procfs(0x0, 0x0)
lseek(r3, 0x8828, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$sock(r4, 0x0, 0x0, 0x40440d1)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f00000003c0))

14.804099433s ago: executing program 9 (id=920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x300000c, &(0x7f0000000080)=ANY=[], 0xfe, 0x26e, &(0x7f0000000640)="$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")
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4)
sched_setaffinity(0x0, 0xffffff79, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x20004800)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x4)

14.709137715s ago: executing program 1 (id=921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x10, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "5109aec555cb97530b4b6dbd60cee1437b17e8751dc5872c3a8d73d134f9b7"}, 0x2a)

13.515317221s ago: executing program 9 (id=922):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0xb4, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)

13.330773785s ago: executing program 1 (id=923):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r1, &(0x7f0000000240)="9d1c996f07662c8a", &(0x7f0000000500)=""/218}, 0x20)

12.617193871s ago: executing program 9 (id=924):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039})

12.371736117s ago: executing program 1 (id=925):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1d4}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

10.784520842s ago: executing program 7 (id=926):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r1, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '^\vB', 0x7c, 0x6, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x11b, 0x5, 0x0, 0x4e23, 0x4e23, 0x1, 0x4, 0x0, 0x0, 0x1}, [{0x44, 0xff, 0x8, 0x5, 0x40, 0x5, 0xb, 0x1}, {0x7, 0x1fc, 0x8, 0x8, 0x7c70, 0x1, 0xa, 0xb3577d1}, {0x8, 0x71d, 0x7, 0x1, 0x4, 0x9, 0xf, 0x7}]}}}}}, 0xa4)

10.701333963s ago: executing program 1 (id=927):
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2})

10.344863141s ago: executing program 1 (id=928):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@local, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x8, 0x33}, 0x0, @in6=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x7)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r8, 0x3cd1, 0x3fd}, 0xc)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x2, 0x4, 0x208, 0x9, 0x7fffffff, 0x80000000, 0x4, 0x800, r8}, 0x20)

7.898897765s ago: executing program 6 (id=929):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)

7.870385686s ago: executing program 1 (id=930):
r0 = socket$kcm(0x23, 0x5, 0x0)
listen(r0, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r5, 0x0, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @random="0633d825765e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, 'K$'}}}}}, 0x0)
timerfd_create(0x0, 0x80000)
close_range(r1, r3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r7, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18)

6.352614999s ago: executing program 9 (id=931):
userfaultfd(0x80801)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x14)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1b, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000))
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
epoll_create1(0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x4, 0x7ffe}, 0xc)
close_range(r5, r6, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)

6.224298622s ago: executing program 7 (id=932):
syz_open_dev$vim2m(&(0x7f00000002c0), 0x402, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1])

5.265747373s ago: executing program 6 (id=933):
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xc}, 0x0)
unlinkat$binderfs_device(0xffffff9c, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3)
removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(0x0, 0x8, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)

2.340580018s ago: executing program 6 (id=934):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0xb4, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote}}, 0x1e)

2.280454999s ago: executing program 9 (id=935):
r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000)
r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x402002, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x40000000, r3, 0x0, &(0x7f0000000240)={0x98f905, 0xffffbffd, '\x00', @p_u16=0x0}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

2.27081554s ago: executing program 7 (id=936):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)

630.714836ms ago: executing program 7 (id=937):
syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x47, 0x48, 0x82, 0x8, 0x50d, 0x122, 0x2cf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xb8, 0x100, 0x7f, "", [{{0x9, 0x4, 0xc7, 0x81, 0x0, 0x42, 0x96, 0x75, 0x9}}]}}]}}, 0x0)

0s ago: executing program 9 (id=938):
r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0xffffffff)
msgget$private(0x0, 0x400)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, 0x0, r4)

kernel console output (not intermixed with test programs):

127.832707][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.846742][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[  127.859365][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.872165][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.879495][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.893419][ T5780] Bluetooth: hci2: command tx timeout
[  127.894408][   T51] Bluetooth: hci3: command tx timeout
[  127.942166][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.949442][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.961406][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.968973][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.012798][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.020047][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.074523][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[  128.134828][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.142151][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.190736][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.233295][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.240586][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.435565][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.825745][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.907239][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.952673][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.015514][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.086873][ T5777] veth0_vlan: entered promiscuous mode
[  129.124607][ T5778] veth0_vlan: entered promiscuous mode
[  129.149809][ T5777] veth1_vlan: entered promiscuous mode
[  129.157351][ T5781] veth0_vlan: entered promiscuous mode
[  129.201591][ T5778] veth1_vlan: entered promiscuous mode
[  129.241485][ T5781] veth1_vlan: entered promiscuous mode
[  129.263146][ T5774] veth0_vlan: entered promiscuous mode
[  129.303391][ T5774] veth1_vlan: entered promiscuous mode
[  129.331205][ T5777] veth0_macvtap: entered promiscuous mode
[  129.346496][ T5778] veth0_macvtap: entered promiscuous mode
[  129.360513][ T5778] veth1_macvtap: entered promiscuous mode
[  129.379786][ T5777] veth1_macvtap: entered promiscuous mode
[  129.432363][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.443445][ T5781] veth0_macvtap: entered promiscuous mode
[  129.461366][ T5781] veth1_macvtap: entered promiscuous mode
[  129.472432][ T5774] veth0_macvtap: entered promiscuous mode
[  129.485636][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.496493][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.509355][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.522598][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.553112][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.564485][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.580667][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.591559][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.603233][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.613321][ T5774] veth1_macvtap: entered promiscuous mode
[  129.630436][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.643772][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.658195][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.666999][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.685549][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.697188][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.710357][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.722353][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.733274][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.743042][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.752751][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.766359][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.778619][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.789244][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.799887][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.814023][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.844945][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.854159][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.863422][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.872918][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.888273][   T51] Bluetooth: hci1: command tx timeout
[  129.893832][   T51] Bluetooth: hci0: command tx timeout
[  129.912798][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.925206][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.935681][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.946891][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.959346][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.970384][ T5780] Bluetooth: hci3: command tx timeout
[  129.976970][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.979784][ T5780] Bluetooth: hci2: command tx timeout
[  129.992333][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.065011][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.076843][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.090252][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.101281][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.111299][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.121934][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.133911][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.147745][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.156544][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.166501][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.175316][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.305612][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.317044][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.388071][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.395995][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.504608][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.512912][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.526436][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.539203][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.595257][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.615854][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.682013][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.692779][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.718321][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.725863][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.779846][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.804169][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.037842][   T51] Bluetooth: hci0: command tx timeout
[  133.037843][ T5780] Bluetooth: hci1: command tx timeout
[  133.037881][ T5780] Bluetooth: hci2: command tx timeout
[  133.043289][   T51] Bluetooth: hci3: command tx timeout
[  136.583957][ T5855] syz.3.6[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  136.600448][ T5855] loop3: detected capacity change from 0 to 256
[  136.815172][ T5855] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  136.942064][ T5859] loop2: detected capacity change from 0 to 1024
[  137.420317][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  139.087376][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  139.737089][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  139.743886][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  140.475231][ T5876] loop2: detected capacity change from 0 to 8
[  141.647321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  141.723342][ T5876] SQUASHFS error: lzo decompression failed, data probably corrupt
[  141.731715][ T5876] SQUASHFS error: Failed to read block 0x91: -5
[  141.738074][ T5876] SQUASHFS error: Unable to read metadata cache entry [8f]
[  141.745339][ T5876] SQUASHFS error: Unable to read inode 0x13f
[  147.177663][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  147.587587][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  154.689652][ T5909] xt_bpf: check failed: parse error
[  156.097321][    C0] sched: RT throttling activated
[  157.373703][ T5920] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  157.446398][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  157.827601][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  158.327664][ T5930] loop3: detected capacity change from 0 to 128
[  158.367452][ T5930] FAT-fs (loop3): bogus logical sector size 523
[  158.576713][ T5930] FAT-fs (loop3): Can't find a valid FAT filesystem
[  160.019512][ T5884] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  165.221776][ T5953] xt_bpf: check failed: parse error
[  168.423494][ T5961] loop0: detected capacity change from 0 to 16
[  168.445513][ T5961] erofs: Unknown parameter '�*bs'
[  169.595922][ T5966] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  171.047777][ T5977] netlink: 56 bytes leftover after parsing attributes in process `syz.2.32'.
[  171.056926][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'.
[  174.750667][ T5992] option changes via remount are deprecated (pid=5990 comm=syz.3.37)
[  177.487313][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  184.631724][ T6012] xt_bpf: check failed: parse error
[  185.167357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  187.446100][ T6020] loop0: detected capacity change from 0 to 256
[  187.461817][ T6020] =======================================================
[  187.461817][ T6020] WARNING: The mand mount option has been deprecated and
[  187.461817][ T6020]          and is ignored by this kernel. Remove the mand
[  187.461817][ T6020]          option from the mount to silence this warning.
[  187.461817][ T6020] =======================================================
[  187.497522][ T6020] exfat: Unknown parameter '017777777777777777777770xffffffffffffffff'
[  188.570404][ T6002] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  189.737592][ T6023] netlink: 56 bytes leftover after parsing attributes in process `syz.1.43'.
[  189.746471][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.43'.
[  199.074869][ T6057] option changes via remount are deprecated (pid=6055 comm=syz.3.49)
[  201.174834][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  201.181357][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  203.087303][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  203.111672][ T6065] xt_bpf: check failed: parse error
[  208.207286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  210.075123][ T6081] loop1: detected capacity change from 0 to 16
[  210.119732][ T6081] erofs: Unknown parameter '�*bs'
[  210.175848][ T6081] loop1: detected capacity change from 0 to 2048
[  210.268863][ T6081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.964041][ T5774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  213.132060][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.314020][ T6108] option changes via remount are deprecated (pid=6095 comm=syz.3.64)
[  215.907684][ T6116] xt_bpf: check failed: parse error
[  218.447321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  222.805374][ T6139] loop2: detected capacity change from 0 to 16
[  222.813302][ T6139] erofs: Unknown parameter '�*bs'
[  227.972772][ T6165] option changes via remount are deprecated (pid=6156 comm=syz.3.78)
[  231.528287][ T6181] xt_bpf: check failed: parse error
[  236.228192][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.237559][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.247358][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.255689][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.263973][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  236.271996][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.773452][   T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.121830][   T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.261402][   T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.377432][ T5776] Bluetooth: hci4: command tx timeout
[  238.412221][   T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.859785][ T6191] chnl_net:caif_netlink_parms(): no params data found
[  240.807624][ T5776] Bluetooth: hci4: command tx timeout
[  242.848532][ T5776] Bluetooth: hci4: command tx timeout
[  244.274201][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.317513][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.345114][ T6191] bridge_slave_0: entered allmulticast mode
[  244.388931][ T6191] bridge_slave_0: entered promiscuous mode
[  244.442618][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.467648][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.480135][ T6191] bridge_slave_1: entered allmulticast mode
[  244.518613][ T6191] bridge_slave_1: entered promiscuous mode
[  244.690373][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.731431][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.937408][ T5776] Bluetooth: hci4: command tx timeout
[  244.992730][ T6191] team0: Port device team_slave_0 added
[  245.180052][ T6191] team0: Port device team_slave_1 added
[  245.390518][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.423824][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.478949][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.699450][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.706482][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.980968][ T6241] xt_bpf: check failed: parse error
[  247.297842][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.832732][ T6191] hsr_slave_0: entered promiscuous mode
[  247.893095][ T6191] hsr_slave_1: entered promiscuous mode
[  247.908550][ T6191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.916182][ T6191] Cannot create hsr debugfs directory
[  249.390777][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  249.397144][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  249.401686][ T5787] Bluetooth: hci3: command 0x0406 tx timeout
[  250.220717][   T73] hsr_slave_0: left promiscuous mode
[  250.244346][   T73] hsr_slave_1: left promiscuous mode
[  250.273968][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.298570][   T73] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.339173][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.355644][   T73] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.542785][   T73] bridge_slave_1: left allmulticast mode
[  251.549145][   T73] bridge_slave_1: left promiscuous mode
[  251.584510][   T73] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.731064][   T73] bridge_slave_0: left allmulticast mode
[  251.736814][   T73] bridge_slave_0: left promiscuous mode
[  251.758324][   T73] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.886625][   T73] veth1_macvtap: left promiscuous mode
[  251.896045][   T73] veth0_macvtap: left promiscuous mode
[  251.914353][   T73] veth1_vlan: left promiscuous mode
[  251.929459][   T73] veth0_vlan: left promiscuous mode
[  259.518984][   T73] team0 (unregistering): Port device team_slave_1 removed
[  259.660875][   T73] team0 (unregistering): Port device team_slave_0 removed
[  259.812991][   T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.946734][   T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.559849][   T73] bond0 (unregistering): Released all slaves
[  262.622526][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  262.629041][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  262.794550][ T6191] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  262.845776][ T6191] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  262.940270][ T6191] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  263.028958][ T6191] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  263.553469][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.661432][ T6191] 8021q: adding VLAN 0 to HW filter on device team0
[  263.722628][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.729967][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.739813][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  264.757417][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  264.767694][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  264.775876][ T6329] loop1: detected capacity change from 0 to 16
[  264.787905][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  264.797567][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  264.805054][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  264.815397][ T6329] erofs: Unknown parameter '�*bs'
[  264.860984][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.869126][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.934476][ T6195] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  265.007966][ T6329] loop1: detected capacity change from 0 to 2048
[  265.135163][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.011163][ T6327] chnl_net:caif_netlink_parms(): no params data found
[  266.227413][ T6339] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  266.524876][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.566030][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.609821][ T6327] bridge_slave_0: entered allmulticast mode
[  266.678558][ T6327] bridge_slave_0: entered promiscuous mode
[  266.742647][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.823892][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.847775][ T5776] Bluetooth: hci2: command tx timeout
[  266.899974][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.967655][ T6327] bridge_slave_1: entered allmulticast mode
[  266.975411][ T6327] bridge_slave_1: entered promiscuous mode
[  267.177786][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.241943][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.589434][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.752882][  T157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.414859][ T5776] Bluetooth: hci2: command tx timeout
[  270.652264][  T157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.718039][ T6327] team0: Port device team_slave_0 added
[  270.749583][ T6327] team0: Port device team_slave_1 added
[  270.837649][  T157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.010822][  T157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.133438][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.157335][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.247666][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.291818][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.299134][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.334785][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.522795][ T6327] hsr_slave_0: entered promiscuous mode
[  271.548185][ T6327] hsr_slave_1: entered promiscuous mode
[  271.555264][ T6327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.563057][ T6327] Cannot create hsr debugfs directory
[  271.672957][ T6191] veth0_vlan: entered promiscuous mode
[  271.862843][ T6191] veth1_vlan: entered promiscuous mode
[  272.170728][ T6191] veth0_macvtap: entered promiscuous mode
[  272.216911][ T6191] veth1_macvtap: entered promiscuous mode
[  273.878360][ T5776] Bluetooth: hci2: command tx timeout
[  274.069036][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.097531][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.127477][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.157310][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.197320][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.220236][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.249965][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.315441][ T6327] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.367006][ T6327] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.415926][ T6327] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  274.449744][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.474795][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.485458][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.502179][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.512432][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.528114][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.568386][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.626772][ T6327] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  274.794055][ T6191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.824226][ T6191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.847384][ T6191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.856187][ T6191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.697301][ T5776] Bluetooth: hci2: command tx timeout
[  277.111791][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.150316][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.096414][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.161989][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.189295][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.382513][ T6327] 8021q: adding VLAN 0 to HW filter on device team0
[  278.542920][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.550199][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.802916][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.810228][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.241226][ T6327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.606626][  T157] hsr_slave_0: left promiscuous mode
[  279.644042][  T157] hsr_slave_1: left promiscuous mode
[  279.671563][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.717122][  T157] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.775513][  T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.002098][  T157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.328099][  T157] bridge_slave_1: left allmulticast mode
[  280.401245][  T157] bridge_slave_1: left promiscuous mode
[  280.407130][  T157] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.654430][  T157] bridge_slave_0: left allmulticast mode
[  280.697287][  T157] bridge_slave_0: left promiscuous mode
[  280.703165][  T157] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.717908][  T157] veth1_macvtap: left promiscuous mode
[  283.743968][  T157] veth0_macvtap: left promiscuous mode
[  283.764365][  T157] veth1_vlan: left promiscuous mode
[  283.787720][  T157] veth0_vlan: left promiscuous mode
[  289.110800][  T157] team0 (unregistering): Port device team_slave_1 removed
[  289.191488][  T157] team0 (unregistering): Port device team_slave_0 removed
[  289.233144][  T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.035192][  T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.324894][  T157] bond0 (unregistering): Released all slaves
[  291.159346][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.498766][ T6327] veth0_vlan: entered promiscuous mode
[  293.562148][ T6327] veth1_vlan: entered promiscuous mode
[  293.740173][ T6327] veth0_macvtap: entered promiscuous mode
[  293.788278][ T6327] veth1_macvtap: entered promiscuous mode
[  293.856855][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.942944][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.004964][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.036283][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.065805][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.093523][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.359582][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.470826][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.537469][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.587310][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.627320][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.667331][ T6327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.701819][ T6327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.799672][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.340117][ T6327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.422587][ T6327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.467409][ T6327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.476186][ T6327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.608254][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.616150][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.751058][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.781446][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.638503][ T6587] loop2: detected capacity change from 0 to 512
[  309.641999][ T6598] loop1: detected capacity change from 0 to 16
[  309.688787][ T6598] erofs: Unknown parameter '�*bs'
[  309.708189][ T6587] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.142: corrupted in-inode xattr: invalid ea_ino
[  309.761979][ T6587] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.142: couldn't read orphan inode 15 (err -117)
[  309.852185][ T6453] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.423288][ T6598] loop1: detected capacity change from 0 to 2048
[  310.456066][ T6453] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  310.483408][ T6453] Buffer I/O error on dev loop1, logical block 0, async page read
[  311.699145][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.770580][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.943060][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.707877][ T6619] Zero length message leads to an empty skb
[  314.909204][ T5774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  315.137855][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.060861][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  324.067309][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  337.276248][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.159'.
[  351.688198][ T6810] loop5: detected capacity change from 0 to 512
[  351.753762][ T6810] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.170: inode has both inline data and extents flags
[  353.529464][ T6810] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.170: couldn't read orphan inode 15 (err -117)
[  355.261683][ T6810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  355.505135][ T6327] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  356.175987][ T6832] process 'syz.5.174' launched './file0' with NULL argv: empty string added
[  357.509294][ T6836] option changes via remount are deprecated (pid=6835 comm=syz.5.176)
[  358.860674][ T5776] Bluetooth: hci1: unexpected event for opcode 0x042c
[  359.348087][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'.
[  359.431927][ T6851] vlan2: entered promiscuous mode
[  359.467659][ T6851] bridge0: entered promiscuous mode
[  362.758315][ T5780] Bluetooth: hci4: command 0x0406 tx timeout
[  363.764005][ T5126] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  364.507365][ T5126] usb 6-1: Using ep0 maxpacket: 16
[  364.531850][ T5126] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.617144][ T5126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  364.631724][ T5126] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  364.643475][ T5126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.667364][ T5126] usb 6-1: Product: syz
[  364.671621][ T5126] usb 6-1: Manufacturer: syz
[  364.677112][ T5126] usb 6-1: SerialNumber: syz
[  364.978188][ T5126] usb 6-1: 0:2 : does not exist
[  366.847803][ T5126] usb 6-1: USB disconnect, device number 2
[  366.923574][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.760000][ T5776] Bluetooth: hci4: unexpected event for opcode 0x042c
[  379.101806][ T6985] trusted_key: encrypted_key: insufficient parameters specified
[  385.501113][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  385.507816][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  388.373962][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  392.782082][ T5776] Bluetooth: hci0: unexpected event for opcode 0x042c
[  392.797382][ T5126] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  392.819423][ T7071] loop5: detected capacity change from 0 to 16
[  392.863841][ T7071] erofs: Unknown parameter '�*bs'
[  393.069754][ T5126] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  393.314165][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.480467][ T5126] usb 5-1: config 0 descriptor??
[  393.681280][ T5126] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  393.761168][ T5126] gp8psk: usb in 128 operation failed.
[  394.024793][ T5126] gp8psk: usb in 146 operation failed.
[  394.034858][ T5126] gp8psk: failed to get FW version
[  394.051980][ T5126] gp8psk: usb in 149 operation failed.
[  394.071705][ T5126] gp8psk: failed to get FPGA version
[  394.101076][ T5126] gp8psk: usb in 138 operation failed.
[  394.127350][ T5126] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  394.166280][ T5126] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  394.237439][ T5126] usb 5-1: USB disconnect, device number 2
[  409.924197][ T5776] Bluetooth: hci2: unexpected event for opcode 0x042c
[  416.989340][ T7230] option changes via remount are deprecated (pid=7224 comm=syz.4.231)
[  418.737286][   T56] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  418.996463][   T56] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  419.065608][   T56] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  419.135473][   T56] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  419.190088][   T56] usb 3-1: config 0 interface 0 has no altsetting 0
[  419.196839][   T56] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  419.245611][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.304454][   T56] usb 3-1: config 0 descriptor??
[  419.347875][ T7234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  420.432909][   T56] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  420.440072][   T56] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0
[  420.446819][   T56] lua 0003:1E7D:2C2E.0001: item fetching failed at offset 2/40
[  420.455507][   T56] lua 0003:1E7D:2C2E.0001: parse failed
[  421.399178][   T56] lua: probe of 0003:1E7D:2C2E.0001 failed with error -22
[  421.510943][   T56] usb 3-1: USB disconnect, device number 2
[  424.405396][ T5776] Bluetooth: hci4: unexpected event for opcode 0x042c
[  430.571048][ T7335] option changes via remount are deprecated (pid=7334 comm=syz.1.246)
[  437.637412][ T7393] option changes via remount are deprecated (pid=7392 comm=syz.1.259)
[  440.464489][ T7411] loop4: detected capacity change from 0 to 16
[  440.520354][ T7411] erofs: Unknown parameter '�*bs'
[  440.592091][ T7158] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  440.629627][ T7411] loop4: detected capacity change from 0 to 2048
[  440.718357][ T7411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.519723][ T6191] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  441.758975][ T6191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.803956][ T7453] option changes via remount are deprecated (pid=7452 comm=syz.2.268)
[  447.886801][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  447.893697][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  457.173179][ T7503] option changes via remount are deprecated (pid=7502 comm=syz.1.277)
[  462.157445][ T5776] Bluetooth: hci4: unexpected event for opcode 0x042c
[  462.471985][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  462.473538][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  462.474230][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  462.475392][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  462.476368][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  462.476959][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  462.726469][ T7524] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  463.314395][ T7521] chnl_net:caif_netlink_parms(): no params data found
[  464.537411][ T5780] Bluetooth: hci3: command tx timeout
[  466.539512][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.546786][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.607288][ T5780] Bluetooth: hci3: command tx timeout
[  466.707634][ T7521] bridge_slave_0: entered allmulticast mode
[  466.715372][ T7521] bridge_slave_0: entered promiscuous mode
[  466.766483][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.797393][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.804715][ T7521] bridge_slave_1: entered allmulticast mode
[  466.839950][ T7521] bridge_slave_1: entered promiscuous mode
[  466.930238][ T7521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.981473][ T7521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.145526][ T7521] team0: Port device team_slave_0 added
[  467.211390][ T7521] team0: Port device team_slave_1 added
[  467.305442][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.357938][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.467213][ T7521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.500004][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.507026][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.607254][ T7521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.853961][ T7521] hsr_slave_0: entered promiscuous mode
[  467.947780][ T7521] hsr_slave_1: entered promiscuous mode
[  467.987965][ T7521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  467.996586][ T7521] Cannot create hsr debugfs directory
[  468.687358][ T5780] Bluetooth: hci3: command tx timeout
[  469.907025][ T7553] loop2: detected capacity change from 0 to 2048
[  469.990471][ T7553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  470.150638][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.202050][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  470.225322][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  470.234679][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  470.243763][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  470.254952][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  470.265164][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  470.345058][ T1098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.279047][ T5776] Bluetooth: hci3: command tx timeout
[  471.801085][ T1098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.933960][ T1098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.060962][ T1098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.368407][ T5776] Bluetooth: hci2: command tx timeout
[  472.536428][ T7521] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  474.238963][ T7521] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  474.304122][ T7521] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  474.443771][ T7521] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  474.452248][ T5776] Bluetooth: hci2: command tx timeout
[  475.917482][ T7557] chnl_net:caif_netlink_parms(): no params data found
[  476.537527][ T5776] Bluetooth: hci2: command tx timeout
[  476.729389][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.736606][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.756559][ T7557] bridge_slave_0: entered allmulticast mode
[  476.766779][ T7557] bridge_slave_0: entered promiscuous mode
[  476.784175][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.807081][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.815675][ T7557] bridge_slave_1: entered allmulticast mode
[  476.832006][ T7557] bridge_slave_1: entered promiscuous mode
[  477.061440][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.082172][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.108859][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.749231][ T5776] Bluetooth: hci2: command tx timeout
[  478.768475][ T7604] loop1: detected capacity change from 0 to 2048
[  478.821434][ T7604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  479.004133][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.070605][ T7557] team0: Port device team_slave_0 added
[  479.333152][ T7521] 8021q: adding VLAN 0 to HW filter on device team0
[  479.364869][ T7557] team0: Port device team_slave_1 added
[  479.497512][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.504561][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.577248][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.604504][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.627222][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.707328][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.897976][ T1098] hsr_slave_0: left promiscuous mode
[  481.617335][ T1098] hsr_slave_1: left promiscuous mode
[  481.657484][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.664993][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.695548][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.718127][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.739460][ T1098] bridge_slave_1: left allmulticast mode
[  481.745239][ T1098] bridge_slave_1: left promiscuous mode
[  481.777507][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.818532][ T1098] bridge_slave_0: left allmulticast mode
[  481.824779][ T1098] bridge_slave_0: left promiscuous mode
[  481.837904][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.914175][ T1098] veth1_macvtap: left promiscuous mode
[  481.935209][ T1098] veth0_macvtap: left promiscuous mode
[  481.952083][ T1098] veth1_vlan: left promiscuous mode
[  481.964034][ T1098] veth0_vlan: left promiscuous mode
[  484.241828][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  484.312503][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  484.381582][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.447796][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.397869][ T7651] loop2: detected capacity change from 0 to 2048
[  491.242676][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  491.459578][ T1098] bond0 (unregistering): Released all slaves
[  491.556228][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.721701][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.728963][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.846159][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.853437][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.140547][ T7557] hsr_slave_0: entered promiscuous mode
[  492.172570][ T7557] hsr_slave_1: entered promiscuous mode
[  492.189511][ T7557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  492.216644][ T7557] Cannot create hsr debugfs directory
[  492.250277][ T5126] IPVS: starting estimator thread 0...
[  492.431889][ T7672] IPVS: using max 17 ests per chain, 40800 per kthread
[  495.388582][ T1098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.275736][ T1098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.352823][ T7521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.446063][ T1098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.680267][ T1098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.749695][ T7557] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  497.798783][ T7557] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  497.834848][ T7557] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  497.887928][ T7557] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  498.295166][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.365234][ T7557] 8021q: adding VLAN 0 to HW filter on device team0
[  498.420046][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.427327][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.468298][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.475551][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.647155][ T7521] veth0_vlan: entered promiscuous mode
[  500.709436][ T7715] loop1: detected capacity change from 0 to 16
[  500.744536][ T7715] erofs: Unknown parameter '�*bs'
[  500.776611][ T7521] veth1_vlan: entered promiscuous mode
[  501.167707][ T7719] fuse: Bad value for 'fd'
[  501.703106][ T7521] veth0_macvtap: entered promiscuous mode
[  502.501780][ T7727] loop1: detected capacity change from 0 to 2048
[  503.310071][ T7521] veth1_macvtap: entered promiscuous mode
[  503.339403][ T7727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  503.445375][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.671977][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.707178][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.717072][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.759330][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.783914][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.807546][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.834234][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.944943][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.986015][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.010657][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.037189][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.057191][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  504.077487][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.109433][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.134295][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.281624][ T7521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.318968][ T7521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.344958][ T7521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.377546][ T7521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.705068][ T1098] hsr_slave_0: left promiscuous mode
[  504.712910][ T1098] hsr_slave_1: left promiscuous mode
[  504.747666][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.765304][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.786452][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.808172][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.826479][ T1098] bridge_slave_1: left allmulticast mode
[  504.841967][ T1098] bridge_slave_1: left promiscuous mode
[  504.856061][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.880950][ T1098] bridge_slave_0: left allmulticast mode
[  504.896045][ T1098] bridge_slave_0: left promiscuous mode
[  504.910419][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.007405][ T1098] veth1_macvtap: left promiscuous mode
[  505.022199][ T1098] veth0_macvtap: left promiscuous mode
[  505.028288][ T1098] veth1_vlan: left promiscuous mode
[  505.033734][ T1098] veth0_vlan: left promiscuous mode
[  507.364575][ T7756] sg_write: data in/out 16770878/136 bytes for SCSI command 0x0-- guessing data in;
[  507.364575][ T7756]    program syz.1.310 not setting count and/or reply_len properly
[  507.422199][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  507.475363][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  507.533123][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.583275][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.011139][ T1098] bond0 (unregistering): Released all slaves
[  508.232901][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.271399][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.374443][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  508.381740][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  508.432237][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.467307][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.716297][ T7557] veth0_vlan: entered promiscuous mode
[  508.785012][ T7557] veth1_vlan: entered promiscuous mode
[  508.932603][ T7557] veth0_macvtap: entered promiscuous mode
[  510.530072][   T28] audit: type=1326 audit(1784188956.662:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.6.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18e3d9de59 code=0x0
[  510.580853][ T7557] veth1_macvtap: entered promiscuous mode
[  511.193157][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.257281][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.285220][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.328513][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.356691][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.382318][ T7791] loop1: detected capacity change from 0 to 16
[  511.388681][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.409330][ T7791] erofs: Unknown parameter '�*bs'
[  511.429220][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.445648][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.477310][ T7646] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  511.487836][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.512669][ T7791] loop1: detected capacity change from 0 to 2048
[  511.527280][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.547636][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.577507][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.597178][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.668531][ T7791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.684666][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.763356][ T7799] fuse: Bad value for 'fd'
[  512.063462][ T7557] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.081070][ T7557] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.099949][ T7557] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.109598][ T7557] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.357789][ T7788] loop6: detected capacity change from 0 to 2048
[  514.058423][ T7788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  514.193645][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.368584][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.376472][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.531670][ T7521] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.405224][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.459331][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.555251][ T7823] option changes via remount are deprecated (pid=7820 comm=syz.7.286)
[  523.523895][ T7859] loop2: detected capacity change from 0 to 2048
[  524.309294][ T7859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  524.439427][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.636502][ T7864] loop1: detected capacity change from 0 to 16
[  524.682055][ T7864] erofs: Unknown parameter '�*bs'
[  525.044306][ T7869] fuse: Bad value for 'fd'
[  525.958889][   T28] audit: type=1326 audit(1784188973.152:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e259de59 code=0x7ffc0000
[  526.025790][   T28] audit: type=1326 audit(1784188973.152:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e259de59 code=0x7ffc0000
[  527.400711][ T7883] option changes via remount are deprecated (pid=7882 comm=syz.6.330)
[  527.537287][   T28] audit: type=1326 audit(1784188974.722:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f68e259de59 code=0x7ffc0000
[  527.657205][   T28] audit: type=1326 audit(1784188974.722:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e259de59 code=0x7ffc0000
[  527.785996][   T28] audit: type=1326 audit(1784188974.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e259de59 code=0x7ffc0000
[  529.309241][ T7909] loop7: detected capacity change from 0 to 16
[  530.122782][ T7910] loop1: detected capacity change from 0 to 2048
[  530.896189][ T7909] erofs: Unknown parameter '�*bs'
[  530.937789][ T7910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  531.246095][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.840410][ T7646] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  531.872904][ T7909] loop7: detected capacity change from 0 to 2048
[  531.985557][ T7909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.077690][ T7557] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  533.162680][ T7557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.163245][ T7938] capability: warning: `syz.7.339' uses 32-bit capabilities (legacy support in use)
[  539.135559][ T7966] loop1: detected capacity change from 0 to 2048
[  539.909128][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  540.138398][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.168118][ T7977] loop7: detected capacity change from 0 to 16
[  541.198178][ T7977] erofs: Unknown parameter '�*bs'
[  541.820430][ T7977] loop7: detected capacity change from 0 to 2048
[  541.895414][ T7977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.736285][ T7557] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  544.644502][ T7557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.464570][ T8007] trusted_key: encrypted_key: insufficient parameters specified
[  555.188792][ T8046] loop2: detected capacity change from 0 to 16
[  555.196226][ T8046] erofs: Unknown parameter '�*bs'
[  560.774002][ T8069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.362'.
[  560.783698][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'.
[  570.386955][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  570.393424][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  587.573355][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  597.552110][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  621.307522][ T7747] IPVS: starting estimator thread 0...
[  622.797380][ T8456] netlink: 56 bytes leftover after parsing attributes in process `syz.7.439'.
[  622.806422][ T8456] netlink: 40 bytes leftover after parsing attributes in process `syz.7.439'.
[  623.167194][ T8457] IPVS: using max 17 ests per chain, 40800 per kthread
[  628.527289][ T7642] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  628.753993][ T7642] usb 8-1: Using ep0 maxpacket: 8
[  628.806002][ T7642] usb 8-1: config 0 has an invalid interface number: 186 but max is 0
[  628.821511][ T7642] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.888463][ T7642] usb 8-1: config 0 has no interface number 0
[  628.895563][ T7642] usb 8-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  628.980511][ T7642] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  629.023095][ T7642] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  629.047846][ T7642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.055925][ T7642] usb 8-1: Product: syz
[  629.102262][ T7642] usb 8-1: Manufacturer: syz
[  629.127118][ T7642] usb 8-1: SerialNumber: syz
[  629.143535][ T7642] usb 8-1: config 0 descriptor??
[  629.182254][ T7642] iowarrior 8-1:0.186: no interrupt-in endpoint found
[  629.398989][   T27] usb 8-1: USB disconnect, device number 2
[  630.458255][   T56] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  630.699328][   T56] usb 8-1: Using ep0 maxpacket: 32
[  630.707230][   T56] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.730220][   T56] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.754851][   T56] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  630.764796][   T56] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  630.790116][   T56] usb 8-1: Product: syz
[  630.794382][   T56] usb 8-1: Manufacturer: syz
[  630.891191][   T56] hub 8-1:4.0: USB hub found
[  631.071496][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  631.088959][   T56] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  631.154440][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  631.163731][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  631.187341][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  631.195278][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  631.214374][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  631.255316][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  631.329833][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  631.428620][   T23] usb 8-1: USB disconnect, device number 3
[  633.328299][ T5776] Bluetooth: hci4: command tx timeout
[  635.408042][ T5776] Bluetooth: hci4: command tx timeout
[  636.366047][  T138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.727470][   T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  636.936537][  T138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.950047][   T23] usb 7-1: Using ep0 maxpacket: 32
[  636.978737][   T23] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.027403][   T23] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  637.067325][   T23] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  637.095594][   T23] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  637.121944][   T23] usb 7-1: Product: syz
[  637.156700][   T23] usb 7-1: Manufacturer: syz
[  637.180976][   T23] hub 7-1:4.0: USB hub found
[  639.370751][ T5776] Bluetooth: hci4: command tx timeout
[  639.491865][  T138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.653661][ T8521] chnl_net:caif_netlink_parms(): no params data found
[  639.817249][   T23] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  639.924059][   T23] usb 7-1: USB disconnect, device number 2
[  640.031894][  T138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.426681][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.479700][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.500887][ T8521] bridge_slave_0: entered allmulticast mode
[  640.536696][ T8521] bridge_slave_0: entered promiscuous mode
[  640.608152][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.615388][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.668468][ T8521] bridge_slave_1: entered allmulticast mode
[  640.697489][ T8521] bridge_slave_1: entered promiscuous mode
[  640.861330][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.934739][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.161371][ T8521] team0: Port device team_slave_0 added
[  641.199846][ T8521] team0: Port device team_slave_1 added
[  641.670036][ T5776] Bluetooth: hci4: command tx timeout
[  641.997279][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.004306][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.127937][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.369433][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.376496][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.475907][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.644322][ T8521] hsr_slave_0: entered promiscuous mode
[  643.793331][ T8521] hsr_slave_1: entered promiscuous mode
[  643.851708][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.899659][ T8521] Cannot create hsr debugfs directory
[  649.859281][ T8521] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  649.997185][ T8521] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  650.032662][ T8521] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  650.331721][ T8521] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  655.310723][ T8687] xt_bpf: check failed: parse error
[  657.879440][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.977009][ T8521] 8021q: adding VLAN 0 to HW filter on device team0
[  658.227373][  T138] hsr_slave_0: left promiscuous mode
[  658.372818][  T138] hsr_slave_1: left promiscuous mode
[  658.480768][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.513755][  T138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.552601][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.567413][  T138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.578741][  T138] bridge_slave_1: left allmulticast mode
[  658.584454][  T138] bridge_slave_1: left promiscuous mode
[  658.601181][  T138] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.650756][  T138] bridge_slave_0: left allmulticast mode
[  658.656491][  T138] bridge_slave_0: left promiscuous mode
[  658.682973][  T138] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.827640][  T138] veth1_macvtap: left promiscuous mode
[  658.833277][  T138] veth0_macvtap: left promiscuous mode
[  658.857900][  T138] veth1_vlan: left promiscuous mode
[  658.863333][  T138] veth0_vlan: left promiscuous mode
[  659.347218][    T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  660.337746][    T8] usb 8-1: Using ep0 maxpacket: 32
[  660.540187][    T8] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.670638][    T8] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.879113][    T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  660.894496][    T8] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  660.913225][    T8] usb 8-1: Product: syz
[  660.923638][    T8] usb 8-1: Manufacturer: syz
[  660.954436][    T8] hub 8-1:4.0: USB hub found
[  661.163879][    T8] hub 8-1:4.0: config failed, can't read hub descriptor (err -22)
[  661.249755][    T8] usb 8-1: USB disconnect, device number 4
[  666.280977][  T138] team0 (unregistering): Port device team_slave_1 removed
[  667.388324][  T138] team0 (unregistering): Port device team_slave_0 removed
[  667.608558][  T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.998409][  T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  669.980575][ T8757] overlayfs: failed to resolve './file1/file0': -2
[  672.330801][  T138] bond0 (unregistering): Released all slaves
[  672.536942][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.544204][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  672.585844][ T8754] gtp0: entered promiscuous mode
[  673.575555][ T8521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  673.600493][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  673.687466][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.694696][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.866927][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.143411][ T8804] xt_bpf: check failed: parse error
[  679.026602][ T8521] veth0_vlan: entered promiscuous mode
[  679.089666][ T8521] veth1_vlan: entered promiscuous mode
[  679.190962][ T8521] veth0_macvtap: entered promiscuous mode
[  679.225292][ T8521] veth1_macvtap: entered promiscuous mode
[  679.312399][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.356003][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.394155][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.445816][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.477294][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.531222][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.558317][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  679.613920][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.663739][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.715231][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.729696][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.755440][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.775126][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.808555][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.846457][ T8521] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.867508][ T8521] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.876326][ T8521] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.897156][   T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  679.918032][ T8521] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.237212][   T56] usb 2-1: Using ep0 maxpacket: 16
[  681.262770][   T56] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  681.291456][   T56] usb 2-1: config 0 has no interface number 0
[  681.307500][ T7643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.315400][ T7643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.320859][   T56] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  681.379074][   T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.418263][   T56] usb 2-1: Product: syz
[  681.433175][   T56] usb 2-1: Manufacturer: syz
[  681.445759][ T7643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.453365][   T56] usb 2-1: SerialNumber: syz
[  681.472536][ T7643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.489968][   T56] usb 2-1: config 0 descriptor??
[  681.499033][   T56] hub 2-1:0.132: bad descriptor, ignoring hub
[  681.510647][   T56] hub: probe of 2-1:0.132 failed with error -5
[  681.521841][   T56] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5
[  682.081915][ T8863] xt_bpf: check failed: parse error
[  686.347416][ T8867] netlink: 56 bytes leftover after parsing attributes in process `syz.8.448'.
[  686.356406][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.8.448'.
[  687.726514][ T8887] gtp0: entered promiscuous mode
[  692.847761][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  692.858221][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  696.727378][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.7.515'.
[  696.736334][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.7.515'.
[  696.896904][   T27] usb 2-1: USB disconnect, device number 2
[  701.029164][ T9008] netlink: 56 bytes leftover after parsing attributes in process `syz.1.530'.
[  701.038181][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'.
[  703.700892][ T5126] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  703.908309][ T5126] usb 2-1: Using ep0 maxpacket: 8
[  703.934827][ T5126] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  703.957111][ T5126] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  703.991866][ T5126] usb 2-1: config 0 has no interface number 0
[  704.025019][ T5126] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10
[  704.061934][ T5126] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024
[  704.093967][ T5126] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.351680][ T9048] netlink: 56 bytes leftover after parsing attributes in process `syz.8.541'.
[  704.360727][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.8.541'.
[  705.270942][ T5126] usb 2-1: config 0 interface 52 has no altsetting 0
[  705.718929][ T7765] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  705.768053][ T5126] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  705.796888][ T5126] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  705.833270][ T5126] usb 2-1: config 0 descriptor??
[  705.850122][ T5126] usb 2-1: can't set config #0, error -71
[  705.889183][ T5126] usb 2-1: USB disconnect, device number 3
[  705.928104][ T7765] usb 8-1: Using ep0 maxpacket: 32
[  705.938800][ T7765] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.968299][ T7765] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.237441][ T7765] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  706.246567][ T7765] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  706.327645][ T7765] usb 8-1: Product: syz
[  706.354061][ T7765] usb 8-1: Manufacturer: syz
[  707.029935][ T7765] hub 8-1:4.0: USB hub found
[  707.217374][ T7765] hub 8-1:4.0: config failed, can't read hub descriptor (err -22)
[  708.314488][ T7765] usb 8-1: USB disconnect, device number 5
[  708.876064][ T9078] netlink: 56 bytes leftover after parsing attributes in process `syz.7.551'.
[  708.885064][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.7.551'.
[  709.818595][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.953522][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.983541][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.248609][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.257663][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.777271][ T5816] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  711.979645][ T5816] usb 7-1: Using ep0 maxpacket: 32
[  712.020829][ T5816] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.052576][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.056537][ T5816] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.102227][ T5816] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  712.124038][ T5816] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  712.147310][ T5816] usb 7-1: Product: syz
[  712.157266][ T5816] usb 7-1: Manufacturer: syz
[  712.185938][ T5816] hub 7-1:4.0: USB hub found
[  712.407870][ T5816] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  712.527480][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.648337][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.777784][   T23] usb 7-1: USB disconnect, device number 3
[  714.287635][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.347361][ T5816] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  714.537983][ T5816] usb 9-1: Using ep0 maxpacket: 16
[  714.617435][ T5816] usb 9-1: unable to get BOS descriptor or descriptor too short
[  714.645662][ T5816] usb 9-1: no configurations
[  714.651790][ T5816] usb 9-1: can't read configurations, error -22
[  714.688039][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.022267][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.622550][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.6.563'.
[  716.632776][ T9169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.563'.
[  717.522238][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.687725][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.704418][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.128059][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.417149][ T5816] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  720.434107][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.170995][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.187181][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.200317][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.207571][ T5816] usb 7-1: Using ep0 maxpacket: 32
[  722.213853][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.228657][ T5816] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.245506][ T5816] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  722.259592][ T5816] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  722.269502][ T5816] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  722.278013][ T5816] usb 7-1: Product: syz
[  722.282349][ T5816] usb 7-1: Manufacturer: syz
[  722.296395][ T5816] hub 7-1:4.0: USB hub found
[  722.447992][ T5816] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  722.539622][ T5816] usb 7-1: USB disconnect, device number 4
[  723.410543][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.161371][ T9209] netlink: 56 bytes leftover after parsing attributes in process `syz.8.575'.
[  724.170537][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.8.575'.
[  725.148924][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.257165][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.220616][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.630683][ T9232] loop1: detected capacity change from 0 to 16
[  726.648877][ T9232] erofs: Unknown parameter '�*bs'
[  726.705399][ T9220] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  726.727160][ T9232] loop1: detected capacity change from 0 to 2048
[  726.828209][ T9232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  727.250324][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.118447][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.166753][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.282115][ T5774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  729.440511][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.416773][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.728189][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.817776][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.835142][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.206751][ T9269] netlink: 56 bytes leftover after parsing attributes in process `syz.7.586'.
[  733.216851][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.7.586'.
[  734.117734][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.759432][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.7.588'.
[  734.824397][ T9276] vlan2: entered promiscuous mode
[  734.847333][ T9276] bridge0: entered promiscuous mode
[  735.984496][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.608298][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.618092][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.626460][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.584461][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.858166][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.870831][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.885111][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.897612][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.907353][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.607629][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.139259][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.148025][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.647569][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.687953][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.727910][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.739642][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.761492][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.777598][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.287238][ T9353] netlink: 56 bytes leftover after parsing attributes in process `syz.1.596'.
[  750.296240][ T9353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.596'.
[  750.511472][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.889581][ T9358] tc_dump_action: action bad kind
[  751.840634][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.858614][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.927346][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.977197][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.986972][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  754.993425][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  755.018183][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.343809][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.361557][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.007776][ T9380] Bluetooth: hci4: command 0x0406 tx timeout
[  757.533482][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.722362][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.749863][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.799130][ T9402] netlink: 56 bytes leftover after parsing attributes in process `syz.6.611'.
[  759.808570][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.820774][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.611'.
[  762.011906][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.020098][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.097708][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.308780][ T5816] IPVS: starting estimator thread 0...
[  763.407168][ T9435] IPVS: using max 17 ests per chain, 40800 per kthread
[  764.143961][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.167354][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.195870][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.175088][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.207846][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.697395][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.730766][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.156809][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.440392][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.727475][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.979209][   T23] IPVS: starting estimator thread 0...
[  772.177301][ T9512] IPVS: using max 18 ests per chain, 43200 per kthread
[  772.470466][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.918623][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.514938][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.523119][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.531586][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.909422][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.917141][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.927605][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.008071][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.764199][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.967919][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.767820][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.588608][ T9589] loop8: detected capacity change from 0 to 16
[  783.604896][ T9589] erofs: Unknown parameter '�*bs'
[  783.688398][ T9589] loop8: detected capacity change from 0 to 2048
[  783.785638][ T9589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  784.218489][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.491456][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.796077][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.806385][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.092986][ T8521] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  786.262917][ T8521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.358693][ T5816] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  786.569716][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  786.588192][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.622298][ T5816] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[  786.652072][ T5816] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  787.465745][ T5816] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  787.519611][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  788.977284][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.987695][ T5816] usb 7-1: Product: syz
[  789.092362][ T5816] usb 7-1: Manufacturer: syz
[  789.262565][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.307096][ T5816] usb 7-1: SerialNumber: syz
[  789.339736][ T5816] usb 7-1: config 0 descriptor??
[  789.577246][ T5816] usb 7-1: can't set config #0, error -71
[  789.597558][ T5816] usb 7-1: USB disconnect, device number 5
[  791.391401][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.407849][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.417517][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.727272][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.766326][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.774539][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.707148][   T56] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  796.778444][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.917435][   T56] usb 7-1: Using ep0 maxpacket: 32
[  796.929744][   T56] usb 7-1: unable to get BOS descriptor or descriptor too short
[  796.939977][   T56] usb 7-1: config 1 interface 0 altsetting 220 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  797.141346][   T56] usb 7-1: config 1 interface 0 has no altsetting 0
[  797.183910][   T56] usb 7-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40
[  797.225953][   T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  797.264145][   T56] usb 7-1: Manufacturer: 臃糼蔭Ფ삛뺟倣퀘뉍ϖ젚뛽쀥릙狔穚뾽癲儫ẹۖ詌ₐ㠶
[  797.343893][   T56] usb 7-1: SerialNumber: syz
[  797.878595][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.917623][   T56] usbhid 7-1:1.0: can't add hid device: -71
[  797.942260][   T56] usbhid: probe of 7-1:1.0 failed with error -71
[  797.971027][   T56] usb 7-1: USB disconnect, device number 6
[  798.192418][ T9683] 9pnet_fd: Insufficient options for proto=fd
[  799.019290][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.179882][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.908091][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.550242][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.559319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.649777][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.685227][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.327467][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.391591][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.430853][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.431578][  T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.432367][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.986244][   T27] net_ratelimit: 2 callbacks suppressed
[  805.986348][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.021135][ T9730] 9pnet_fd: Insufficient options for proto=fd
[  806.061662][   T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.075126][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.086828][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.448300][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.773848][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.237297][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.866290][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.8.667'.
[  810.936332][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.591753][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.638578][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.687453][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.696503][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.712755][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.657645][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.122741][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.167956][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.573774][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  815.580371][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  815.592885][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.807298][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.482828][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.8.686'.
[  819.532580][ T5816] net_ratelimit: 1 callbacks suppressed
[  819.532599][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.588943][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.597530][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.606338][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.618521][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.317686][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.367586][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.699394][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.443244][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.447677][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.955183][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.967190][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.975487][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.983868][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.178240][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.8.696'.
[  828.232607][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.367383][ T7747] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  828.597567][ T7747] usb 8-1: Using ep0 maxpacket: 8
[  828.707691][ T7747] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  828.738365][ T7747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  828.772181][ T7747] usb 8-1: config 0 has no interface number 0
[  828.791706][ T7747] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  828.819252][ T7747] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  828.852977][ T7747] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  828.903654][ T7747] usb 8-1: config 0 interface 52 has no altsetting 0
[  828.924605][ T7747] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  828.976476][ T7747] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  828.997944][ T7747] usb 8-1: Manufacturer: syz
[  829.007625][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.021786][ T7747] usb 8-1: config 0 descriptor??
[  829.078205][ T7747] usb 8-1: can't set config #0, error -71
[  829.130359][ T7747] usb 8-1: USB disconnect, device number 6
[  829.247841][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.381816][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.459432][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.257926][ T7747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.273669][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.577255][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.410748][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.648063][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.288195][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.378779][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.676996][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.687239][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.966849][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.168518][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.734221][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.751321][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.685665][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.878345][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.697174][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.781545][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.258042][T10033] netlink: 72 bytes leftover after parsing attributes in process `syz.1.721'.
[  849.248081][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.302484][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.317064][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.327544][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.367749][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.431098][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.038381][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.067202][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.077634][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.085939][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.897232][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.927137][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.935412][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.092281][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.143830][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.181013][T10104] 9pnet_fd: Insufficient options for proto=fd
[  859.719079][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.738600][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.747591][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.756291][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.166211][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.105783][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.187381][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.497228][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.505426][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.012795][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.023821][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.105789][  T157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.115826][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.130333][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.361207][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.574031][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.569525][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.089520][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.125773][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.974563][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.138287][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.371405][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.542008][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.550243][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.947717][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.018048][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  877.024456][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  877.167248][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.710207][T10182] loop7: detected capacity change from 0 to 16
[  877.742428][T10182] erofs: Unknown parameter '�*bs'
[  879.490550][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.524448][T10182] loop7: detected capacity change from 0 to 2048
[  879.660516][T10182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.007293][T10192] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  881.644382][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.677727][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.693222][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.558786][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.698472][  T176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.706875][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.902037][ T7557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.901449][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.184753][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.196391][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.967328][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.737564][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.769748][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.616775][T10243] xt_bpf: check failed: parse error
[  895.299947][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.328179][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  895.337776][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.657365][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.667406][ T7765] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  896.877209][ T7765] usb 7-1: Using ep0 maxpacket: 8
[  896.889189][ T7765] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  896.917140][ T7765] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.942418][ T7765] usb 7-1: config 0 has no interface number 0
[  896.962720][ T7765] usb 7-1: config 0 interface 52 has no altsetting 0
[  896.988626][ T7765] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  897.017153][ T7765] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  897.025405][ T7765] usb 7-1: Manufacturer: syz
[  897.058487][ T7765] usb 7-1: config 0 descriptor??
[  897.082011][ T7765] hub 7-1:0.52: bad descriptor, ignoring hub
[  897.107027][ T7765] hub: probe of 7-1:0.52 failed with error -5
[  897.114328][ T9380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  897.126380][ T9380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  897.147059][ T9380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  897.194524][ T9380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  897.202696][ T9380] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  897.211669][ T9380] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  897.314266][ T7765] usb 7-1: Can not set alternate setting to 1, error: -71
[  897.322912][ T7765] synaptics_usb: probe of 7-1:0.52 failed with error -71
[  897.369178][ T7765] usb 7-1: USB disconnect, device number 7
[  897.589846][   T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.732313][   T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.863221][   T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.006117][   T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.683569][ T9380] Bluetooth: hci1: command tx timeout
[  901.727114][ T5776] Bluetooth: hci1: command tx timeout
[  902.616213][T10253] chnl_net:caif_netlink_parms(): no params data found
[  902.914999][ T7765] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  903.148292][ T7765] usb 7-1: Using ep0 maxpacket: 8
[  903.282650][ T7765] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  903.519458][ T7765] usb 7-1: config 0 has no interface number 0
[  903.628261][ T7765] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  903.677338][ T7765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.685408][ T7765] usb 7-1: Product: syz
[  903.767669][ T7765] usb 7-1: Manufacturer: syz
[  903.777443][ T7765] usb 7-1: SerialNumber: syz
[  903.790546][ T7765] usb 7-1: config 0 descriptor??
[  903.800879][ T7765] usb 7-1: selecting invalid altsetting 2
[  903.806714][ T7765] i2c-cp2615: probe of 7-1:0.1 failed with error -22
[  903.814543][ T5776] Bluetooth: hci1: command tx timeout
[  904.040905][T10253] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.071766][T10253] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.088575][T10253] bridge_slave_0: entered allmulticast mode
[  904.096042][T10253] bridge_slave_0: entered promiscuous mode
[  904.593248][  T176] usb 7-1: USB disconnect, device number 8
[  904.866893][T10253] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.876240][T10253] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.885757][T10253] bridge_slave_1: entered allmulticast mode
[  904.893320][T10253] bridge_slave_1: entered promiscuous mode
[  906.395524][ T5776] Bluetooth: hci1: command tx timeout
[  907.773745][T10253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.829388][T10253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.114209][T10253] team0: Port device team_slave_0 added
[  910.160335][T10253] team0: Port device team_slave_1 added
[  910.393906][T10253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.430520][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.197242][T10253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.333017][T10253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.354948][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.431607][T10253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.696320][T10253] hsr_slave_0: entered promiscuous mode
[  912.748754][T10253] hsr_slave_1: entered promiscuous mode
[  912.787327][T10253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  912.795045][T10253] Cannot create hsr debugfs directory
[  916.587171][   T36] hsr_slave_0: left promiscuous mode
[  916.740195][   T36] hsr_slave_1: left promiscuous mode
[  916.807357][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  916.842239][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  917.519302][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.587174][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.676373][   T36] bridge_slave_1: left allmulticast mode
[  917.682169][   T36] bridge_slave_1: left promiscuous mode
[  917.688035][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.727906][   T36] bridge_slave_0: left allmulticast mode
[  917.733634][   T36] bridge_slave_0: left promiscuous mode
[  917.766648][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.864566][   T36] veth1_macvtap: left promiscuous mode
[  917.875596][   T36] veth0_macvtap: left promiscuous mode
[  917.894862][   T36] veth1_vlan: left promiscuous mode
[  917.912078][   T36] veth0_vlan: left promiscuous mode
[  921.298979][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  926.735312][T10404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.794'.
[  926.746250][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.794'.
[  928.254034][   T36] team0 (unregistering): Port device team_slave_1 removed
[  928.406855][   T36] team0 (unregistering): Port device team_slave_0 removed
[  928.549171][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  928.726870][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  932.168564][   T36] bond0 (unregistering): Released all slaves
[  934.321070][T10418] tc_dump_action: action bad kind
[  934.955531][T10431] xt_bpf: check failed: parse error
[  938.830712][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  938.837235][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  939.129030][T10253] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  939.191509][T10253] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  939.278074][T10253] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  939.337916][T10253] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  939.701509][T10253] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.781717][T10253] 8021q: adding VLAN 0 to HW filter on device team0
[  939.836191][   T36] IPVS: stop unused estimator thread 0...
[  939.869236][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.876429][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.960684][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.967944][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  940.121733][T10253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  940.150758][T10253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  941.189864][T10472] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'.
[  941.200827][T10472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'.
[  943.919256][T10253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  944.962475][T10253] veth0_vlan: entered promiscuous mode
[  945.024181][T10253] veth1_vlan: entered promiscuous mode
[  945.161867][T10253] veth0_macvtap: entered promiscuous mode
[  945.224175][T10253] veth1_macvtap: entered promiscuous mode
[  945.304763][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  945.350693][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.411652][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  945.447060][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.468116][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  945.495998][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.525798][T10253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  945.591099][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  945.637100][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.687044][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  945.727950][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  945.757347][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  946.018078][T10516] binder: 10515:10516 ioctl c0306201 0 returned -14
[  946.041989][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  946.823084][T10253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  946.835798][T10253] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.844897][T10253] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.854205][T10253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.863014][T10253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  947.068303][T10508] tmpfs: Bad value for 'mpol'
[  947.738733][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  947.797684][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  947.825967][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  947.857176][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  959.146735][ T7765] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  960.420285][ T7765] usb 2-1: Using ep0 maxpacket: 8
[  960.440703][ T7765] usb 2-1: config 7 has an invalid interface number: 199 but max is 0
[  960.457081][ T7765] usb 2-1: config 7 has no interface number 0
[  960.473558][ T7765] usb 2-1: config 7 interface 199 has no altsetting 0
[  960.494202][ T7765] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=2c.f3
[  960.507509][ T7765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.536252][ T7765] usb 2-1: Product: syz
[  960.553960][ T7765] usb 2-1: Manufacturer: syz
[  960.565413][ T7765] usb 2-1: SerialNumber: syz
[  960.821942][ T7765] pegasus 2-1:7.199: Missing or invalid endpoints
[  960.881256][ T7765] usb 2-1: USB disconnect, device number 4
[  967.737707][T10658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.845'.
[  975.197147][ T5126] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  975.387169][ T5126] usb 8-1: Using ep0 maxpacket: 32
[  975.418925][ T5126] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.443204][ T5126] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.468997][ T5126] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  975.487170][ T5126] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  975.512284][ T5126] usb 8-1: Product: syz
[  975.516535][ T5126] usb 8-1: Manufacturer: syz
[  975.587823][ T5126] hub 8-1:4.0: USB hub found
[  975.798093][ T5126] hub 8-1:4.0: config failed, can't read hub descriptor (err -22)
[  975.875135][ T5126] usb 8-1: USB disconnect, device number 7
[  976.618542][T10726] syz.6.853: attempt to access beyond end of device
[  976.618542][T10726] loop13: rw=2048, sector=2, nr_sectors = 1 limit=0
[  976.632493][T10726] hfsplus: unable to find HFS+ superblock
[  981.973232][T10765] trusted_key: encrypted_key: insufficient parameters specified
[  986.594994][T10801] syz.9.868: attempt to access beyond end of device
[  986.594994][T10801] loop19: rw=2048, sector=2, nr_sectors = 1 limit=0
[  986.608984][T10801] hfsplus: unable to find HFS+ superblock
[ 1000.347552][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1000.353928][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.997895][  T176] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1001.227010][  T176] usb 2-1: Using ep0 maxpacket: 32
[ 1001.896877][  T176] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1001.918213][  T176] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1002.051802][  T176] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1002.091194][  T176] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1002.136977][  T176] usb 2-1: Product: syz
[ 1002.141233][  T176] usb 2-1: Manufacturer: syz
[ 1002.208407][  T176] hub 2-1:4.0: USB hub found
[ 1002.470657][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1002.487262][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1002.507328][  T176] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1004.379266][  T176] usb 2-1: USB disconnect, device number 5
[ 1004.825355][T10923] 9pnet_fd: Insufficient options for proto=fd
[ 1005.233051][T10929] netlink: 'syz.6.887': attribute type 1 has an invalid length.
[ 1005.240955][T10929] netlink: 'syz.6.887': attribute type 2 has an invalid length.
[ 1014.795909][T10987] 9pnet_fd: Insufficient options for proto=fd
[ 1015.045184][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.903'.
[ 1015.523405][T10998] warning: `syz.7.904' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1016.186180][   T56] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1017.427094][   T56] usb 10-1: Using ep0 maxpacket: 32
[ 1018.433913][   T56] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1018.445245][   T56] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1018.677128][   T56] usb 10-1: string descriptor 0 read error: -71
[ 1018.683544][   T56] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1018.729966][   T56] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1018.797349][   T56] usb 10-1: can't set config #4, error -71
[ 1018.855776][   T56] usb 10-1: USB disconnect, device number 2
[ 1020.689347][T11027] xt_bpf: check failed: parse error
[ 1023.647453][ T5776] Bluetooth: hci1: command 0x0406 tx timeout
[ 1027.207553][   T56] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1027.427043][   T56] usb 2-1: Using ep0 maxpacket: 32
[ 1027.450603][   T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.467017][   T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1029.216660][   T56] usb 2-1: string descriptor 0 read error: -71
[ 1029.238366][   T56] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1029.286987][   T56] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1029.357319][   T56] usb 2-1: can't set config #4, error -71
[ 1029.394397][   T56] usb 2-1: USB disconnect, device number 6
[ 1029.632716][T11080] loop9: detected capacity change from 0 to 16
[ 1029.673407][T11080] erofs: Unknown parameter '�*bs'
[ 1036.547116][ T9678] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1036.737272][ T9678] usb 7-1: Using ep0 maxpacket: 32
[ 1036.745471][ T9678] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1036.787317][ T9678] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1036.816521][ T9678] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1036.856693][ T9678] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1036.896999][ T9678] usb 7-1: Product: syz
[ 1036.901351][ T9678] usb 7-1: Manufacturer: syz
[ 1036.932511][ T9678] hub 7-1:4.0: USB hub found
[ 1037.366051][ T9678] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1037.477993][ T9678] usb 7-1: USB disconnect, device number 9
[ 1037.577407][T11141] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in;
[ 1037.577407][T11141]    program syz.7.926 not setting count and/or reply_len properly
[ 1038.751623][T11150] 9pnet_fd: Insufficient options for proto=fd
[ 1039.432031][T11160] xt_bpf: check failed: parse error
[ 1046.328657][T11187] netlink: 'syz.1.930': attribute type 2 has an invalid length.
[ 1046.583868][T11189] ------------[ cut here ]------------
[ 1046.589736][T11189] kernel BUG at net/phonet/socket.c:213!
[ 1046.686803][T11191] ------------[ cut here ]------------
[ 1046.692906][T11191] kernel BUG at net/phonet/socket.c:213!
[ 1046.700688][T11189] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1046.707060][T11189] CPU: 0 PID: 11189 Comm: syz.1.930 Not tainted syzkaller #0
[ 1046.714508][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1046.724604][T11189] RIP: 0010:pn_socket_sendmsg+0x235/0x240
[ 1046.730575][T11189] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41
[ 1046.750289][T11189] RSP: 0018:ffffc900044b7c20 EFLAGS: 00010283
[ 1046.756491][T11189] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000
[ 1046.764510][T11189] RDX: ffffc9000d97e000 RSI: 0000000000000a19 RDI: 0000000000000a1a
[ 1046.772518][T11189] RBP: ffffc900044b7cd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
[ 1046.780516][T11189] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000
[ 1046.788541][T11189] R13: ffff888076e07800 R14: ffff888024d48c80 R15: 1ffff92000896f88
[ 1046.796583][T11189] FS:  00007f68e343d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1046.805557][T11189] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1046.812167][T11189] CR2: 00007fc793b86fc0 CR3: 000000005e4ef000 CR4: 00000000003506f0
[ 1046.820178][T11189] Call Trace:
[ 1046.823587][T11189]  <TASK>
[ 1046.826603][T11189]  ? pn_socket_ioctl+0x350/0x350
[ 1046.831736][T11189]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1046.837086][T11189]  ? security_socket_sendmsg+0x80/0xa0
[ 1046.842607][T11189]  __sys_sendto+0x4a9/0x6b0
[ 1046.847272][T11189]  ? __ia32_sys_getpeername+0x90/0x90
[ 1046.852691][T11189]  ? __lock_acquire+0x7d80/0x7d80
[ 1046.857773][T11189]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1046.863808][T11189]  ? lock_chain_count+0x20/0x20
[ 1046.868682][T11189]  ? lock_chain_count+0x20/0x20
[ 1046.873568][T11189]  __x64_sys_sendto+0xde/0xf0
[ 1046.878300][T11189]  do_syscall_64+0x55/0xb0
[ 1046.882868][T11189]  ? clear_bhb_loop+0x40/0x90
[ 1046.887621][T11189]  ? clear_bhb_loop+0x40/0x90
[ 1046.892321][T11189]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1046.898290][T11189] RIP: 0033:0x7f68e255e68e
[ 1046.902725][T11189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1046.922369][T11189] RSP: 002b:00007f68e343be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1046.930837][T11189] RAX: ffffffffffffffda RBX: 00007f68e343d6c0 RCX: 00007f68e255e68e
[ 1046.938850][T11189] RDX: 0000000000000020 RSI: 00007f68e343c000 RDI: 0000000000000007
[ 1046.946855][T11189] RBP: 0000000000000000 R08: 00007f68e343bf04 R09: 000000000000000c
[ 1046.954882][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 1046.962874][T11189] R13: 00007f68e343bf58 R14: 00007f68e343c000 R15: 0000000000000000
[ 1046.970881][T11189]  </TASK>
[ 1046.973930][T11189] Modules linked in:
[ 1046.987026][T11189] ---[ end trace 0000000000000000 ]---
[ 1046.992595][T11189] RIP: 0010:pn_socket_sendmsg+0x235/0x240
[ 1047.014305][T11191] invalid opcode: 0000 [#2] PREEMPT SMP KASAN
[ 1047.020460][T11191] CPU: 0 PID: 11191 Comm: syz.1.930 Tainted: G      D            syzkaller #0
[ 1047.029351][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1047.039447][T11191] RIP: 0010:pn_socket_connect+0xb98/0xba0
[ 1047.045244][T11191] Code: 48 8b 7c 24 10 e9 6b fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 1a fd ff ff 4c 89 e7 e8 92 5c 1e f8 e9 0d fd ff ff e8 08 e5 c5 f7 <0f> 0b 66 0f 1f 44 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55
[ 1047.064899][T11191] RSP: 0018:ffffc900044efc40 EFLAGS: 00010287
[ 1047.071043][T11191] RAX: ffffffff89c10068 RBX: 0000000000000000 RCX: 0000000000080000
[ 1047.079045][T11191] RDX: ffffc9000e982000 RSI: 000000000000003b RDI: 000000000000003c
[ 1047.087037][T11191] RBP: ffffc900044efdb0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
[ 1047.095041][T11191] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff888076e07818
[ 1047.103030][T11191] R13: 1ffff9200089df98 R14: dffffc0000000000 R15: 1ffff1100edc0f03
[ 1047.111038][T11191] FS:  00007f68e341c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1047.119992][T11191] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1047.126591][T11191] CR2: 00007ffc6b4f2b88 CR3: 000000005e4ef000 CR4: 00000000003506f0
[ 1047.134586][T11191] Call Trace:
[ 1047.137886][T11191]  <TASK>
[ 1047.140844][T11191]  ? pn_socket_sendmsg+0x240/0x240
[ 1047.145989][T11191]  ? aa_af_perm+0x330/0x330
[ 1047.150555][T11191]  ? tomoyo_socket_connect_permission+0x19a/0x270
[ 1047.156996][T11191]  ? __might_fault+0xaa/0x120
[ 1047.161710][T11191]  ? bpf_lsm_socket_connect+0x9/0x10
[ 1047.167019][T11191]  ? security_socket_connect+0x80/0xa0
[ 1047.172519][T11191]  __sys_connect+0x3da/0x470
[ 1047.177145][T11191]  ? __sys_connect_file+0x170/0x170
[ 1047.182386][T11191]  __x64_sys_connect+0x7a/0x90
[ 1047.187176][T11191]  do_syscall_64+0x55/0xb0
[ 1047.191621][T11191]  ? clear_bhb_loop+0x40/0x90
[ 1047.196321][T11191]  ? clear_bhb_loop+0x40/0x90
[ 1047.201012][T11191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1047.206934][T11191] RIP: 0033:0x7f68e259de59
[ 1047.211364][T11191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.230989][T11191] RSP: 002b:00007f68e341c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1047.239435][T11191] RAX: ffffffffffffffda RBX: 00007f68e2826180 RCX: 00007f68e259de59
[ 1047.247449][T11191] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007
[ 1047.255437][T11191] RBP: 00007f68e2633e6f R08: 0000000000000000 R09: 0000000000000000
[ 1047.263493][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.271484][T11191] R13: 00007f68e2826218 R14: 00007f68e2826180 R15: 00007fffdb8564a8
[ 1047.279485][T11191]  </TASK>
[ 1047.282517][T11191] Modules linked in:
[ 1047.349024][T11191] ---[ end trace 0000000000000000 ]---
[ 1047.361845][T11189] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41
[ 1047.405797][ T5816] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1047.430240][T11191] RIP: 0010:pn_socket_sendmsg+0x235/0x240
[ 1047.436277][T11191] Code: 41 5f 5d c3 e8 9c d2 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 68 1e f8 e9 02 ff ff ff e8 ab f0 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41
[ 1047.471787][T11191] RSP: 0018:ffffc900044b7c20 EFLAGS: 00010283
[ 1047.503119][T11191] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000
[ 1047.516154][T11189] RSP: 0018:ffffc900044b7c20 EFLAGS: 00010283
[ 1047.536465][T11191] RDX: ffffc9000d97e000 RSI: 0000000000000a19 RDI: 0000000000000a1a
[ 1047.566877][T11189] RAX: ffffffff89c0f4c5 RBX: 0000000000000000 RCX: 0000000000080000
[ 1047.576651][T11191] RBP: ffffc900044b7cd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
[ 1047.597733][ T5816] usb 8-1: Using ep0 maxpacket: 8
[ 1047.603080][T11189] RDX: ffffc9000d97e000 RSI: 0000000000000a19 RDI: 0000000000000a1a
[ 1047.617366][ T5816] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1047.631647][ T5816] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1047.640542][ T5816] usb 8-1: can't read configurations, error -71
[ 1047.655631][T11191] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000
[ 1047.672845][T11189] RBP: ffffc900044b7cd0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65
[ 1047.693364][T11191] R13: ffff888076e07800 R14: ffff888024d48c80 R15: 1ffff92000896f88
[ 1047.708068][T11189] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000
[ 1047.736068][T11191] FS:  00007f68e341c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1047.779514][T11189] R13: ffff888076e07800 R14: ffff888024d48c80 R15: 1ffff92000896f88
[ 1048.442645][T11191] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1048.515818][T11189] FS:  00007f68e343d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1048.525196][T11191] CR2: 0000001b2dd0aff8 CR3: 000000005e4ef000 CR4: 00000000003506f0
[ 1048.535834][T11189] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1048.542795][T11189] CR2: 00007f18e3d86fc0 CR3: 000000005e4ef000 CR4: 00000000003506e0
[ 1048.555004][T11189] Kernel panic - not syncing: Fatal exception
[ 1049.690486][T11189] Shutting down cpus with NMI
[ 1049.695824][T11189] Kernel Offset: disabled
[ 1049.700174][T11189] Rebooting in 86400 seconds..