last executing test programs:

10.97036491s ago: executing program 1 (id=7):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
capset(0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20000)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000140)=ANY=[])
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x40002, 0x0, 0x0})
socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280070003dd010000000500030001000000080002400000000108000140000000160900010073797a30000000000900020073797a3200004000050007", @ANYRESHEX=r3], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac1414aa08000a00", @ANYRES32=0x0, @ANYBLOB="08f18bdc71513c0411add1ca67e95dc0c5a41c23ef813ca0d082c1f5540feff1ee3f742e7c161a4d8ab081cc1170153d443801a1e1fb9b76eabb94c56dde21e7e721b445f0944dbce031d73afe401e743969df213ab004a3eb1d57a69ad98fa05648dfb18976bc6877c3127dd79f7acf48548fb51e81945ccf95e2e8e4c9f8b87de04c0dff6b3ee2c9cd6fd825c03de7de4de91c335d79841c5ea4230369793da65aa900a032e6890214f0ac50fa66e25a7f2c582579414ac0c6019d08562ee3a82d6645959a931b0db39df4b4958f38"], 0x44}}, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))

10.740624605s ago: executing program 3 (id=9):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa1cf80800471f00300067000009019078ac1414bbac1414bb070706d2c6975826aafce961000002000d0030490003009c00000229"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_io_uring_setup(0x3678, &(0x7f000000a9c0)={0x0, 0xfffffffd, 0x100, 0x0, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES2(r5, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x800})
recvfrom(r7, 0x0, 0x0, 0x1, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000029000000040000000001000000000000050200000002a54714000000000000002900000034000000000000000000000070000000000000002900000037000000000b00000000000001040000000005020000050200000728000000000800000000000000000000000000000000000000000000000000000000000000000000000104000000000106000000000000c910fe8000000000000000000000000000aa180000000000000029"], 0xd8}}], 0x1, 0x40088d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x4)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)

10.107051237s ago: executing program 2 (id=3):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000380)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.011495502s ago: executing program 1 (id=11):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0xb4, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000fb01000000800000006a7371afa6e83828c8062b3c1ba68d016acb7c703e382eebb75f0b88238cf8cd64b0122bf7e9f5ec01e0504cf57e7f5351c17e5bb4a4", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth1_to_bridge\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5e}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008894}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=<r5=>r4, 0x15, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)}, 0x40)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
listen(0xffffffffffffffff, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r7, &(0x7f00000001c0)="9252", 0x2)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socket$inet6(0xa, 0x4, 0xc)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1205}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x4, 0x10}, @generic={0x0, 0xe, 0x0, 0x6, 0x10001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x800}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x3f, &(0x7f0000000400)=""/63, 0x41000, 0x20, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0x4, 0x8, 0xbcf31e1c}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x3, 0x9}, {0x5, 0x5, 0xa}], 0x10, 0x9, @void, @value}, 0x94)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x28, 0xfffff038}, {0x6, 0x0, 0x0, 0xfff}]}, 0x10)
sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840)

9.84525387s ago: executing program 4 (id=5):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x30, 0xb, 0x2, 'nw'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000080)={0x0, 0xe, 0x2, "9cd6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.751629746s ago: executing program 0 (id=12):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="66ba410066ed0f20e035000001000f22e00f01c8f20f00d0f082a20400000000c4e2fd2a710064a566b837008ed80f32670f01cb", 0x34}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xe000001a})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80003, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d3232340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000522ff956669d0baed80fb5492a7e255ebad4a5fecc732a66226f6f17bed18ba22af37d3a0935a810abafe3c2f521885c1719a1ea164e90a2543c6de53d535f14541d18e14c740d902acb98707a7fa6ad382b99ea8fc5747e8be8d55d1c72d538ff63791168236246857f7e91aa20347473f44b9ec5a79bc6a7ebcce4c324a04f9d0f785771119c73b39cd8c7224cf924031df48b6d37e52ca18fcddb4bde14336539479d181c8f725a4988344c1498a700d31b79eb38213fbd"], 0xe0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r8, 0xc6c3, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)

6.706059347s ago: executing program 3 (id=13):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="66ba410066ed0f20e035000001000f22e00f01c8f20f00d0f082a20400000000c4e2fd2a710064a566b837008ed80f32670f01cb", 0x34}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xf1, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13", 0x0, 0xf0}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80003, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r7, 0xc6c3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1)

6.440739761s ago: executing program 0 (id=14):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x21)
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010003904fefffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x20008094)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, r0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19003}}], 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.142216582s ago: executing program 4 (id=15):
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be70"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)

6.081265066s ago: executing program 2 (id=16):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x5e, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x22)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
flock(0xffffffffffffffff, 0x2)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0)
socket$inet(0x2, 0x2, 0x7)

5.226719393s ago: executing program 0 (id=17):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="66ba410066ed0f20e035000001000f22e00f01c8f20f00d0f082a20400000000c4e2fd2a710064a566b837008ed80f32670f01cb", 0x34}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xe000001a})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80003, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r6, 0xc6c3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1)

4.884806117s ago: executing program 4 (id=18):
r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
close(r2)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r4}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000340), &(0x7f0000000280)=r4}, 0x20)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x541b, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f00000002c0)=@v2={0x2000000, [{0x1, 0xe}, {0x4, 0x1ac5}]}, 0x14, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0)
sendto$packet(r7, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b63fc76f3f6b"}, 0x14)
ftruncate(0xffffffffffffffff, 0x8800000)

3.881846084s ago: executing program 1 (id=19):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @empty}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bond\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, 0x0, 0x0)

3.527364279s ago: executing program 4 (id=20):
socket$nl_netfilter(0x10, 0x3, 0xc)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x105, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x8, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x1, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xfdff3441, 0xfff]}, 0x45c)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.428273453s ago: executing program 1 (id=21):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000002f)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.221607492s ago: executing program 2 (id=22):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0xffffffff, 0xff0000ff, 'syz_tun\x00', 'team0\x00', {0xff}, {}, 0x2f, 0x5, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x200, 0xa7f5, 0x3, '\x00', 'syz1\x00', {0x5d}}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0xffffffff, 'pim6reg1\x00', 'ip6gre0\x00', {}, {}, 0x21, 0x2, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x80, 0x5, 0x9, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
pwritev(r6, &(0x7f0000000840)=[{&(0x7f0000000180)}, {&(0x7f0000000280)="bb145fea10e87097e7", 0x9}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000004000)}, {&(0x7f0000000340)="931cf07107a93f6e8d9f4371e6e25d9976a17969bbb1db981d8b4529474fcc4412eb1ea7662c293ee1faab22be8b8e5f863e7a7b35ef", 0x36}, {&(0x7f0000000600)="13e8e71760a87976cf10840baa4cd72c8263f17774ecc0a8824320e3a40319a6c6e61e05b14d423a373af33ea62454090a274c80e62044637028eab146d4764e464156a03cf76f041bfb67f5908d38301971729df5ebb4aed8a19b5371a88dcb17cb543a49a2b321cfe14eb04155a8df1e308c248d3b28261d0b5b7187c144ff96e84563aef47a0b728171de444077742564ea827d2a269b1c0661b032f490856d", 0xa1}, {&(0x7f00000006c0)}], 0x8, 0x7fffffff, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010000000000fedbdf250a00"], 0x1c}}, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000300))

3.163262442s ago: executing program 3 (id=23):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x8, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=0x3, 0x4)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800400002b00c621a34a00", @ANYRES32=0x41424344], 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0xffffffffffffff36, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r8, 0x0)
shutdown(r8, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3.064351383s ago: executing program 4 (id=24):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="66ba410066ed0f20e035000001000f22e00f01c8f20f00d0f082a20400000000c4e2fd2a710064a566b837008ed80f32670f01cb", 0x34}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xe000001a})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x80003, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001000000000000000000736861332d3232340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000522ff956669d0baed80fb5492a7e255ebad4a5fecc732a66226f6f17bed18ba22af37d3a0935a810abafe3c2f521885c1719a1ea164e90a2543c6de53d535f14541d18e14c740d902acb98707a7fa6ad382b99ea8fc5747e8be8d55d1c72d538ff63791168236246857f7e91aa20347473f44b9ec5a79bc6a7ebcce4c324a04f9d0f785771119c73b39cd8c7224cf924031df48b6d37e52ca18fcddb4bde14336539479d181c8f725a4988344c1498a700d31b79eb38213fbd"], 0xe0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r8, 0xc6c3, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)

2.853457207s ago: executing program 0 (id=25):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r1=>0x0})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='rxrpc_resend\x00', r2, 0x0, 0xa4}, 0x18)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r6=>0x0})
clock_gettime(0x7, 0x0)
setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="8000f2000a00029f351c105e1d00aaaaaaaaaa0c"], 0x28}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="00040000", @ANYRES16=0x0, @ANYBLOB="10002abd3000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="cc0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r1, @ANYBLOB="cc01028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900050600008000040008040200000004000806020000002c240007ffffff7f400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f30f000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004002d00000008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES8, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f746f72745f6d617070696e670000000038000100240001006c625f73746174735f726566720500685f696e74657276616c000000000000000500030003000000080004000700000008000100", @ANYRES32=r1, @ANYRESHEX=r6, @ANYRES16=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000", @ANYRESDEC=r0], 0x400}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3)
accept4(r4, &(0x7f00000003c0)=@tipc, &(0x7f0000000380)=0x80, 0x800)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd1, 0x9}})

2.334689097s ago: executing program 1 (id=26):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0xfea7)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x21)
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010003904fefffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x20008094)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, r0, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19003}}], 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.223465936s ago: executing program 0 (id=27):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
capset(0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20000)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000140)=ANY=[])
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x400, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x40002, 0x0, 0x0})
socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280070003dd010000000500030001000000080002400000000108000140000000160900010073797a30000000000900020073797a3200004000050007", @ANYRESHEX=r3], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac1414aa08000a00", @ANYRES32=0x0, @ANYBLOB="08f18bdc71513c0411add1ca67e95dc0c5a41c23ef813ca0d082c1f5540feff1ee3f742e7c161a4d8ab081cc1170153d443801a1e1fb9b76eabb94c56dde21e7e721b445f0944dbce031d73afe401e743969df213ab004a3eb1d57a69ad98fa05648dfb18976bc6877c3127dd79f7acf48548fb51e81945ccf95e2e8e4c9f8b87de04c0dff6b3ee2c9cd6fd825c03de7de4de91c335d79841c5ea4230369793da65aa900a032e6890214f0ac50fa66e25a7f2c582579414ac0c6019d08562ee3a82d6645959a931b0db39df4b4958f38"], 0x44}}, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))

2.086909143s ago: executing program 3 (id=28):
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1a, 0x1, 0x80, 0x5, 0x54, 0x1, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1f, 0x0, "80dd2b79d7ddc0a57dc7dc1a59c2b5bf049fdeea9eb1ad4033eb3197681bdbb73dad43d794d9af19fbee50fd7adfd59bd50533981651f7f9907189e9b9d7c05d4b2689b9114c31d6f1be9ed63eea36db"}, 0xd8)
setresgid(0xee00, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'batadv0\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x39}})
socket$nl_route(0x10, 0x3, 0x0)

899.791993ms ago: executing program 1 (id=29):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000a40)={0x1f, 0x2, 0x2}, 0x6)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r3, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x3, "55b571b8"}, @global=@item_012={0x1, 0x1, 0x2, 'O'}]}}, 0x0}, 0x0)
r4 = syz_usb_connect$uac1(0x2, 0x122, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x3, 0x1, 0xf, 0x0, 0x2c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x2}, [@processing_unit={0x7, 0x24, 0x7, 0x5, 0x0, 0xde}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x1, 0x5, [0x7, 0x1, 0x8, 0x3, 0xa], 0xa}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x1, 0x1, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x2, 0x8, 0xa, 0xa], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x3, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x40, "5cad268dad"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0x59}, @as_header={0x7, 0x24, 0x1, 0x10, 0x0, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0x81, "9b7331fa118f59"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x6, "a6f1"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3fc0, 0xc, 0x80, "43b61da09bb56a45"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0x80, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xa, 0x2, 0xba, 0x10, "", "82"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc452, 0x8, 0x9}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x4, 0x0, "17f204395715"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x9, 0x6, {0x7, 0x25, 0x1, 0x80, 0x9, 0x7}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xc, 0x10, 0x7f, 0x10, 0x10}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x7573e4483689dd22, 0x49, 0xaa, 0x8, 0x101, 0x3}, @generic={0x7b, 0x10, 0x4, "3f7ece48ba0bd31837da7f3a77e28e131ac9d06edc7ed02dac8e673df904660ac52ff214b2d77c144dc97b4a8a1bf7c17cf6ad3498099c2dd4b7753e9d4b0d493f146cdc4d3bce8746de890f524d29b13a35da24311afbd813dcb4394c220f85854638462d1b884a3f46929b7bb791ca7508982a55f197cd"}, @ss_cap={0xa, 0x10, 0x3, 0x452cb6a2a443b4b9, 0x2, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xa, 0xc, 0x1}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x55, &(0x7f0000000340)=@string={0x55, 0x3, "5182bb939820645cf0bd2b882ed84a0bcc25054ab257f6a7ebbaa856dc7d3732363da06874d22638e87314e1abda0dcc104695667229d76c33ba6ef744137d82782bd9fa61b9794bc64321de75647d9904cd48"}}, {0xf0, &(0x7f00000003c0)=@string={0xf0, 0x3, "b58942372398574709d2019e91a9b4915acc5e522867c60de0791118dcf5f628106e3fec21b5657f11169a4b3803a9799c25f3b9b63359476f31c89fe69532180ad06f19f2c3eb2f033d2b95ce7386da4df4f0527bbfe78540c7602f46866e5a318f5789037a56221c028e949c75eeae7100f9a764e39d2682a740b69c41ab9f28b8dc3fd7946e402cc1f98d543dfa9bc3c08d941ef40116b904e170f8f701c720149bb565e6cb846c425e443eeb5a6658908e895083110bdc5c2f63d2859c5abb72fdee6a66f941d3992aaa23dcf4af8df6325db789b79505cfa926e659d9851544bf181779c79fb3c7516a7019"}}, {0xd7, &(0x7f00000004c0)=@string={0xd7, 0x3, "12c48e995972c0857909b3ff8285413cb201d70559d0e29ac6f4611f1a30322dbd3ccdc62470545259da2a406f2ba6c8827ad95cb665ac18ab94a92b848e6f4c6b726f44c6ea0daf80db64081a785e80c450d52f6cd19abfe949d578a4ca58899eb8d4fe970366ddbc660db1019af417c55f2ef9901532ce2e9d294bec782060816c3cdaf66b6fe57dd81fb76daf2b68ad2e406d7fcbfa391d7e53e84ff4df3d24b88c1263f5870a4b09dfa267abd5f89bb2c639f0d92996b91bbc1a07874d674ce1e2806f15c3b2d4fac0f57c25dc6128b8df421b"}}]})
syz_usb_control_io$uac1(r4, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x0, 0x11, 0xdd, {0xdd, 0x21, "b33c295a87bf6bb6ac56677173263b880e37f3bc93b177256b41e7686c0ed6d028e080d09ade9aca7a07851fc342410da2d463de75fe673b2faf4f649d089f11a6b815c11cedd614194afe57a692f3c24efc66a8131add6425b36a8375f2ae1207d202f1c22aba63b783c2486238887a3c1e81653fa1a2a2c539ad05d66807fdc2a5045a539ac0c1512b45a1d5687b4e0fc1435b665369edc7f507718e43e70b931f73fce75f4da221a15a07820a30b5dbc93009d51e22646299b5effdc3d90314850059c44e57167c77426633b29f197c667cb4a0c64b1671adbe"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x0, 0x6, 0x3, 'Gpo'}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xb7}, &(0x7f0000000880)={0x20, 0x81, 0x3, "eb3a96"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "9562a3"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "ad"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "548a"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "765496"}})

355.057006ms ago: executing program 4 (id=30):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x3, '\x00', @string=&(0x7f0000000080)=0x1c}})
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="20000000000000008400000002000000000021000000000000000000", @ANYRES32=0x0], 0x20, 0x85}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r6, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000001000"/17, @ANYRES32, @ANYBLOB="0000000000000000b702f2ff14000000b703000000000000850000008300000055090100fe113ae7cef0abe300000000bf91000000000000b702000002008400a557e4960636c04000b7000000002300009500"/103], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='ack_update_msk\x00', 0xffffffffffffffff, 0x0, 0x8}, 0xfffffdbb)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

267.142927ms ago: executing program 3 (id=31):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @empty}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bond\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, 0x0, 0x0)

226.455791ms ago: executing program 0 (id=32):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x5e, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x22)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
flock(0xffffffffffffffff, 0x2)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0)
socket$inet(0x2, 0x2, 0x7)

0s ago: executing program 3 (id=33):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x5e, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x22)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="ae29ace5bffbc200dcef2baf5bbc28ac204007cc4c0784e23101dc35cce21e5a5715d965b5a69a59cb035e5c23e652aadca701e62946a0674a7656ae3a6b4405dc1bed87d00942fe0b2a51a2ccf301cc8535a94dd879801de36f7d241b90f38b5e1d807b220645", @ANYRES32=0x0, @ANYRESHEX=r1], 0x70}, 0x1, 0x0, 0x0, 0x20008010}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
flock(0xffffffffffffffff, 0x2)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008014, &(0x7f0000000340)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0)
socket$inet(0x2, 0x2, 0x7)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.32' (ED25519) to the list of known hosts.
[   67.013958][ T5808] cgroup: Unknown subsys name 'net'
[   67.141722][ T5808] cgroup: Unknown subsys name 'cpuset'
[   67.149708][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.529898][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.849693][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.857493][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.880281][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.887909][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.889852][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.913743][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.914091][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.921851][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.929061][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.942574][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.950274][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.950425][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.959110][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.965775][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.978586][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.980277][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.987671][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.993302][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.999634][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.007291][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.014433][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.021589][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.028171][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.035255][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.041718][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.052337][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.056879][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.063013][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.070159][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.084236][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.370592][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   71.442092][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.449645][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   71.571804][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.579599][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.586810][ T5821] bridge_slave_0: entered allmulticast mode
[   71.593790][ T5821] bridge_slave_0: entered promiscuous mode
[   71.604325][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.611536][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.618683][ T5821] bridge_slave_1: entered allmulticast mode
[   71.625189][ T5821] bridge_slave_1: entered promiscuous mode
[   71.640693][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   71.654219][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   71.685954][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.717344][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.734970][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   71.794166][ T5821] team0: Port device team_slave_0 added
[   71.802058][ T5821] team0: Port device team_slave_1 added
[   71.862217][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   71.891497][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.898623][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.924671][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.946419][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.953919][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.961196][ T5823] bridge_slave_0: entered allmulticast mode
[   71.967777][ T5823] bridge_slave_0: entered promiscuous mode
[   71.978683][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.985636][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.012180][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.041082][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.048329][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.055601][ T5823] bridge_slave_1: entered allmulticast mode
[   72.062725][ T5823] bridge_slave_1: entered promiscuous mode
[   72.087866][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.095356][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.102794][ T5819] bridge_slave_0: entered allmulticast mode
[   72.109404][ T5819] bridge_slave_0: entered promiscuous mode
[   72.136005][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.143525][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.150737][ T5819] bridge_slave_1: entered allmulticast mode
[   72.157268][ T5819] bridge_slave_1: entered promiscuous mode
[   72.178145][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.185363][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.192730][ T5818] bridge_slave_0: entered allmulticast mode
[   72.199810][ T5818] bridge_slave_0: entered promiscuous mode
[   72.234578][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.247367][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.255126][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.262343][ T5818] bridge_slave_1: entered allmulticast mode
[   72.269120][ T5818] bridge_slave_1: entered promiscuous mode
[   72.294938][ T5821] hsr_slave_0: entered promiscuous mode
[   72.301671][ T5821] hsr_slave_1: entered promiscuous mode
[   72.309862][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.322123][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.332709][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.358098][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.367470][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.375732][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.382940][ T5822] bridge_slave_0: entered allmulticast mode
[   72.389526][ T5822] bridge_slave_0: entered promiscuous mode
[   72.431394][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.447980][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.455431][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.462679][ T5822] bridge_slave_1: entered allmulticast mode
[   72.470063][ T5822] bridge_slave_1: entered promiscuous mode
[   72.485643][ T5819] team0: Port device team_slave_0 added
[   72.493423][ T5823] team0: Port device team_slave_0 added
[   72.501744][ T5823] team0: Port device team_slave_1 added
[   72.525049][ T5818] team0: Port device team_slave_0 added
[   72.545284][ T5819] team0: Port device team_slave_1 added
[   72.552947][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.587697][ T5818] team0: Port device team_slave_1 added
[   72.611336][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.660396][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.667360][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.693518][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.707727][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.715063][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.741250][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.753598][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.764421][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.790589][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.803983][ T5822] team0: Port device team_slave_0 added
[   72.810741][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.817732][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.843767][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.858660][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.865621][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.892041][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.903927][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.911339][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.937425][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.956461][ T5822] team0: Port device team_slave_1 added
[   73.032794][ T5819] hsr_slave_0: entered promiscuous mode
[   73.040004][ T5819] hsr_slave_1: entered promiscuous mode
[   73.045962][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.054238][ T5819] Cannot create hsr debugfs directory
[   73.086410][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.097037][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.120026][ T5134] Bluetooth: hci1: command tx timeout
[   73.123183][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.128915][ T5134] Bluetooth: hci3: command tx timeout
[   73.138918][ T5824] Bluetooth: hci4: command tx timeout
[   73.144548][ T5840] Bluetooth: hci2: command tx timeout
[   73.152213][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.155714][ T5839] Bluetooth: hci0: command tx timeout
[   73.162428][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.195731][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.247560][ T5823] hsr_slave_0: entered promiscuous mode
[   73.253793][ T5823] hsr_slave_1: entered promiscuous mode
[   73.260501][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.268069][ T5823] Cannot create hsr debugfs directory
[   73.284279][ T5818] hsr_slave_0: entered promiscuous mode
[   73.291148][ T5818] hsr_slave_1: entered promiscuous mode
[   73.297062][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.304919][ T5818] Cannot create hsr debugfs directory
[   73.413989][ T5822] hsr_slave_0: entered promiscuous mode
[   73.420491][ T5822] hsr_slave_1: entered promiscuous mode
[   73.426492][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.434116][ T5822] Cannot create hsr debugfs directory
[   73.612391][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.630037][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.649744][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.665808][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.723401][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.747062][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.768360][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.788903][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.802282][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.813253][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.825437][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.836876][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.911661][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.923519][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.933422][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.942565][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.037585][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.055872][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.066642][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.075873][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.133412][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.179956][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.190929][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   74.234742][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.242006][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.267865][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.280750][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.289202][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.296285][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.305601][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   74.316406][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.323562][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.360142][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.367251][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.385888][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   74.409252][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   74.420424][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.427490][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.456167][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.488289][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.500894][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.522480][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.529597][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.550117][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.557245][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.586960][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.594116][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.619931][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.722926][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   74.770936][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.778073][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.827404][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.834564][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.897367][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.915369][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.941460][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.990921][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.062573][ T5821] veth0_vlan: entered promiscuous mode
[   75.111915][ T5821] veth1_vlan: entered promiscuous mode
[   75.156583][ T5819] veth0_vlan: entered promiscuous mode
[   75.175449][ T5819] veth1_vlan: entered promiscuous mode
[   75.189990][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.198936][ T5839] Bluetooth: hci4: command tx timeout
[   75.204370][ T5839] Bluetooth: hci0: command tx timeout
[   75.209887][ T5134] Bluetooth: hci1: command tx timeout
[   75.215304][ T5134] Bluetooth: hci3: command tx timeout
[   75.220946][ T5839] Bluetooth: hci2: command tx timeout
[   75.247083][ T5819] veth0_macvtap: entered promiscuous mode
[   75.282181][ T5819] veth1_macvtap: entered promiscuous mode
[   75.318059][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.347276][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.372061][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.399999][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.409054][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.417764][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.427939][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.453155][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.461362][ T5821] veth0_macvtap: entered promiscuous mode
[   75.522938][ T5821] veth1_macvtap: entered promiscuous mode
[   75.569800][ T5822] veth0_vlan: entered promiscuous mode
[   75.581067][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.591947][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.607650][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.625295][ T5822] veth1_vlan: entered promiscuous mode
[   75.637867][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.639976][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.656509][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.658918][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.668358][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.709090][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.717797][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.729813][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.738765][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.750424][ T5818] veth0_vlan: entered promiscuous mode
[   75.792432][ T5822] veth0_macvtap: entered promiscuous mode
[   75.806937][ T5818] veth1_vlan: entered promiscuous mode
[   75.815199][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.826621][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.835221][ T5822] veth1_macvtap: entered promiscuous mode
[   75.866107][ T5818] veth0_macvtap: entered promiscuous mode
[   75.889945][ T5823] veth0_vlan: entered promiscuous mode
[   75.902896][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.914686][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.925334][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.936104][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.947688][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.974996][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.977155][ T5818] veth1_macvtap: entered promiscuous mode
[   76.002972][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.008910][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.021919][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.027074][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.040847][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.051368][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.062227][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.092849][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.103649][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.113911][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.124485][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.134401][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.145140][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.156603][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.185421][ T5823] veth1_vlan: entered promiscuous mode
[   76.193814][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.214012][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.233918][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.246471][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.287610][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.302925][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.357014][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.382483][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.394739][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.407217][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.415506][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.425648][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.448974][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.466931][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.482359][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.506000][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.537141][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.549539][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.563046][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.572104][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.581124][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.594422][ T5823] veth0_macvtap: entered promiscuous mode
[   76.656336][ T5823] veth1_macvtap: entered promiscuous mode
[   76.748783][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.774574][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.785304][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.806547][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.816891][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.827840][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.838052][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.849679][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.865977][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.911110][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.955434][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.998395][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.053466][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.075641][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.279022][ T5840] Bluetooth: hci2: command tx timeout
[   77.284738][ T5839] Bluetooth: hci0: command tx timeout
[   77.290527][ T5134] Bluetooth: hci3: command tx timeout
[   77.296678][ T5840] Bluetooth: hci1: command tx timeout
[   77.302654][ T5839] Bluetooth: hci4: command tx timeout
[   77.357220][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.415657][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.477266][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.814447][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.927179][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.967359][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.976284][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.986032][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.054332][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.125604][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.370255][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.415892][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.600879][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.622045][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.679051][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.716363][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.728288][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.766816][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.863673][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.901165][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.936466][ T5874] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   78.966306][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.989183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.019703][ T5935] trusted_key: encrypted_key: insufficient parameters specified
[   79.037596][ T5874] usb 4-1: config 0 descriptor??
[   79.059149][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.068752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.118921][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.199148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   79.207380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   79.278484][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   79.359113][ T5839] Bluetooth: hci1: command tx timeout
[   79.365531][ T5840] Bluetooth: hci3: command tx timeout
[   79.371830][ T5134] Bluetooth: hci0: command tx timeout
[   79.371893][ T5834] Bluetooth: hci2: command tx timeout
[   79.377474][ T5824] Bluetooth: hci4: command tx timeout
[   79.460897][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.480229][ T5926] usb 3-1: Using ep0 maxpacket: 16
[   79.743177][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   79.796048][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   79.838647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.893606][ T5926] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   79.917426][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.927992][ T5875] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   79.944341][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.963095][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.969809][ T5926] usb 3-1: Product: syz
[   79.988452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.996522][ T5875] usb 5-1: config 0 descriptor??
[   80.175878][ T5926] usb 3-1: Manufacturer: syz
[   80.188453][ T5926] usb 3-1: SerialNumber: syz
[   80.221599][ T5926] usb 3-1: config 0 descriptor??
[   80.237395][ T5926] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   80.911286][ T5874] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   80.928491][ T5926] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   80.939247][ T5874] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   80.987600][ T5874] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0001/input/input5
[   81.119793][ T5874] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[   81.189317][ T5875] usb 5-1: Cannot read MAC address
[   81.209084][ T5875] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[   81.302885][ T5950] kvm: MONITOR instruction emulated as NOP!
[   81.495587][ T5926] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   81.510971][ T5926] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[   81.524830][ T5926] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[   81.547331][ T5926] em28xx 3-1:0.0: No AC97 audio processor
[   82.063202][ T5925] usb 4-1: USB disconnect, device number 2
[   82.118679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.606378][ T5829] usb 5-1: USB disconnect, device number 2
[   82.764862][    T9] usb 3-1: USB disconnect, device number 2
[   82.908820][    T9] em28xx 3-1:0.0: Disconnecting em28xx
[   82.923916][    T9] em28xx 3-1:0.0: Freeing device
[   83.654049][ T5969] ubi0: attaching mtd0
[   83.667886][ T5969] ubi0: scanning is finished
[   83.672813][ T5969] ubi0: empty MTD device detected
[   84.784712][ T5969] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[   85.259091][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.811064][ T5994] kvm: kvm [5993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5d81
[   85.822696][ T5994] kvm: kvm [5993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe599
[   85.840262][ T5994] kvm: kvm [5993]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe579
[   86.857476][  T974] cfg80211: failed to load regulatory.db
[   87.938800][ T6016] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET)
[   88.670573][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   88.709273][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   88.746821][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.014174][ T6028] ubi0: attaching mtd0
[   89.056079][ T6028] ubi0: scanning is finished
[   89.073845][   T25] usb 5-1: Using ep0 maxpacket: 8
[   89.202566][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.222729][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   89.238724][ T6026] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.239073][ T6028] ==================================================================
[   89.253919][   T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   89.258065][ T6028] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x141/0x3f0
[   89.277621][ T6028] Read of size 4 at addr ffff8880343d18d8 by task syz.0.32/6028
[   89.285265][ T6028] 
[   89.287609][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.32 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0
[   89.287630][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   89.287646][ T6028] Call Trace:
[   89.287653][ T6028]  <TASK>
[   89.287660][ T6028]  dump_stack_lvl+0x241/0x360
[   89.287692][ T6028]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.287709][ T6028]  ? __pfx__printk+0x10/0x10
[   89.287735][ T6028]  ? _printk+0xd5/0x120
[   89.287759][ T6028]  ? __virt_addr_valid+0x183/0x530
[   89.287784][ T6028]  ? __virt_addr_valid+0x183/0x530
[   89.287808][ T6028]  print_report+0x169/0x550
[   89.287827][ T6028]  ? __virt_addr_valid+0x183/0x530
[   89.287850][ T6028]  ? __virt_addr_valid+0x183/0x530
[   89.287872][ T6028]  ? __virt_addr_valid+0x45f/0x530
[   89.287896][ T6028]  ? __phys_addr+0xba/0x170
[   89.287918][ T6028]  ? notifier_chain_register+0x141/0x3f0
[   89.287936][ T6028]  kasan_report+0x143/0x180
[   89.287955][ T6028]  ? notifier_chain_register+0x141/0x3f0
[   89.287977][ T6028]  notifier_chain_register+0x141/0x3f0
[   89.287998][ T6028]  blocking_notifier_chain_register+0x61/0xc0
[   89.288020][ T6028]  ubi_wl_init+0x3396/0x3720
[   89.288050][ T6028]  ubi_attach+0x3e01/0x5b80
[   89.288085][ T6028]  ? __pfx_ubi_attach+0x10/0x10
[   89.288109][ T6028]  ? __vmalloc_node_range_noprof+0xf65/0x1380
[   89.288137][ T6028]  ubi_attach_mtd_dev+0x1a3a/0x3540
[   89.288171][ T6028]  ctrl_cdev_ioctl+0x346/0x570
[   89.288196][ T6028]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[   89.288225][ T6028]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[   89.288250][ T6028]  __se_sys_ioctl+0xf5/0x170
[   89.288266][ T6028]  do_syscall_64+0xf3/0x230
[   89.288288][ T6028]  ? clear_bhb_loop+0x35/0x90
[   89.288313][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.288336][ T6028] RIP: 0033:0x7f8ed078cd29
[   89.288354][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.288369][ T6028] RSP: 002b:00007f8ed1587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.288388][ T6028] RAX: ffffffffffffffda RBX: 00007f8ed09a6080 RCX: 00007f8ed078cd29
[   89.288400][ T6028] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000006
[   89.288410][ T6028] RBP: 00007f8ed080e2a0 R08: 0000000000000000 R09: 0000000000000000
[   89.288421][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.288431][ T6028] R13: 0000000000000000 R14: 00007f8ed09a6080 R15: 00007ffdd4692468
[   89.288449][ T6028]  </TASK>
[   89.288455][ T6028] 
[   89.288459][   T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   89.298588][ T6028] Allocated by task 5969:
[   89.298601][ T6028]  kasan_save_track+0x3f/0x80
[   89.298621][ T6028]  __kasan_kmalloc+0x98/0xb0
[   89.298639][ T6028]  __kmalloc_cache_noprof+0x243/0x390
[   89.561516][ T6028]  ubi_attach_mtd_dev+0x552/0x3540
[   89.566635][ T6028]  ctrl_cdev_ioctl+0x346/0x570
[   89.571408][ T6028]  __se_sys_ioctl+0xf5/0x170
[   89.575987][ T6028]  do_syscall_64+0xf3/0x230
[   89.580485][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.586375][ T6028] 
[   89.588691][ T6028] Freed by task 5969:
[   89.592683][ T6028]  kasan_save_track+0x3f/0x80
[   89.597369][ T6028]  kasan_save_free_info+0x40/0x50
[   89.602390][ T6028]  __kasan_slab_free+0x59/0x70
[   89.607148][ T6028]  kfree+0x196/0x430
[   89.611049][ T6028]  device_release+0x99/0x1c0
[   89.615636][ T6028]  kobject_put+0x22f/0x480
[   89.620097][ T6028]  ubi_attach_mtd_dev+0x8f5/0x3540
[   89.625233][ T6028]  ctrl_cdev_ioctl+0x346/0x570
[   89.630009][ T6028]  __se_sys_ioctl+0xf5/0x170
[   89.634600][ T6028]  do_syscall_64+0xf3/0x230
[   89.639109][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.644996][ T6028] 
[   89.647312][ T6028] The buggy address belongs to the object at ffff8880343d0000
[   89.647312][ T6028]  which belongs to the cache kmalloc-8k of size 8192
[   89.661360][ T6028] The buggy address is located 6360 bytes inside of
[   89.661360][ T6028]  freed 8192-byte region [ffff8880343d0000, ffff8880343d2000)
[   89.675320][ T6028] 
[   89.677635][ T6028] The buggy address belongs to the physical page:
[   89.684045][ T6028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x343d0
[   89.692796][ T6028] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   89.701291][ T6028] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   89.708832][ T6028] page_type: f5(slab)
[   89.712811][ T6028] raw: 00fff00000000040 ffff88801ac42280 ffffea0000c47a00 0000000000000004
[   89.721395][ T6028] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   89.729968][ T6028] head: 00fff00000000040 ffff88801ac42280 ffffea0000c47a00 0000000000000004
[   89.738630][ T6028] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   89.747319][ T6028] head: 00fff00000000003 ffffea0000d0f401 ffffffffffffffff 0000000000000000
[   89.755978][ T6028] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[   89.764646][ T6028] page dumped because: kasan: bad access detected
[   89.771065][ T6028] page_owner tracks the page as allocated
[   89.776779][ T6028] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (sh), ts 67370552897, free_ts 67316973032
[   89.796506][ T6028]  post_alloc_hook+0x1f4/0x240
[   89.801288][ T6028]  get_page_from_freelist+0x3651/0x37a0
[   89.806843][ T6028]  __alloc_frozen_pages_noprof+0x292/0x710
[   89.812662][ T6028]  alloc_pages_mpol+0x311/0x660
[   89.817531][ T6028]  allocate_slab+0x8f/0x3a0
[   89.822038][ T6028]  ___slab_alloc+0xc27/0x14a0
[   89.826733][ T6028]  __slab_alloc+0x58/0xa0
[   89.831077][ T6028]  __kmalloc_cache_noprof+0x27b/0x390
[   89.836461][ T6028]  tomoyo_init_log+0x11cd/0x2050
[   89.841415][ T6028]  tomoyo_supervisor+0x3a4/0x1770
[   89.846445][ T6028]  tomoyo_env_perm+0x178/0x210
[   89.851217][ T6028]  tomoyo_find_next_domain+0x1495/0x1dd0
[   89.856856][ T6028]  tomoyo_bprm_check_security+0x117/0x180
[   89.862581][ T6028]  security_bprm_check+0x86/0x250
[   89.867619][ T6028]  bprm_execve+0x8d3/0x1430
[   89.872124][ T6028]  do_execveat_common+0x57f/0x710
[   89.877170][ T6028] page last free pid 5808 tgid 5808 stack trace:
[   89.883493][ T6028]  free_frozen_pages+0xe04/0x10e0
[   89.888529][ T6028]  vfree+0x1c3/0x360
[   89.892437][ T6028]  kcov_close+0x28/0x50
[   89.896598][ T6028]  __fput+0x3e9/0x9f0
[   89.900586][ T6028]  __x64_sys_close+0x7f/0x110
[   89.905273][ T6028]  do_syscall_64+0xf3/0x230
[   89.909783][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.915685][ T6028] 
[   89.918004][ T6028] Memory state around the buggy address:
[   89.923632][ T6028]  ffff8880343d1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.931867][ T6028]  ffff8880343d1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.939922][ T6028] >ffff8880343d1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.947972][ T6028]                                                     ^
[   89.954895][ T6028]  ffff8880343d1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.962961][ T6028]  ffff8880343d1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   89.971030][ T6028] ==================================================================
[   89.987397][   T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.987528][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.010795][   T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.032020][ T5874] usb 2-1: config 0 descriptor??
[   90.038478][   T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   90.048500][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.070831][ T6028] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   90.078056][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.32 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0
[   90.088206][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   90.098257][ T6028] Call Trace:
[   90.101541][ T6028]  <TASK>
[   90.104481][ T6028]  dump_stack_lvl+0x241/0x360
[   90.109169][ T6028]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.114359][ T6028]  ? __pfx__printk+0x10/0x10
[   90.118957][ T6028]  ? preempt_schedule+0xe1/0xf0
[   90.123838][ T6028]  ? vscnprintf+0x5d/0x90
[   90.128176][ T6028]  panic+0x349/0x880
[   90.132075][ T6028]  ? check_panic_on_warn+0x21/0xb0
[   90.137189][ T6028]  ? __pfx_panic+0x10/0x10
[   90.141608][ T6028]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   90.147590][ T6028]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.153911][ T6028]  ? print_report+0x502/0x550
[   90.158594][ T6028]  check_panic_on_warn+0x86/0xb0
[   90.163539][ T6028]  ? notifier_chain_register+0x141/0x3f0
[   90.169188][ T6028]  end_report+0x77/0x160
[   90.173437][ T6028]  kasan_report+0x154/0x180
[   90.177947][ T6028]  ? notifier_chain_register+0x141/0x3f0
[   90.183595][ T6028]  notifier_chain_register+0x141/0x3f0
[   90.189072][ T6028]  blocking_notifier_chain_register+0x61/0xc0
[   90.195142][ T6028]  ubi_wl_init+0x3396/0x3720
[   90.199757][ T6028]  ubi_attach+0x3e01/0x5b80
[   90.204275][ T6028]  ? __pfx_ubi_attach+0x10/0x10
[   90.209128][ T6028]  ? __vmalloc_node_range_noprof+0xf65/0x1380
[   90.215197][ T6028]  ubi_attach_mtd_dev+0x1a3a/0x3540
[   90.220406][ T6028]  ctrl_cdev_ioctl+0x346/0x570
[   90.225180][ T6028]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[   90.230468][ T6028]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[   90.235755][ T6028]  __se_sys_ioctl+0xf5/0x170
[   90.240340][ T6028]  do_syscall_64+0xf3/0x230
[   90.244845][ T6028]  ? clear_bhb_loop+0x35/0x90
[   90.249548][ T6028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.255460][ T6028] RIP: 0033:0x7f8ed078cd29
[   90.259873][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.279481][ T6028] RSP: 002b:00007f8ed1587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.287896][ T6028] RAX: ffffffffffffffda RBX: 00007f8ed09a6080 RCX: 00007f8ed078cd29
[   90.295862][ T6028] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000006
[   90.303840][ T6028] RBP: 00007f8ed080e2a0 R08: 0000000000000000 R09: 0000000000000000
[   90.311854][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.319828][ T6028] R13: 0000000000000000 R14: 00007f8ed09a6080 R15: 00007ffdd4692468
[   90.327800][ T6028]  </TASK>
[   90.331137][ T6028] Kernel Offset: disabled
[   90.335460][ T6028] Rebooting in 86400 seconds..