last executing test programs:

3m25.775387307s ago: executing program 1 (id=128):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "0c4db8c367966bb208f73acc822bd2647c3b4629b41ef0d2f2bec013656d9b3642fe4fdb5690a7aff79c5f9a1e5a44ebd60d7c5de602eac67aa261000d06d73b", 0x18}, 0x48, 0xfffffffffffffff9)
keyctl$assume_authority(0x10, r0)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000100)='85baa174f0cb1142', &(0x7f0000000140))
keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r0, r0}, &(0x7f00000001c0)=""/176, 0xb0, &(0x7f0000000380)={&(0x7f0000000280)={'cmac(twofish-generic)\x00'}, &(0x7f00000002c0)="68d91573d247ce3abaab8e8ce57f4c5443fab58bd9aca27f68b8f8870eff6c9ae2ce1c787195397c49e7d19715c3e87c3816fd629e91d4bb1d986006d0d68b1e4421d1e6f72189700d572f7478f7dcef45c3da3ba8dfc91b33f59013aae18e51f7f6f9de43a004545eb3b39b6f41afe4cab20643c20e8360491d4799a3ca49d07fc4396e43505a25f3c320011437594f5d6eba27c62a7af582652d39529905", 0x9f})
keyctl$unlink(0x9, r0, r0)
keyctl$link(0x8, r0, r0)
keyctl$describe(0x6, r0, &(0x7f00000003c0)=""/52, 0x34)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
openat$vmci(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0)
r3 = add_key$user(&(0x7f00000024c0), &(0x7f0000002500)={'syz', 0x2}, &(0x7f0000002540)="4ade04de881052cdf24623f8d5973dbf19a3c1fe6146bd90ba7c544ea47fdebaa7102f63988fa34533184e5ca6c1956a94a41d45dbde35ba288f515f641b9dea14ea3c23d421cef3884e931b56bcff6cb51daf7c940944b408f93a20b7b0a0371e2cbfa9f5a93434e8bf68cc024f1cf620440ad089d957689fd1f8f339cabd9766f7e616960eb6b3291f99aec34adf0ae50f342531ca4951cc86b8d9d703c599005d297e964d776cda77013205c776a7ccd75ffd94dd8592af5c3a46ea", 0xbd, 0xfffffffffffffffc)
keyctl$read(0xb, r3, &(0x7f0000002600)=""/4096, 0x1000)
keyctl$dh_compute(0x17, &(0x7f0000003600)={r3, r0, r3}, &(0x7f0000003640)=""/159, 0x9f, &(0x7f0000003840)={&(0x7f0000003700)={'wp512-generic\x00'}, &(0x7f0000003740)="31f4c79baf434c5dbbc12e1a40749b53d20515928d5b899e98eb088227559d0e2c13b593b150f460138cf26207b2040d5271b098ffd42accacb8392ec8e8631ef89094cd33fcab7a03ee23abf410e0695b4cac81172612449cb9a576fd90fe14665edbc102a0d5db64df84d42ed5cbc3055ff2cf8bf243dde6a6874c9c8cb7f70fe7a5f962bf351c42b1d05c806737131be67c0b795398f0d1bcdd2941307d12a440c173846926f3dc6663ea52b069b4f9455142b398036d1d3391cbac176d44f74e13534cac6b9772ec6712858e693c169307c1e40f08d3a73689b2", 0xdc})
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000003880)='macvtap0\x00')
r5 = syz_open_dev$loop(&(0x7f00000038c0), 0x0, 0x400)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000003900)={'\x00', 0x6, 0xd, 0x400, 0x192, 0x4, r2})

3m24.531493507s ago: executing program 1 (id=129):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = semget$private(0x0, 0x4000000009, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x0, 0x5, '\x00', "037ec42b", '\x00', "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0xc, 0x5, 0x0, 0xff, 0x1, 0x4, "b3f76ead3b1123faf1309f1ee54b8f2c", 0x6, 0x6, 0x80, 0x7f, 0xf9, 0x7, 0x2})
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
unshare(0x6a040000)

3m23.248588984s ago: executing program 1 (id=133):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0xbc, 0x0)

3m20.721714154s ago: executing program 1 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)

3m19.067012458s ago: executing program 1 (id=140):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x72, 0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_PEC(r5, 0x708, 0x6)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0})

3m17.644546296s ago: executing program 1 (id=145):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0)
ftruncate(r6, 0x200004)
read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)

3m15.506190182s ago: executing program 32 (id=145):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0)
ftruncate(r6, 0x200004)
read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)

3m4.354530289s ago: executing program 0 (id=169):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)

3m2.79511089s ago: executing program 0 (id=171):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f0000000300)=@unspec, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x1fb480)
close_range(r2, 0xffffffffffffffff, 0x0)

3m0.628438719s ago: executing program 0 (id=177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000003000040182000"/28, @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x29, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYRES8=r3, @ANYBLOB='>'], 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc77c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m52.519335837s ago: executing program 0 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)

2m51.330425792s ago: executing program 0 (id=193):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
set_mempolicy(0x2, &(0x7f0000000180)=0x8, 0x5)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)

2m49.812541538s ago: executing program 0 (id=194):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100))
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100))
r5 = syz_open_pts(r4, 0x0)
r6 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0)
r7 = dup3(r5, r4, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x3)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x4, @tick=0xffffff3f, {}, {}, @note={0xff, 0x8, 0x6, 0x4, 0x6}}], 0x1c)

2m49.477276476s ago: executing program 33 (id=194):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100))
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100))
r5 = syz_open_pts(r4, 0x0)
r6 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0)
r7 = dup3(r5, r4, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x3)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x4, @tick=0xffffff3f, {}, {}, @note={0xff, 0x8, 0x6, 0x4, 0x6}}], 0x1c)

51.190208073s ago: executing program 5 (id=408):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000540))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r5, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0})
setreuid(0x0, 0x0)

48.743410733s ago: executing program 4 (id=413):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5b6b694b, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setitimer(0x2, 0x0, 0x0)
getitimer(0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x10000, 0x0, [], [0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]})
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')

48.191492272s ago: executing program 5 (id=415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', <r1=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

47.272416553s ago: executing program 4 (id=417):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x50000000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28}, 0x28)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x37}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000002c0)="38c4d258c7141234affed112eb904e8775beafc17f0e504315108ae52881774ac9068a575d7a12204dbf0b0a18589f46958b54", 0x33}, {0x0}], 0x2}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0)
fallocate(r3, 0x0, 0x0, 0x400)
mincore(&(0x7f000080e000/0x3000)=nil, 0x3000, &(0x7f0000007340)=""/4107)

46.163749387s ago: executing program 5 (id=419):
socket$kcm(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x41, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040), 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0)

45.434267169s ago: executing program 4 (id=420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000200)={{@local}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000240)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x6, 0x400})

44.243618301s ago: executing program 5 (id=423):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00')

43.101627348s ago: executing program 5 (id=425):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
dup3(r0, r1, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102382, 0x18fee}], 0x1, 0x8, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7b, 0x0, &(0x7f0000000080))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, 0x0)
getpgid(0xffffffffffffffff)
getresuid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400))
socket(0x10, 0x2, 0x0)
setresgid(0x0, 0x0, 0x0)

42.053860599s ago: executing program 4 (id=427):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)

41.404404366s ago: executing program 5 (id=431):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

40.322465748s ago: executing program 34 (id=431):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

40.304691091s ago: executing program 4 (id=434):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0xffffffffffffffb2, &(0x7f0000000240)={0x40, 0x14, 0x13, "95ffd85de69cf08941540ee3c382a71f4dd333"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)

39.754585732s ago: executing program 4 (id=435):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getsockopt(r1, 0x1, 0xfffffff9, &(0x7f00000003c0)=""/4096, &(0x7f0000000340)=0x1000)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

20.332499704s ago: executing program 3 (id=460):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r1 = syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000280)={0x0, 0x0, r2})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6}})

10.250475041s ago: executing program 3 (id=470):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
r2 = socket(0x10, 0x3, 0x0)
write$smackfs_load(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="29421e73f812f3fd1b5d76101060a46d205a13d9e771811f904d89fc9b65ea7d3568739d69320ee97f3a1c8bf8ffa412e86d30fa0b503ce8c0bcef9efdaf47efb2b8e6e43856564ee42839fbc242c9dfe5f87c76d8cffda620097badd8f18123de1033051b641b646934223d3a8b7d495f09389d6dc45a1afffecb0dfc"], 0x11f)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

9.535876764s ago: executing program 6 (id=472):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.535001851s ago: executing program 3 (id=473):
unshare(0x26020280)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(r0)
waitid(0x2, r1, &(0x7f0000000000), 0x2, &(0x7f0000000080))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r0, 0xc, &(0x7f0000000100)={0x3f, 0x8, 0x800})
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000200))
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000080)=""/7)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x29, 0x49, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
waitid(0x0, 0x0, 0x0, 0x60000004, 0x0)

5.959692976s ago: executing program 2 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ff0000), 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000079f000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="c4020906a2a07b000066baa000b80f000000ef0f01308f0978d7bf00000000b805000000b9090000000f01c1c744240053917cccc744240201000000c7442406000000000f011c2448b84402b36c000000000f23c00f21f835030006000f23f866b80f000f00d0c4216b5f8dbe690000c462b8f5d0", 0x75}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r6, 0x80184151, &(0x7f0000000000)={0x0, 0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.603484109s ago: executing program 3 (id=477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x808)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x2}, 0x1c)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

5.136337855s ago: executing program 3 (id=478):
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x1}, 0xc)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100))
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0xc8002, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40000)

5.135419849s ago: executing program 2 (id=487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000040)={@random="b8c06e70553e", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x40, 0x3c, 0x0, @local, @local, {[@srh={0x0, 0x6, 0x4, 0x3, 0x2, 0x0, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}]}], {0x0, 0x4e21, 0x8}}}}}}, 0x0)

4.190842489s ago: executing program 6 (id=479):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7", 0xc)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
shutdown(r4, 0x0)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0xfffffffc, 0x1b7}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r6, 0x102def, 0x0, 0x0, 0x0, 0x0)

4.043300143s ago: executing program 2 (id=480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeab)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback}}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, @in6=@remote, @in=@remote, @in=@dev}]}]}, 0xec}}, 0x0)
io_setup(0x7, 0x0)

2.501982901s ago: executing program 6 (id=481):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x141040, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[r1, 0x0, 0x0], 0x3})

2.322455107s ago: executing program 2 (id=482):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
r2 = socket(0x10, 0x3, 0x0)
write$smackfs_load(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="29421e73f812f3fd1b5d76101060a46d205a13d9e771811f904d89fc9b65ea7d3568739d69320ee97f3a1c8bf8ffa412e86d30fa0b503ce8c0bcef9efdaf47efb2b8e6e43856564ee42839fbc242c9dfe5f87c76d8cffda620097badd8f18123de1033051b641b646934223d3a8b7d495f09389d6dc45a1afffecb0dfc"], 0x11f)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1.744262289s ago: executing program 6 (id=483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1], 0x30}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000800000a00000000000000fe8000000000000000000000000000aa090000000000000005000600000000000a"], 0xa0}}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000480))
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1.69290998s ago: executing program 2 (id=484):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0)
recvmsg$can_raw(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000020c0)=""/4087, 0xff7}], 0x2}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)

1.690693902s ago: executing program 3 (id=485):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0)
write$dsp(r5, &(0x7f00000001c0)="d2", 0x1)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b)

922.758782ms ago: executing program 6 (id=486):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000040)=@ethtool_gfeatures})
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

732.449957ms ago: executing program 2 (id=488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x808)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x2}, 0x1c)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

0s ago: executing program 6 (id=489):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000180)=@filename='\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts.
[   68.083045][ T5817] cgroup: Unknown subsys name 'net'
[   68.192640][ T5817] cgroup: Unknown subsys name 'cpuset'
[   68.200914][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.722949][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.669638][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[   71.676147][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[   72.010221][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.039091][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.046788][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.060000][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.067628][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.075031][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.122620][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.144382][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.160166][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.167740][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.189624][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.209808][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.224601][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.225854][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.240637][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.248255][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.256062][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.258856][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.264724][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.272380][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.279410][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.284295][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.293230][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.299702][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.306130][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.314020][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.331281][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.355176][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.368751][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   72.381352][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.562696][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   72.758279][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.766726][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.774270][ T5827] bridge_slave_0: entered allmulticast mode
[   72.781800][ T5827] bridge_slave_0: entered promiscuous mode
[   72.796153][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   72.813404][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.822038][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.829971][ T5827] bridge_slave_1: entered allmulticast mode
[   72.836765][ T5827] bridge_slave_1: entered promiscuous mode
[   72.887438][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   72.902562][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.915117][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.009752][ T5827] team0: Port device team_slave_0 added
[   73.019655][ T5827] team0: Port device team_slave_1 added
[   73.041741][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   73.085870][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.093352][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.101094][ T5836] bridge_slave_0: entered allmulticast mode
[   73.107821][ T5836] bridge_slave_0: entered promiscuous mode
[   73.133554][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.140744][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.166785][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.211739][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.219073][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.226207][ T5836] bridge_slave_1: entered allmulticast mode
[   73.233540][ T5836] bridge_slave_1: entered promiscuous mode
[   73.243442][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.250618][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.277015][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.357080][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.364498][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.372895][ T5833] bridge_slave_0: entered allmulticast mode
[   73.380274][ T5833] bridge_slave_0: entered promiscuous mode
[   73.403420][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.414960][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.435074][ T5827] hsr_slave_0: entered promiscuous mode
[   73.441819][ T5827] hsr_slave_1: entered promiscuous mode
[   73.449170][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.456381][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.463684][ T5833] bridge_slave_1: entered allmulticast mode
[   73.470995][ T5833] bridge_slave_1: entered promiscuous mode
[   73.526911][ T5836] team0: Port device team_slave_0 added
[   73.540869][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   73.568950][ T5836] team0: Port device team_slave_1 added
[   73.586562][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.599538][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.614039][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.621548][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.629029][ T5842] bridge_slave_0: entered allmulticast mode
[   73.635753][ T5842] bridge_slave_0: entered promiscuous mode
[   73.669468][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.678509][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.685999][ T5842] bridge_slave_1: entered allmulticast mode
[   73.693525][ T5842] bridge_slave_1: entered promiscuous mode
[   73.761047][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.768034][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.795177][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.810470][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.817522][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.848240][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.863162][ T5833] team0: Port device team_slave_0 added
[   73.871054][ T5833] team0: Port device team_slave_1 added
[   73.943194][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.972184][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.979556][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.005866][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.019126][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.026115][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.052468][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.064051][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.071345][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.078538][ T5832] bridge_slave_0: entered allmulticast mode
[   74.085927][ T5832] bridge_slave_0: entered promiscuous mode
[   74.094626][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.126994][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.139624][ T5843] Bluetooth: hci0: command tx timeout
[   74.140670][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.152795][ T5832] bridge_slave_1: entered allmulticast mode
[   74.160023][ T5832] bridge_slave_1: entered promiscuous mode
[   74.198189][ T5836] hsr_slave_0: entered promiscuous mode
[   74.204609][ T5836] hsr_slave_1: entered promiscuous mode
[   74.214250][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.222501][ T5836] Cannot create hsr debugfs directory
[   74.258483][ T5842] team0: Port device team_slave_0 added
[   74.269002][ T5842] team0: Port device team_slave_1 added
[   74.310714][ T5833] hsr_slave_0: entered promiscuous mode
[   74.317030][ T5833] hsr_slave_1: entered promiscuous mode
[   74.326742][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.334721][ T5833] Cannot create hsr debugfs directory
[   74.344782][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.366562][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.373759][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.385475][ T5843] Bluetooth: hci3: command tx timeout
[   74.399977][ T5841] Bluetooth: hci1: command tx timeout
[   74.405375][ T5838] Bluetooth: hci2: command tx timeout
[   74.411570][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.413723][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.435620][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.458811][ T5838] Bluetooth: hci4: command tx timeout
[   74.464473][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.487324][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.544354][ T5832] team0: Port device team_slave_0 added
[   74.571151][ T5832] team0: Port device team_slave_1 added
[   74.638038][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.648222][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.660501][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.679050][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.686034][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.712143][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.730023][ T5842] hsr_slave_0: entered promiscuous mode
[   74.737454][ T5842] hsr_slave_1: entered promiscuous mode
[   74.743666][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.751620][ T5842] Cannot create hsr debugfs directory
[   74.761407][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.773557][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.782231][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.808743][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.960587][ T5832] hsr_slave_0: entered promiscuous mode
[   74.966964][ T5832] hsr_slave_1: entered promiscuous mode
[   74.973476][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.981324][ T5832] Cannot create hsr debugfs directory
[   75.094901][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.114904][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.125525][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.153736][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.219181][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.239634][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.254274][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.266277][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.330558][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.341949][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.354721][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.364819][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.437372][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.447475][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.471204][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.485931][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.514463][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.530047][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   75.578358][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.585770][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.602599][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.627166][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.634303][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.704854][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   75.716849][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.747002][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.754145][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.788034][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.795199][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.812951][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.849370][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   75.886171][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.897209][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.923952][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.931167][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.942719][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.949898][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.972765][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   75.993718][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.000909][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.025566][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.032854][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.087389][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.157985][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   76.206667][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.213851][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.223575][ T5838] Bluetooth: hci0: command tx timeout
[   76.225828][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.236114][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.301872][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.322574][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.378204][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.459901][ T5838] Bluetooth: hci1: command tx timeout
[   76.465383][ T5838] Bluetooth: hci2: command tx timeout
[   76.471831][ T5843] Bluetooth: hci3: command tx timeout
[   76.527200][ T5827] veth0_vlan: entered promiscuous mode
[   76.539125][ T5838] Bluetooth: hci4: command tx timeout
[   76.572672][ T5827] veth1_vlan: entered promiscuous mode
[   76.621109][ T5833] veth0_vlan: entered promiscuous mode
[   76.631569][ T5827] veth0_macvtap: entered promiscuous mode
[   76.641208][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.655853][ T5833] veth1_vlan: entered promiscuous mode
[   76.671617][ T5827] veth1_macvtap: entered promiscuous mode
[   76.738269][ T5833] veth0_macvtap: entered promiscuous mode
[   76.761450][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.773529][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.803702][ T5836] veth0_vlan: entered promiscuous mode
[   76.817445][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.827120][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.837266][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.846302][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.861205][ T5833] veth1_macvtap: entered promiscuous mode
[   76.885497][ T5836] veth1_vlan: entered promiscuous mode
[   76.894040][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.904855][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.918065][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.949168][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.959820][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.972288][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.005160][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.018009][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.050847][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.060059][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.074834][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.083873][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.133897][ T5836] veth0_macvtap: entered promiscuous mode
[   77.187766][ T5836] veth1_macvtap: entered promiscuous mode
[   77.263153][ T5832] veth0_vlan: entered promiscuous mode
[   77.286548][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.305154][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.309447][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.322218][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.332953][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.346151][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.357400][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.390486][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.401719][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.412916][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.424842][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.436251][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.450888][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.459799][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.468509][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.478183][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.500113][ T5832] veth1_vlan: entered promiscuous mode
[   77.544273][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.560912][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.574957][ T5842] veth0_vlan: entered promiscuous mode
[   77.575382][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.590942][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.634062][ T5832] veth0_macvtap: entered promiscuous mode
[   77.663515][ T5842] veth1_vlan: entered promiscuous mode
[   77.686205][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.714142][ T5832] veth1_macvtap: entered promiscuous mode
[   77.729924][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.733005][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.738024][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.759828][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.814605][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.860532][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.871332][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.882233][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.892476][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.903251][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.915057][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.926933][ T5842] veth0_macvtap: entered promiscuous mode
[   77.961607][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.975727][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.995499][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.040622][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.127095][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.167484][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.180622][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.194803][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.216829][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.338240][ T5838] Bluetooth: hci0: command tx timeout
[   78.502323][ T5842] veth1_macvtap: entered promiscuous mode
[   78.538829][ T5838] Bluetooth: hci1: command tx timeout
[   78.544655][ T5838] Bluetooth: hci2: command tx timeout
[   78.549056][ T5843] Bluetooth: hci3: command tx timeout
[   78.623483][ T5843] Bluetooth: hci4: command tx timeout
[   78.697034][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.706116][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.715364][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.728758][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.811726][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.859371][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.882194][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.901477][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.918058][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.935738][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.946768][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.968820][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.991844][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.010224][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   79.045315][ T5916] vlan2: entered promiscuous mode
[   79.053469][ T5916] team0: entered promiscuous mode
[   79.058543][ T5916] team_slave_0: entered promiscuous mode
[   79.073819][ T5916] team_slave_1: entered promiscuous mode
[   79.087664][ T5916] team0: Device vlan2 is already an upper device of the team interface
[   79.106341][ T5916] team0: left promiscuous mode
[   79.112892][ T5916] team_slave_0: left promiscuous mode
[   79.126308][ T5916] team_slave_1: left promiscuous mode
[   79.221373][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.258472][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.284473][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.295030][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.308513][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.319142][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.573611][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.770157][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.912176][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.919473][ T5904] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.990719][    T0] NOHZ tick-stop error: local softirq work is pending, handler #141!!!
[   79.999300][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   80.050806][ T5927] misc userio: No port type given on /dev/userio
[   80.111791][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.121102][ T5904] usb 4-1: Using ep0 maxpacket: 8
[   80.143822][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.154294][ T5904] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.168693][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.186058][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.202907][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   80.202916][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.247733][ T5904] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   80.261526][ T5904] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   80.271450][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.299923][ T5930] nlmon0: entered promiscuous mode
[   80.305329][ T5930] vlan2: entered promiscuous mode
[   80.311093][ T5930] vlan2: entered allmulticast mode
[   80.316244][ T5930] nlmon0: entered allmulticast mode
[   80.323543][ T5930] nlmon0: left allmulticast mode
[   80.328768][ T5930] nlmon0: left promiscuous mode
[   80.371169][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.389572][ T5843] Bluetooth: hci0: command tx timeout
[   80.444865][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.468884][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.544048][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.562368][ T5904] usb 4-1: GET_CAPABILITIES returned 0
[   80.578394][ T5904] usbtmc 4-1:16.0: can't read capabilities
[   80.619051][ T5843] Bluetooth: hci2: command tx timeout
[   80.624518][ T5843] Bluetooth: hci3: command tx timeout
[   80.631183][ T5841] Bluetooth: hci1: command tx timeout
[   80.663441][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.684070][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.701789][ T5843] Bluetooth: hci4: command tx timeout
[   80.731637][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.739607][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.868352][ T5903] kernel write not supported for file /usbtmc0 (pid: 5903 comm: kworker/1:5)
[   81.502398][ T5945] xt_hashlimit: size too large, truncated to 1048576
[   82.156323][ T5830] usb 4-1: USB disconnect, device number 2
[   82.651394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.958981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[   83.061020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.497706][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.511267][ T5957] xt_ecn: cannot match TCP bits for non-tcp packets
[   87.275017][   T25] cfg80211: failed to load regulatory.db
[   87.317306][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   88.349212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c3!!!
[   88.364319][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   88.385728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.488190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.629888][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.948703][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'.
[   89.426212][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.655119][ T5996] mmap: syz.1.22 (5996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.369630][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[   90.746500][ T6003] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   90.772833][ T6003] CIFS mount error: No usable UNC path provided in device string!
[   90.772833][ T6003] 
[   90.783157][ T6003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   92.508004][    T8] IPVS: starting estimator thread 0...
[   92.783076][ T6019] IPVS: using max 22 ests per chain, 52800 per kthread
[   96.278777][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.627205][ T6055] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.504037][ T6066] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   98.518144][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'.
[   98.536850][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.439549][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.774490][ T6076] netlink: 'syz.2.44': attribute type 2 has an invalid length.
[   99.782507][ T6076] netlink: 244 bytes leftover after parsing attributes in process `syz.2.44'.
[  101.084710][ T6088] netlink: 'syz.3.46': attribute type 32 has an invalid length.
[  104.565404][ T6113] tipc: Started in network mode
[  104.570993][ T6113] tipc: Node identity 5, cluster identity 4711
[  104.577294][ T6113] tipc: Node number set to 5
[  107.173918][ T6135] netlink: 'syz.4.52': attribute type 21 has an invalid length.
[  107.194742][ T6136] Mount JFS Failure: -22
[  107.199241][ T6136] jfs_mount failed w/return code = -22
[  114.401176][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'.
[  115.183404][ T6174] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  115.191541][ T6174] syz.3.66: attempt to access beyond end of device
[  115.191541][ T6174] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  116.324330][ T6188] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  116.333017][ T6188] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  116.488772][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.643115][   T25] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  116.652942][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.683562][   T25] usb 2-1: Product: syz
[  116.701796][   T25] usb 2-1: Manufacturer: syz
[  116.932555][   T25] usb 2-1: SerialNumber: syz
[  116.941349][   T25] usb 2-1: config 0 descriptor??
[  117.748394][   T25] usb 2-1: USB disconnect, device number 3
[  117.877275][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.239946][ T6230] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.274671][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'.
[  122.339631][   T29] audit: type=1326 audit(1730614425.553:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.519177][   T29] audit: type=1326 audit(1730614425.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.519490][   T29] audit: type=1326 audit(1730614425.733:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.519663][   T29] audit: type=1326 audit(1730614425.733:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.519975][   T29] audit: type=1326 audit(1730614425.733:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.520231][   T29] audit: type=1326 audit(1730614425.733:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.524843][   T29] audit: type=1326 audit(1730614425.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.525062][   T29] audit: type=1326 audit(1730614425.733:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.525242][   T29] audit: type=1326 audit(1730614425.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  122.526013][   T29] audit: type=1326 audit(1730614425.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6238 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f45cd77e719 code=0x7ffc0000
[  128.331677][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  128.331698][   T29] audit: type=1326 audit(1730614431.533:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6274 comm="syz.4.93" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6c297e719 code=0x0
[  130.328132][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'.
[  132.140912][ T6290] capability: warning: `syz.3.97' uses 32-bit capabilities (legacy support in use)
[  132.241164][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[  132.814013][ T6307] usb usb8: usbfs: process 6307 (syz.4.99) did not claim interface 0 before use
[  133.200946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.668179][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.958104][ T6313] netlink: 'syz.0.100': attribute type 21 has an invalid length.
[  137.347603][ T6329] batadv0: entered promiscuous mode
[  137.451872][ T6329] bridge0: entered promiscuous mode
[  137.492193][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  139.969041][ T6349] syz.0.111: attempt to access beyond end of device
[  139.969041][ T6349] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  139.982542][ T6349] gfs2: error -5 reading superblock
[  142.757921][ T6364] sit0: entered promiscuous mode
[  143.817527][ T6364] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[  143.826164][ T6364] netlink: 1 bytes leftover after parsing attributes in process `syz.1.114'.
[  145.625809][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.123'.
[  149.119466][ T6425] Zero length message leads to an empty skb
[  150.347646][ T5952] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  150.585724][ T5952] usb 1-1: Using ep0 maxpacket: 8
[  150.634058][ T5952] usb 1-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd
[  150.713479][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.096807][ T5952] usb 1-1: config 0 descriptor??
[  151.320145][ T6447] ubi0: attaching mtd0
[  151.324622][ T6447] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71)
[  151.922073][ T6449] netlink: 'syz.0.132': attribute type 23 has an invalid length.
[  153.211614][ T6458] =======================================================
[  153.211614][ T6458] WARNING: The mand mount option has been deprecated and
[  153.211614][ T6458]          and is ignored by this kernel. Remove the mand
[  153.211614][ T6458]          option from the mount to silence this warning.
[  153.211614][ T6458] =======================================================
[  154.376589][ T5881] usb 1-1: USB disconnect, device number 2
[  154.731968][ T6466] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  157.241967][ T6479] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  158.059036][ T3445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.602657][   T29] audit: type=1326 audit(1730614461.813:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.0.150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55d517e719 code=0x0
[  158.826830][ T3445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.286983][ T3445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.442923][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.457888][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.503010][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.512713][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.521561][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.579284][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.736405][ T6525] netlink: 'syz.2.155': attribute type 2 has an invalid length.
[  161.744474][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'.
[  161.785281][ T3445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.961098][ T6532] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  162.000010][ T6532] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  162.039834][ T6532] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  162.309709][ T6537] input: syz0 as /devices/virtual/input/input5
[  164.225489][ T5841] Bluetooth: hci2: command tx timeout
[  164.815190][ T3445] bridge_slave_1: left allmulticast mode
[  164.823883][ T3445] bridge_slave_1: left promiscuous mode
[  164.836170][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.909928][ T6554] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  165.852989][ T3445] bridge_slave_0: left allmulticast mode
[  165.862276][ T3445] bridge_slave_0: left promiscuous mode
[  165.909086][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.029980][ T6550] kvm: emulating exchange as write
[  166.766365][ T6565] netlink: 'syz.2.164': attribute type 32 has an invalid length.
[  166.780457][ T5841] Bluetooth: hci2: command tx timeout
[  168.016771][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.058449][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.094957][ T3445] bond0 (unregistering): Released all slaves
[  168.113284][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[  168.129565][ T6547] dummy0: entered promiscuous mode
[  168.409460][ T6547] dummy0: left promiscuous mode
[  168.882044][ T6577] team0: entered promiscuous mode
[  168.930069][ T6577] team_slave_0: entered promiscuous mode
[  168.935948][ T6577] team_slave_1: entered promiscuous mode
[  168.942788][ T5843] Bluetooth: hci2: command tx timeout
[  169.045229][ T6577] dummy0: entered promiscuous mode
[  170.536508][ T6577] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  170.558839][ T6577] Cannot create hsr debugfs directory
[  170.748800][ T6594] process 'syz.0.171' launched './file0' with NULL argv: empty string added
[  171.018666][ T5843] Bluetooth: hci2: command tx timeout
[  173.091826][ T6617] Driver unsupported XDP return value 0 on prog  (id 50) dev N/A, expect packet loss!
[  175.141324][ T3445] hsr_slave_0: left promiscuous mode
[  175.286104][ T3445] hsr_slave_1: left promiscuous mode
[  176.084122][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.318909][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.369667][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.377305][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.903228][ T3445] veth1_macvtap: left promiscuous mode
[  176.918667][ T3445] veth0_macvtap: left promiscuous mode
[  176.936397][ T3445] veth1_vlan: left promiscuous mode
[  176.958944][ T3445] veth0_vlan: left promiscuous mode
[  177.423638][ T6657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.185'.
[  178.353790][ T3445] team0 (unregistering): Port device team_slave_1 removed
[  178.461263][ T3445] team0 (unregistering): Port device team_slave_0 removed
[  178.512413][ T6662] kernel read not supported for file /rmdF¼ì (pid: 6662 comm: syz.3.186)
[  178.531997][   T29] audit: type=1800 audit(1730614481.743:16): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.186" name=726D64461716BCEC dev="mqueue" ino=11302 res=0 errno=0
[  180.394466][ T6513] chnl_net:caif_netlink_parms(): no params data found
[  180.485676][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[  180.938833][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.946006][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.150167][ T6513] bridge_slave_0: entered allmulticast mode
[  181.157109][ T6513] bridge_slave_0: entered promiscuous mode
[  181.190038][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.216359][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.227281][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.439165][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.451567][ T6513] bridge_slave_1: entered allmulticast mode
[  181.477578][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.501413][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.512990][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  181.525178][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.860258][ T6513] bridge_slave_1: entered promiscuous mode
[  183.386772][ T6513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.432835][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'.
[  183.453320][ T6513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.688805][ T5843] Bluetooth: hci4: command tx timeout
[  183.783124][ T6513] team0: Port device team_slave_0 added
[  183.874249][ T6513] team0: Port device team_slave_1 added
[  183.885611][ T6679] chnl_net:caif_netlink_parms(): no params data found
[  184.098680][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  184.121386][ T3445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.152529][ T6513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.162090][ T6513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.193236][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.202482][ T6513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.202631][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.224325][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.238910][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.257258][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  184.266909][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.276027][ T5881] usb 4-1: Using ep0 maxpacket: 8
[  184.306270][ T3445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.308095][ T5881] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  184.326192][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.334896][ T5881] usb 4-1: Product: syz
[  184.339870][ T5881] usb 4-1: Manufacturer: syz
[  184.345050][ T5881] usb 4-1: SerialNumber: syz
[  184.358635][ T5881] usb 4-1: config 0 descriptor??
[  184.381954][ T6513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.392653][ T6513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.419147][ T6513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.480017][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.487341][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.495065][ T6679] bridge_slave_0: entered allmulticast mode
[  184.504296][ T6679] bridge_slave_0: entered promiscuous mode
[  184.576511][ T5881] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  184.587187][ T3445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.605477][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.627384][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.637527][ T6679] bridge_slave_1: entered allmulticast mode
[  184.651779][ T6679] bridge_slave_1: entered promiscuous mode
[  184.803308][ T3445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.821512][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.864832][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.935829][ T6513] hsr_slave_0: entered promiscuous mode
[  184.964983][ T6513] hsr_slave_1: entered promiscuous mode
[  184.971841][ T6513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.980138][ T6513] Cannot create hsr debugfs directory
[  185.002646][ T6679] team0: Port device team_slave_0 added
[  185.013414][ T6679] team0: Port device team_slave_1 added
[  185.139563][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.165594][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.209735][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.228702][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.237019][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.266847][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.002784][ T5843] Bluetooth: hci4: command tx timeout
[  186.317936][ T3445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.384940][ T5843] Bluetooth: hci0: command tx timeout
[  186.584095][ T5881] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  186.662474][ T5881] usb 4-1: USB disconnect, device number 3
[  187.137698][ T6679] hsr_slave_0: entered promiscuous mode
[  187.144320][ T6679] hsr_slave_1: entered promiscuous mode
[  187.151352][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.159215][ T6679] Cannot create hsr debugfs directory
[  187.280629][ T3445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.216642][ T5843] Bluetooth: hci4: command tx timeout
[  188.279794][ T3445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.492652][ T6513] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  188.506805][ T6513] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  188.513759][ T5843] Bluetooth: hci0: command tx timeout
[  188.555679][ T5881] IPVS: starting estimator thread 0...
[  188.738988][ T3445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.754337][ T6513] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  188.783342][ T6513] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.799242][ T6752] IPVS: using max 17 ests per chain, 40800 per kthread
[  188.863717][ T6754] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  189.185924][ T6710] chnl_net:caif_netlink_parms(): no params data found
[  189.797348][ T5834] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  189.873551][ T6513] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.089913][ T3445] bridge_slave_1: left allmulticast mode
[  190.095632][ T3445] bridge_slave_1: left promiscuous mode
[  190.117183][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.137632][ T3445] bridge_slave_0: left allmulticast mode
[  190.146269][ T3445] bridge_slave_0: left promiscuous mode
[  190.176863][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.207409][ T3445] bridge_slave_1: left allmulticast mode
[  190.216427][ T3445] bridge_slave_1: left promiscuous mode
[  190.222631][ T5834] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  190.232844][ T5834] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  190.241977][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.250056][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.271827][ T5834] gspca_main: stv0680-2.14.0 probing 041e:4007
[  190.298128][ T3445] bridge_slave_0: left allmulticast mode
[  190.308123][ T5843] Bluetooth: hci4: command tx timeout
[  190.322696][ T3445] bridge_slave_0: left promiscuous mode
[  190.329952][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.414464][ T6774] capability: warning: `syz.2.203' uses deprecated v2 capabilities in a way that may be insecure
[  190.538654][ T5843] Bluetooth: hci0: command tx timeout
[  190.851530][ T6776] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  191.182132][ T3445] bridge0 (unregistering): left promiscuous mode
[  191.341945][ T5834] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  191.362958][ T5834] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  191.373639][ T5834] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  191.382630][ T5834] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  191.415192][ T5834] usb 4-1: USB disconnect, device number 4
[  191.466884][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.507716][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.529975][ T3445] bond0 (unregistering): Released all slaves
[  192.392114][ T6780] slcan: can't register candev
[  192.470753][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.516737][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.529967][ T6784] loop7: detected capacity change from 0 to 1036
[  192.556334][ T3445] bond0 (unregistering): Released all slaves
[  192.621889][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.630860][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.638150][ T6710] bridge_slave_0: entered allmulticast mode
[  192.646217][ T6710] bridge_slave_0: entered promiscuous mode
[  192.655106][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.662669][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.670286][ T6710] bridge_slave_1: entered allmulticast mode
[  192.677646][ T6710] bridge_slave_1: entered promiscuous mode
[  192.687794][ T5843] Bluetooth: hci0: command tx timeout
[  193.304104][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.613341][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.697087][ T6513] 8021q: adding VLAN 0 to HW filter on device team0
[  193.916751][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.923991][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.080509][ T6710] team0: Port device team_slave_0 added
[  194.090568][ T6710] team0: Port device team_slave_1 added
[  194.131294][ T6797] warning: `syz.3.210' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  194.577523][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.583952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.760565][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.767832][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.145041][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.152491][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.179285][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.193034][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.201265][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.233912][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.465048][ T6710] hsr_slave_0: entered promiscuous mode
[  195.473971][ T6710] hsr_slave_1: entered promiscuous mode
[  195.483839][ T6710] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.491866][ T6710] Cannot create hsr debugfs directory
[  196.065863][ T6679] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  196.620380][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  196.627690][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  197.327447][ T6679] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  197.613085][ T6679] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  198.249852][ T3445] hsr_slave_0: left promiscuous mode
[  198.265849][ T3445] hsr_slave_1: left promiscuous mode
[  198.279691][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.287655][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.395682][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.269331][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.299411][ T3445] batadv0: left promiscuous mode
[  199.383951][ T3445] hsr_slave_0: left promiscuous mode
[  199.391253][ T3445] hsr_slave_1: left promiscuous mode
[  199.405101][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.428733][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.506852][ T3445] veth1_macvtap: left promiscuous mode
[  199.512697][ T3445] veth0_macvtap: left promiscuous mode
[  199.518344][ T3445] veth1_vlan: left promiscuous mode
[  199.526252][ T3445] veth0_vlan: left promiscuous mode
[  199.540528][ T3445] veth1_macvtap: left promiscuous mode
[  199.546146][ T3445] veth0_macvtap: left promiscuous mode
[  199.562180][ T3445] veth1_vlan: left promiscuous mode
[  199.567636][ T3445] veth0_vlan: left promiscuous mode
[  199.682865][ T6846] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  199.682865][ T6846]    program syz.2.218 not setting count and/or reply_len properly
[  201.170343][ T3445] team0 (unregistering): Port device team_slave_1 removed
[  201.218700][ T3445] team0 (unregistering): Port device team_slave_0 removed
[  202.727209][ T3445] team0 (unregistering): Port device team_slave_1 removed
[  202.767902][ T3445] team0 (unregistering): Port device team_slave_0 removed
[  203.130419][ T6679] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  203.178465][ T6513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.563260][ T6868] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  203.736517][ T6871] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  203.829838][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.006469][ T6710] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  204.441017][ T6710] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  204.491756][ T6710] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  204.540946][ T6710] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  205.532872][ T6679] 8021q: adding VLAN 0 to HW filter on device team0
[  205.725184][ T6679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.735828][ T6679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.816122][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.823305][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.867427][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.874623][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.452073][ T6897] binder: 6894:6897 ioctl c0306201 0 returned -14
[  207.657580][ T6513] veth0_vlan: entered promiscuous mode
[  207.701517][ T6513] veth1_vlan: entered promiscuous mode
[  207.725463][ T6513] veth0_macvtap: entered promiscuous mode
[  207.734739][ T6513] veth1_macvtap: entered promiscuous mode
[  207.752828][ T6513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.763655][ T6513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.774190][ T6513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.785212][ T6513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.797209][ T6513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.822572][ T6513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.836345][ T6513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.851010][ T6513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.861634][ T6513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.874170][ T6513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.884515][ T6513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.893531][ T6513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.902663][ T6513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.911473][ T6513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.139388][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.346962][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.989794][ T6710] 8021q: adding VLAN 0 to HW filter on device team0
[  209.041808][ T6900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  209.077467][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.128312][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.156310][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.163532][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.211655][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.219084][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.199888][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.207778][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.226677][ T3445] IPVS: stop unused estimator thread 0...
[  210.448650][ T6679] veth0_vlan: entered promiscuous mode
[  210.460221][ T6679] veth1_vlan: entered promiscuous mode
[  210.482908][ T6679] veth0_macvtap: entered promiscuous mode
[  210.492236][ T6679] veth1_macvtap: entered promiscuous mode
[  210.509561][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.520235][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.530223][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.541194][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.553057][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.567606][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.579188][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.626314][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.637484][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.747715][ T6940] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  211.172320][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.211466][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.260951][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.295756][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.337079][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.443697][ T6679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.490150][ T6679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.499573][ T6679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.508312][ T6679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.543009][ T5841] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  211.637754][ T6317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.683658][ T6951] mkiss: ax0: crc mode is auto.
[  211.698842][ T6317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.870107][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.892140][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.941377][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.785575][ T6990] syz.4.191: attempt to access beyond end of device
[  213.785575][ T6990] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0
[  213.799862][ T6990] hfsplus: unable to find HFS+ superblock
[  213.858101][ T6990] zonefs (nbd4) ERROR: Not a zoned block device
[  215.775447][ T6710] veth0_vlan: entered promiscuous mode
[  215.826094][ T6710] veth1_vlan: entered promiscuous mode
[  216.807847][ T6710] veth0_macvtap: entered promiscuous mode
[  216.857586][ T6710] veth1_macvtap: entered promiscuous mode
[  217.094100][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.106706][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.117215][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.128341][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.138985][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.195281][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.236702][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.270480][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.292928][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.306064][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.316908][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.327368][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.338156][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.348813][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.359642][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.369756][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.380572][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.392902][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.403352][ T6710] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.412449][ T6710] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.421577][ T6710] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.430372][ T6710] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.823658][ T6317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.831602][ T6317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.050982][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.061463][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.520428][ T7061] tmpfs: Bad value for 'smackfshat'
[  224.460028][   T29] audit: type=1326 audit(1730614527.673:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  224.558749][   T29] audit: type=1326 audit(1730614527.673:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  224.626283][   T29] audit: type=1326 audit(1730614527.673:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  225.371419][   T29] audit: type=1326 audit(1730614527.673:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  226.608641][   T29] audit: type=1326 audit(1730614527.673:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  226.729420][   T29] audit: type=1326 audit(1730614527.673:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  226.771856][   T29] audit: type=1326 audit(1730614527.673:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  227.288823][   T29] audit: type=1326 audit(1730614527.673:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  227.732649][   T29] audit: type=1326 audit(1730614527.673:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x7ffc0000
[  228.071832][   T29] audit: type=1326 audit(1730614527.673:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.6.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95def7d0b0 code=0x7ffc0000
[  228.264364][ T7127] vivid-003: =================  START STATUS  =================
[  228.279230][ T7127] vivid-003: Radio HW Seek Mode: Bounded
[  228.285384][ T7127] vivid-003: Radio Programmable HW Seek: false
[  228.292562][ T7127] vivid-003: RDS Rx I/O Mode: Block I/O
[  228.298993][ T7127] vivid-003: Generate RBDS Instead of RDS: false
[  228.305820][ T7127] vivid-003: RDS Reception: true
[  228.311553][ T7127] vivid-003: RDS Program Type: 0 inactive
[  228.317733][ T7127] vivid-003: RDS PS Name:  inactive
[  228.323851][ T7127] vivid-003: RDS Radio Text:  inactive
[  228.330234][ T7127] vivid-003: RDS Traffic Announcement: false inactive
[  228.337408][ T7127] vivid-003: RDS Traffic Program: false inactive
[  228.344497][ T7127] vivid-003: RDS Music: false inactive
[  228.350735][ T7127] vivid-003: ==================  END STATUS  ==================
[  228.671961][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  229.225819][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[  229.235382][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[  229.606250][ T5881] usb 5-1: Using ep0 maxpacket: 32
[  231.050548][ T7146] program syz.6.268 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.065590][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71
[  232.098673][ T5881] usb 5-1: can't read configurations, error -71
[  232.218670][ T5879] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  234.410340][ T5879] usb 4-1: device descriptor read/all, error -71
[  237.514488][ T7211] mmap: syz.3.280 (7211): VmData 41779200 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  246.588615][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  246.588634][   T29] audit: type=1804 audit(1730614549.783:36): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.292" name="/newroot/16/bus/bus" dev="overlay" ino=111 res=1 errno=0
[  247.078062][ T7272] Invalid ELF header magic: != ELF
[  247.396658][ T7293] Bluetooth: MGMT ver 1.23
[  248.883982][ T7303] random: crng reseeded on system resumption
[  250.099285][ T7303] netlink: 'syz.4.299': attribute type 2 has an invalid length.
[  250.107517][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'.
[  250.487749][ T7327] binder: BINDER_SET_CONTEXT_MGR already set
[  250.494482][ T7327] binder: 7326:7327 ioctl 4018620d 20000040 returned -16
[  250.511663][ T7327] binder: 7326:7327 ioctl c018620b 20000380 returned -14
[  253.390777][ T7359] syz.3.307: attempt to access beyond end of device
[  253.390777][ T7359] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0
[  253.404992][ T7359] ADFS-fs (nbd3): error: unable to read block 3, try 0
[  254.005125][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.309'.
[  256.049708][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.056256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  257.358314][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'.
[  259.624458][ T7433] batman_adv: batadv0: Adding interface: dummy0
[  259.858734][ T7433] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.923714][ T7433] batman_adv: batadv0: Interface activated: dummy0
[  260.228040][ T7438] batadv0: mtu less than device minimum
[  260.241124][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.254298][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.267026][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.279814][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.292499][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.305080][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.317799][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.330517][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.343172][ T7438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  260.498294][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'.
[  262.271906][ T7469] syz.6.332: attempt to access beyond end of device
[  262.271906][ T7469] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  262.285340][ T7469] (syz.6.332,7469,1):ocfs2_get_sector:1769 ERROR: status = -5
[  262.293015][ T7469] (syz.6.332,7469,1):ocfs2_sb_probe:749 ERROR: status = -5
[  262.300420][ T7469] (syz.6.332,7469,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  262.309070][ T7469] (syz.6.332,7469,1):ocfs2_fill_super:1178 ERROR: status = -5
[  263.040416][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'.
[  263.606941][ T5841] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  264.782107][ T7495] Bluetooth: MGMT ver 1.23
[  265.759955][   T46] libceph: connect (1)[c::]:6789 error -101
[  265.766732][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  265.965398][ T7491] ceph: No mds server is up or the cluster is laggy
[  266.074799][   T46] libceph: connect (1)[c::]:6789 error -101
[  266.555031][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  267.373134][ T5830] libceph: connect (1)[c::]:6789 error -101
[  267.380260][ T5830] libceph: mon0 (1)[c::]:6789 connect error
[  270.152718][ T7545] kernel read not supported for file /cpuset.effective_mems (pid: 7545 comm: syz.5.345)
[  270.166768][   T29] audit: type=1800 audit(1730614573.373:37): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.345" name="cpuset.effective_mems" dev="mqueue" ino=15570 res=0 errno=0
[  270.187165][    C1] vkms_vblank_simulate: vblank timer overrun
[  272.678732][ T7569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  274.888468][ T7587] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  274.888468][ T7587]    program syz.5.353 not setting count and/or reply_len properly
[  275.282420][ T7591] trusted_key: syz.3.356 sent an empty control message without MSG_MORE.
[  279.160381][   T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  279.489005][   T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  279.886982][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.260592][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.270596][   T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  280.287716][   T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  280.417297][ T7636] IPv6: NLM_F_REPLACE set, but no existing node found!
[  280.720772][   T46] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  281.040950][   T46] usb 5-1: Manufacturer: syz
[  281.052896][   T46] usb 5-1: config 0 descriptor??
[  281.327290][ T7644] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  281.327290][ T7644]    program syz.3.369 not setting count and/or reply_len properly
[  281.360190][ T7643] fuse: Bad value for 'fd'
[  284.377424][   T46] usbhid 5-1:0.0: can't add hid device: -71
[  284.384825][   T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  284.394645][   T46] usb 5-1: USB disconnect, device number 4
[  284.480897][ T7666] fuse: Unknown parameter 'group_i00000000000000000000'
[  286.039133][ T7669] trusted_key: encrypted_key: insufficient parameters specified
[  286.722912][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.377'.
[  287.089833][ T7692] syz.6.377 uses obsolete (PF_INET,SOCK_PACKET)
[  288.791587][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  289.660349][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  289.902687][   T25] usb 3-1: Using ep0 maxpacket: 8
[  290.259387][   T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  290.373526][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  290.385250][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.658801][   T25] usb 3-1: Product: syz
[  290.663552][   T25] usb 3-1: Manufacturer: syz
[  290.669043][   T25] usb 3-1: SerialNumber: syz
[  290.760455][   T25] usb 3-1: config 0 descriptor??
[  290.776522][   T46] usb 5-1: Using ep0 maxpacket: 8
[  290.787963][   T46] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  290.803741][   T46] usb 5-1: config 0 has too many interfaces: 241, using maximum allowed: 32
[  290.992168][   T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  291.021572][   T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 241
[  291.493331][   T46] usb 5-1: config 0 has no interface number 0
[  291.500108][   T46] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  291.523336][   T46] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  291.538381][   T46] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  291.582595][   T46] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  291.614468][   T46] usb 5-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0
[  291.675241][   T46] usb 5-1: Product: syz
[  291.729678][   T46] usb 5-1: Manufacturer: syz
[  292.539142][   T46] usb 5-1: config 0 descriptor??
[  292.578325][ T7718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  292.590494][   T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  292.617656][   T25] usb 3-1: USB disconnect, device number 3
[  292.632258][ T7741] netlink: 'syz.6.389': attribute type 3 has an invalid length.
[  293.309177][   T46] usb 5-1: USB disconnect, device number 5
[  293.739228][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  294.178933][ T5830] usb 6-1: Using ep0 maxpacket: 32
[  294.186065][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  294.198254][ T5830] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13
[  294.217974][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.227663][ T5830] usb 6-1: Product: syz
[  294.317013][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'.
[  294.437823][ T7767] netlink: 72 bytes leftover after parsing attributes in process `syz.2.396'.
[  294.455002][ T5830] usb 6-1: Manufacturer: syz
[  294.460034][ T5830] usb 6-1: SerialNumber: syz
[  294.485074][ T5830] usb 6-1: config 0 descriptor??
[  294.495082][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400
[  294.502227][ T5830] pvrusb2: **********
[  294.507238][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  294.523532][ T5830] pvrusb2: Important functionality might not be entirely working.
[  294.532803][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  294.561384][ T5830] pvrusb2: **********
[  294.806350][ T2334] pvrusb2: Invalid write control endpoint
[  295.989915][   T46] usb 6-1: USB disconnect, device number 2
[  296.924794][ T2334] pvrusb2: Invalid write control endpoint
[  297.749095][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  297.822566][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  297.850024][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  297.880737][ T2334] pvrusb2: Device being rendered inoperable
[  297.900230][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  297.917678][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  297.942433][ T2334] pvrusb2: Attached sub-driver cx25840
[  297.948136][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  297.978547][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  301.531531][ T7821] net_ratelimit: 10 callbacks suppressed
[  301.531585][ T7821] dccp_close: ABORT with 20 bytes unread
[  303.253479][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  304.037494][ T7846] lo speed is unknown, defaulting to 1000
[  304.044232][ T7846] lo speed is unknown, defaulting to 1000
[  304.053060][ T7846] lo speed is unknown, defaulting to 1000
[  304.064547][ T7846] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  304.079152][ T7846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  304.332933][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[  305.106872][ T7846] lo speed is unknown, defaulting to 1000
[  305.185478][ T7846] lo speed is unknown, defaulting to 1000
[  305.191848][ T7859] syz.4.413 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  305.265182][ T7860] bad cache= option: none

[  305.265182][ T7860] 
[  305.273142][ T7860] CIFS: VFS: bad cache= option: none

[  305.538589][ T7846] lo speed is unknown, defaulting to 1000
[  305.962153][ T7846] lo speed is unknown, defaulting to 1000
[  306.016363][ T7846] lo speed is unknown, defaulting to 1000
[  306.043411][ T7858] netlink: 'syz.2.414': attribute type 10 has an invalid length.
[  306.121418][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.130718][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.381562][ T7873] No such timeout policy "syz0"
[  307.250362][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.257545][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.265925][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.273072][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.705482][ T7858] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  307.843123][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  307.854158][ T7863] bridge_slave_1: left allmulticast mode
[  307.999285][ T7863] bridge_slave_1: left promiscuous mode
[  308.005150][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.290786][ T7863] bridge_slave_0: left allmulticast mode
[  308.299260][ T7863] bridge_slave_0: left promiscuous mode
[  308.305081][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.895997][ T7863] bond0: (slave bridge0): Releasing backup interface
[  312.048701][   T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  312.233590][   T46] usb 3-1: Using ep0 maxpacket: 8
[  312.242692][   T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.344615][   T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  312.601430][   T46] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  312.837187][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.928579][   T46] usb 3-1: Product: syz
[  313.666765][   T46] usb 3-1: Manufacturer: syz
[  313.671570][   T46] usb 3-1: SerialNumber: syz
[  313.694401][ T3529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.700773][   T46] usb 3-1: config 0 descriptor??
[  313.855459][ T3529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.196315][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.230824][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.259868][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.332297][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.437'.
[  314.417587][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.428141][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  314.436831][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  315.053744][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.063460][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.107124][ T3529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.131870][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.140270][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.147982][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  315.156568][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.158808][ T7954] netlink: 256 bytes leftover after parsing attributes in process `syz.6.437'.
[  315.192189][ T7955] lo speed is unknown, defaulting to 1000
[  315.322205][ T3529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.396652][ T7966] ALSA: mixer_oss: invalid OSS volume ''
[  315.432951][ T7946] lo speed is unknown, defaulting to 1000
[  316.575776][ T5841] Bluetooth: hci2: command tx timeout
[  316.699002][    T8] usb 3-1: USB disconnect, device number 4
[  316.858047][ T7955] chnl_net:caif_netlink_parms(): no params data found
[  316.887077][ T3529] bridge_slave_1: left allmulticast mode
[  316.898634][ T3529] bridge_slave_1: left promiscuous mode
[  316.904441][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.930985][ T3529] bridge_slave_0: left allmulticast mode
[  316.942801][ T3529] bridge_slave_0: left promiscuous mode
[  317.058315][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.962115][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.968862][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.989795][ T5841] Bluetooth: hci4: command tx timeout
[  318.639234][ T5841] Bluetooth: hci2: command tx timeout
[  320.348639][ T5841] Bluetooth: hci4: command tx timeout
[  320.847543][ T5841] Bluetooth: hci2: command tx timeout
[  321.472466][ T5947] kernel write not supported for file /dsp (pid: 5947 comm: kworker/1:7)
[  322.001416][ T8025] netlink: 'syz.6.448': attribute type 11 has an invalid length.
[  322.017834][ T8025] netlink: 210876 bytes leftover after parsing attributes in process `syz.6.448'.
[  322.058866][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  322.190862][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.205537][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.217649][ T3529] bond0 (unregistering): Released all slaves
[  322.236177][    T8] usb 3-1: no configurations
[  322.249681][ T8008] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  322.299099][    T8] usb 3-1: can't read configurations, error -22
[  322.378878][ T5843] Bluetooth: hci4: command tx timeout
[  322.468577][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  322.858722][ T5843] Bluetooth: hci2: command tx timeout
[  324.639348][ T5843] Bluetooth: hci4: command tx timeout
[  325.793247][    T8] usb 3-1: device descriptor read/all, error -71
[  325.801762][    T8] usb usb3-port1: attempt power cycle
[  326.066175][ T7946] chnl_net:caif_netlink_parms(): no params data found
[  328.850496][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.857840][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.770970][ T7955] bridge_slave_0: entered allmulticast mode
[  329.791537][ T7955] bridge_slave_0: entered promiscuous mode
[  331.008709][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.028614][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.035894][ T7955] bridge_slave_1: entered allmulticast mode
[  331.211300][ T7955] bridge_slave_1: entered promiscuous mode
[  331.802709][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.075202][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.606957][ T3529] hsr_slave_0: left promiscuous mode
[  332.649597][ T3529] hsr_slave_1: left promiscuous mode
[  332.666282][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.673890][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.698293][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.717208][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.095555][ T3529] veth1_macvtap: left promiscuous mode
[  333.121985][ T3529] veth0_macvtap: left promiscuous mode
[  333.153784][ T3529] veth1_vlan: left promiscuous mode
[  333.195502][ T3529] veth0_vlan: left promiscuous mode
[  335.247639][ T8116] block device autoloading is deprecated and will be removed.
[  337.269874][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  341.655864][ T3529] team0 (unregistering): Port device team_slave_1 removed
[  341.725162][ T8150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.344601][ T3529] team0 (unregistering): Port device team_slave_0 removed
[  342.944392][ T7955] team0: Port device team_slave_0 added
[  342.956505][ T7955] team0: Port device team_slave_1 added
[  343.033341][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.084613][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.111660][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.414752][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.548922][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.591255][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.960505][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.975387][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.986080][ T7946] bridge_slave_0: entered allmulticast mode
[  344.000560][ T7946] bridge_slave_0: entered promiscuous mode
[  344.018537][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.025653][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.099026][ T7946] bridge_slave_1: entered allmulticast mode
[  344.137310][ T7946] bridge_slave_1: entered promiscuous mode
[  344.144440][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  344.181223][ T7955] hsr_slave_0: entered promiscuous mode
[  344.267406][ T7955] hsr_slave_1: entered promiscuous mode
[  345.099263][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  345.168970][ T5834] usb 7-1: Using ep0 maxpacket: 8
[  345.178281][ T5834] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  345.188093][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.198026][ T5834] usb 7-1: Product: syz
[  345.202344][ T5834] usb 7-1: Manufacturer: syz
[  345.209466][ T5834] usb 7-1: SerialNumber: syz
[  345.217814][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.219863][ T5834] usb 7-1: config 0 descriptor??
[  345.904723][ T5834] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  345.954483][ T5879] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  346.027828][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.141823][ T7946] team0: Port device team_slave_0 added
[  346.148089][ T5879] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  346.159101][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.167160][ T5879] usb 4-1: Product: syz
[  346.173288][ T5879] usb 4-1: Manufacturer: syz
[  346.177928][ T5879] usb 4-1: SerialNumber: syz
[  346.184738][ T7946] team0: Port device team_slave_1 added
[  346.191993][ T5879] usb 4-1: config 0 descriptor??
[  346.391088][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.430289][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.457834][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.471106][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.478234][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.695848][   T46] usb 4-1: USB disconnect, device number 7
[  347.352045][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.633975][ T7946] hsr_slave_0: entered promiscuous mode
[  347.666960][ T7946] hsr_slave_1: entered promiscuous mode
[  347.698842][ T7946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.728849][ T7946] Cannot create hsr debugfs directory
[  348.035822][ T5834] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  348.098809][ T5834] usb 7-1: USB disconnect, device number 2
[  348.309353][ T8219] netlink: 'syz.3.478': attribute type 10 has an invalid length.
[  348.390201][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.397550][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.470815][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.478062][ T8219] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.486419][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.493625][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.505793][ T8219] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  348.822016][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  349.107019][ T8225] bridge_slave_1: left allmulticast mode
[  349.155965][ T8225] bridge_slave_1: left promiscuous mode
[  349.197516][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.242754][ T8225] bridge_slave_0: left allmulticast mode
[  349.301866][ T8225] bridge_slave_0: left promiscuous mode
[  349.332712][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.834631][ T8225] bond0: (slave bridge0): Releasing backup interface
[  351.729118][ T8253] netlink: 'syz.6.483': attribute type 10 has an invalid length.
[  352.301656][ T8253] team0: Port device netdevsim0 added
[  352.339568][ T7955] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  352.477182][ T7955] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  352.542300][ T7955] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  353.188615][ T7955] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  353.379174][   T29] audit: type=1326 audit(1730614656.583:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8276 comm="syz.6.489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95def7e719 code=0x0
[  353.405959][ T8272] ------------[ cut here ]------------
[  353.411660][ T8272] WARNING: CPU: 0 PID: 8272 at kernel/kcov.c:872 kcov_remote_start+0x542/0x7d0
[  353.420648][ T8272] Modules linked in:
[  353.424560][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.2.488 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
[  353.435154][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  353.445226][ T8272] RIP: 0010:kcov_remote_start+0x542/0x7d0
[  353.450963][ T8272] Code: 4c 89 ff be 03 00 00 00 e8 9b df 1f 03 e9 04 fb ff ff e8 d1 af 29 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 06 cd 29 0a 89 c0 48 c7 c7 c0 d4 02 00 48 03 3c c5 50
[  353.470605][ T8272] RSP: 0018:ffffc900034beb50 EFLAGS: 00010002
[  353.476675][ T8272] RAX: 0000000080000200 RBX: ffff88803033da00 RCX: 0000000000000002
[  353.484652][ T8272] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c603460
[  353.492629][ T8272] RBP: 0000000000000000 R08: ffffffff9429786f R09: 1ffffffff2852f0d
[  353.500605][ T8272] R10: dffffc0000000000 R11: fffffbfff2852f0e R12: ffffffff8194e367
[  353.508594][ T8272] R13: ffff888027737dc0 R14: 0000000000000246 R15: ffff8880b862d4c0
[  353.516593][ T8272] FS:  00007f6c2775e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  353.525528][ T8272] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  353.532115][ T8272] CR2: 00007fc6165aedd3 CR3: 000000006835e000 CR4: 00000000003526f0
[  353.540091][ T8272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  353.548059][ T8272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  353.556118][ T8272] Call Trace:
[  353.559406][ T8272]  <TASK>
[  353.562337][ T8272]  ? __warn+0x168/0x4e0
[  353.566500][ T8272]  ? kcov_remote_start+0x542/0x7d0
[  353.571627][ T8272]  ? report_bug+0x2b3/0x500
[  353.576135][ T8272]  ? kcov_remote_start+0x542/0x7d0
[  353.581269][ T8272]  ? handle_bug+0x60/0x90
[  353.585618][ T8272]  ? exc_invalid_op+0x1a/0x50
[  353.590339][ T8272]  ? asm_exc_invalid_op+0x1a/0x20
[  353.595378][ T8272]  ? kcov_remote_start+0x97/0x7d0
[  353.600424][ T8272]  ? kcov_remote_start+0x542/0x7d0
[  353.605564][ T8272]  ? mark_lock+0x9a/0x360
[  353.609904][ T8272]  ieee80211_rx_list+0x799/0x3780
[  353.614931][ T8272]  ? __lock_acquire+0x1384/0x2050
[  353.619977][ T8272]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  353.625468][ T8272]  ? __pfx_lock_acquire+0x10/0x10
[  353.630506][ T8272]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  353.636493][ T8272]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  353.642834][ T8272]  ? ieee80211_rx_napi+0xd6/0x3c0
[  353.647857][ T8272]  ieee80211_rx_napi+0x18a/0x3c0
[  353.652793][ T8272]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.659123][ T8272]  ? __local_bh_disable_ip+0x179/0x220
[  353.664605][ T8272]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  353.670066][ T8272]  ? skb_dequeue+0x113/0x150
[  353.674663][ T8272]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  353.680656][ T8272]  ? ieee80211_stop_device+0x2a/0xf0
[  353.685964][ T8272]  ieee80211_stop_device+0x3f/0xf0
[  353.691110][ T8272]  ieee80211_do_stop+0x1cb5/0x2300
[  353.696243][ T8272]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  353.701711][ T8272]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  353.707613][ T8272]  ? lockdep_hardirqs_on+0x99/0x150
[  353.712839][ T8272]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.719173][ T8272]  ? wiphy_work_cancel+0x1f0/0x3e0
[  353.724305][ T8272]  ieee80211_stop+0x436/0x4a0
[  353.728993][ T8272]  ? __pfx_ieee80211_stop+0x10/0x10
[  353.734197][ T8272]  __dev_close_many+0x219/0x300
[  353.739072][ T8272]  ? __pfx___dev_close_many+0x10/0x10
[  353.744443][ T8272]  ? nl80211_del_interface+0xa3/0x140
[  353.749822][ T8272]  ? __pfx_lock_release+0x10/0x10
[  353.754858][ T8272]  dev_close_many+0x24e/0x4c0
[  353.759537][ T8272]  ? __mutex_lock+0x2ef/0xd70
[  353.764221][ T8272]  ? ref_tracker_alloc+0x332/0x490
[  353.769350][ T8272]  ? __pfx_dev_close_many+0x10/0x10
[  353.774567][ T8272]  ? __mutex_unlock_slowpath+0x21d/0x750
[  353.780214][ T8272]  ? nl80211_pre_doit+0x59f/0x8b0
[  353.785261][ T8272]  dev_close+0x1c0/0x2c0
[  353.789531][ T8272]  ? __pfx_dev_close+0x10/0x10
[  353.794299][ T8272]  ? __nla_parse+0x40/0x60
[  353.798727][ T8272]  nl80211_del_interface+0xd5/0x140
[  353.803937][ T8272]  genl_rcv_msg+0xb14/0xec0
[  353.808457][ T8272]  ? mark_lock+0x9a/0x360
[  353.812816][ T8272]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.817869][ T8272]  ? __pfx_lock_acquire+0x10/0x10
[  353.822903][ T8272]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  353.828283][ T8272]  ? __pfx_nl80211_del_interface+0x10/0x10
[  353.834124][ T8272]  ? __pfx_nl80211_post_doit+0x10/0x10
[  353.839608][ T8272]  ? __pfx___might_resched+0x10/0x10
[  353.844908][ T8272]  netlink_rcv_skb+0x1e3/0x430
[  353.849690][ T8272]  ? __pfx_genl_rcv_msg+0x10/0x10
[  353.854741][ T8272]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.860041][ T8272]  ? __netlink_deliver_tap+0x77e/0x7c0
[  353.865533][ T8272]  genl_rcv+0x28/0x40
[  353.869540][ T8272]  netlink_unicast+0x7f6/0x990
[  353.874311][ T8272]  ? __pfx_netlink_unicast+0x10/0x10
[  353.879596][ T8272]  ? __virt_addr_valid+0x183/0x530
[  353.884713][ T8272]  ? __check_object_size+0x48e/0x900
[  353.890032][ T8272]  netlink_sendmsg+0x8e4/0xcb0
[  353.894832][ T8272]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.900134][ T8272]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.905440][ T8272]  __sock_sendmsg+0x221/0x270
[  353.910212][ T8272]  ____sys_sendmsg+0x52a/0x7e0
[  353.914993][ T8272]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.920304][ T8272]  __sys_sendmsg+0x292/0x380
[  353.924907][ T8272]  ? __pfx___sys_sendmsg+0x10/0x10
[  353.930036][ T8272]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  353.936038][ T8272]  ? call_rcu+0x731/0xa70
[  353.940401][ T8272]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  353.946759][ T8272]  ? do_syscall_64+0x100/0x230
[  353.951534][ T8272]  ? do_syscall_64+0xb6/0x230
[  353.956216][ T8272]  do_syscall_64+0xf3/0x230
[  353.960730][ T8272]  ? clear_bhb_loop+0x35/0x90
[  353.965414][ T8272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.971326][ T8272] RIP: 0033:0x7f6c2697e719
[  353.975759][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.995384][ T8272] RSP: 002b:00007f6c2775e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.003816][ T8272] RAX: ffffffffffffffda RBX: 00007f6c26b35f80 RCX: 00007f6c2697e719
[  354.011808][ T8272] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  354.019794][ T8272] RBP: 00007f6c269f132e R08: 0000000000000000 R09: 0000000000000000
[  354.027774][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.035749][ T8272] R13: 0000000000000000 R14: 00007f6c26b35f80 R15: 00007ffcbfda8188
[  354.043740][ T8272]  </TASK>
[  354.046768][ T8272] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  354.054154][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.2.488 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
[  354.064756][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.074815][ T8272] Call Trace:
[  354.078091][ T8272]  <TASK>
[  354.081023][ T8272]  dump_stack_lvl+0x241/0x360
[  354.085710][ T8272]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.090914][ T8272]  ? __pfx__printk+0x10/0x10
[  354.095507][ T8272]  ? _printk+0xd5/0x120
[  354.099668][ T8272]  ? __init_begin+0x41000/0x41000
[  354.104718][ T8272]  ? vscnprintf+0x5d/0x90
[  354.109058][ T8272]  panic+0x349/0x880
[  354.112997][ T8272]  ? __warn+0x177/0x4e0
[  354.117160][ T8272]  ? __pfx_panic+0x10/0x10
[  354.121588][ T8272]  ? show_trace_log_lvl+0x3b2/0x410
[  354.126805][ T8272]  __warn+0x34b/0x4e0
[  354.130793][ T8272]  ? kcov_remote_start+0x542/0x7d0
[  354.135910][ T8272]  report_bug+0x2b3/0x500
[  354.140240][ T8272]  ? kcov_remote_start+0x542/0x7d0
[  354.145365][ T8272]  handle_bug+0x60/0x90
[  354.149559][ T8272]  exc_invalid_op+0x1a/0x50
[  354.154068][ T8272]  asm_exc_invalid_op+0x1a/0x20
[  354.158920][ T8272] RIP: 0010:kcov_remote_start+0x542/0x7d0
[  354.164647][ T8272] Code: 4c 89 ff be 03 00 00 00 e8 9b df 1f 03 e9 04 fb ff ff e8 d1 af 29 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 06 cd 29 0a 89 c0 48 c7 c7 c0 d4 02 00 48 03 3c c5 50
[  354.184258][ T8272] RSP: 0018:ffffc900034beb50 EFLAGS: 00010002
[  354.190330][ T8272] RAX: 0000000080000200 RBX: ffff88803033da00 RCX: 0000000000000002
[  354.198303][ T8272] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c603460
[  354.206275][ T8272] RBP: 0000000000000000 R08: ffffffff9429786f R09: 1ffffffff2852f0d
[  354.214285][ T8272] R10: dffffc0000000000 R11: fffffbfff2852f0e R12: ffffffff8194e367
[  354.222274][ T8272] R13: ffff888027737dc0 R14: 0000000000000246 R15: ffff8880b862d4c0
[  354.230334][ T8272]  ? kcov_remote_start+0x97/0x7d0
[  354.235407][ T8272]  ? mark_lock+0x9a/0x360
[  354.239747][ T8272]  ieee80211_rx_list+0x799/0x3780
[  354.244781][ T8272]  ? __lock_acquire+0x1384/0x2050
[  354.249857][ T8272]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  354.255347][ T8272]  ? __pfx_lock_acquire+0x10/0x10
[  354.260389][ T8272]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  354.266383][ T8272]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  354.272728][ T8272]  ? ieee80211_rx_napi+0xd6/0x3c0
[  354.277751][ T8272]  ieee80211_rx_napi+0x18a/0x3c0
[  354.282693][ T8272]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.289023][ T8272]  ? __local_bh_disable_ip+0x179/0x220
[  354.294504][ T8272]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  354.299963][ T8272]  ? skb_dequeue+0x113/0x150
[  354.304555][ T8272]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  354.310551][ T8272]  ? ieee80211_stop_device+0x2a/0xf0
[  354.315838][ T8272]  ieee80211_stop_device+0x3f/0xf0
[  354.320964][ T8272]  ieee80211_do_stop+0x1cb5/0x2300
[  354.326099][ T8272]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  354.331570][ T8272]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  354.337465][ T8272]  ? lockdep_hardirqs_on+0x99/0x150
[  354.342670][ T8272]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.349023][ T8272]  ? wiphy_work_cancel+0x1f0/0x3e0
[  354.354152][ T8272]  ieee80211_stop+0x436/0x4a0
[  354.358838][ T8272]  ? __pfx_ieee80211_stop+0x10/0x10
[  354.364040][ T8272]  __dev_close_many+0x219/0x300
[  354.368895][ T8272]  ? __pfx___dev_close_many+0x10/0x10
[  354.374286][ T8272]  ? nl80211_del_interface+0xa3/0x140
[  354.379667][ T8272]  ? __pfx_lock_release+0x10/0x10
[  354.384705][ T8272]  dev_close_many+0x24e/0x4c0
[  354.389385][ T8272]  ? __mutex_lock+0x2ef/0xd70
[  354.394067][ T8272]  ? ref_tracker_alloc+0x332/0x490
[  354.399195][ T8272]  ? __pfx_dev_close_many+0x10/0x10
[  354.404403][ T8272]  ? __mutex_unlock_slowpath+0x21d/0x750
[  354.410036][ T8272]  ? nl80211_pre_doit+0x59f/0x8b0
[  354.415102][ T8272]  dev_close+0x1c0/0x2c0
[  354.419350][ T8272]  ? __pfx_dev_close+0x10/0x10
[  354.424130][ T8272]  ? __nla_parse+0x40/0x60
[  354.428573][ T8272]  nl80211_del_interface+0xd5/0x140
[  354.433782][ T8272]  genl_rcv_msg+0xb14/0xec0
[  354.438293][ T8272]  ? mark_lock+0x9a/0x360
[  354.442631][ T8272]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.447689][ T8272]  ? __pfx_lock_acquire+0x10/0x10
[  354.452724][ T8272]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  354.458103][ T8272]  ? __pfx_nl80211_del_interface+0x10/0x10
[  354.463916][ T8272]  ? __pfx_nl80211_post_doit+0x10/0x10
[  354.469398][ T8272]  ? __pfx___might_resched+0x10/0x10
[  354.474699][ T8272]  netlink_rcv_skb+0x1e3/0x430
[  354.479469][ T8272]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.484503][ T8272]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.489815][ T8272]  ? __netlink_deliver_tap+0x77e/0x7c0
[  354.495289][ T8272]  genl_rcv+0x28/0x40
[  354.499280][ T8272]  netlink_unicast+0x7f6/0x990
[  354.504054][ T8272]  ? __pfx_netlink_unicast+0x10/0x10
[  354.509337][ T8272]  ? __virt_addr_valid+0x183/0x530
[  354.514475][ T8272]  ? __check_object_size+0x48e/0x900
[  354.519775][ T8272]  netlink_sendmsg+0x8e4/0xcb0
[  354.524559][ T8272]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.529859][ T8272]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.535147][ T8272]  __sock_sendmsg+0x221/0x270
[  354.539847][ T8272]  ____sys_sendmsg+0x52a/0x7e0
[  354.544708][ T8272]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.550023][ T8272]  __sys_sendmsg+0x292/0x380
[  354.554631][ T8272]  ? __pfx___sys_sendmsg+0x10/0x10
[  354.559771][ T8272]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  354.565773][ T8272]  ? call_rcu+0x731/0xa70
[  354.570132][ T8272]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  354.576496][ T8272]  ? do_syscall_64+0x100/0x230
[  354.581292][ T8272]  ? do_syscall_64+0xb6/0x230
[  354.586010][ T8272]  do_syscall_64+0xf3/0x230
[  354.590550][ T8272]  ? clear_bhb_loop+0x35/0x90
[  354.595260][ T8272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.601201][ T8272] RIP: 0033:0x7f6c2697e719
[  354.605660][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.625309][ T8272] RSP: 002b:00007f6c2775e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.633779][ T8272] RAX: ffffffffffffffda RBX: 00007f6c26b35f80 RCX: 00007f6c2697e719
[  354.641794][ T8272] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  354.649784][ T8272] RBP: 00007f6c269f132e R08: 0000000000000000 R09: 0000000000000000
[  354.657769][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.665749][ T8272] R13: 0000000000000000 R14: 00007f6c26b35f80 R15: 00007ffcbfda8188
[  354.673749][ T8272]  </TASK>
[  354.677133][ T8272] Kernel Offset: disabled
[  354.681537][ T8272] Rebooting in 86400 seconds..