last executing test programs:

2m33.817953908s ago: executing program 2 (id=25):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0xfffffffffffffd77, &(0x7f0000019840)=0x3fefff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000019940)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)

2m33.396418547s ago: executing program 1 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000280)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0)
r2 = add_key(&(0x7f00000192c0)='encrypted\x00', &(0x7f0000019300), &(0x7f0000019340), 0xca, 0xfffffffffffffffe)
r3 = getpgid(r0)
fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x1, r3})
add_key$user(0x0, &(0x7f00000193c0), &(0x7f0000019400), 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0)
keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xfffffffffffffff9)

2m32.070031522s ago: executing program 1 (id=28):
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @hyper}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x8, {{0xa, 0x4e23, 0x1000004, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108)
pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000"], 0x0)
syz_emit_ethernet(0x19a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff02000c2c00fe8000000000000000000000000000bbfe8000"], 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
timerfd_gettime(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0)

2m29.043110204s ago: executing program 4 (id=31):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0xfffffffffffffd77, &(0x7f0000019840)=0x3fefff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000019940)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)

2m26.919281846s ago: executing program 4 (id=33):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x4, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0xf, 0x4}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

2m24.45042131s ago: executing program 1 (id=34):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000000, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x200, 0x0, 0x3, 0x6c4ba42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x810000000000000, 0x21d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000000000000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x10000000000, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x109001)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = io_uring_setup(0x2e05, &(0x7f0000000940)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001a80)='./sys\x00', &(0x7f0000001ac0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./dev\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000001c00)='md0', 0x3)

2m21.375430931s ago: executing program 2 (id=38):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0x7cb9df5ae125b5d6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x17, 0x0, &(0x7f0000000480)="2dc3afba1c7bd04f0aed673571fb75584f2fd74ad83233", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x10, 0x1, 0xa436, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18550000050c00"/16], &(0x7f0000000500)='GPL\x00', 0xcd900, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300))
r6 = syz_open_procfs(0x0, &(0x7f0000000800)='mountinfo\x00')
read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0x2020)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r5], 0x1413)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000600)={0x1, r3})

2m21.359171953s ago: executing program 4 (id=39):
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@gettfilter={0x0, 0x2e, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {0x3, 0xc}, {0xffe0, 0xb}}, [{0x0, 0xb, 0x6}, {0x0, 0xb, 0xb64}, {0x0, 0xb, 0x5}, {0x0, 0xb, 0xc9b}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0xe}]}, 0x50}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0)
read$msr(r4, &(0x7f00000006c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f00000196c0)=0x7)
set_mempolicy(0x6, 0x0, 0xe0)
mkdirat(0xffffffffffffff9c, &(0x7f0000019700)='./mnt\x00', 0x1ff)
mount(&(0x7f0000019740)=@filename='127.0.0.1:file0\x00', &(0x7f0000019780)='./mnt\x00', &(0x7f00000197c0)='nfs4\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
socket(0x10, 0x3, 0x0)
socketpair(0x10, 0x2, 0xb, &(0x7f0000000440))
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

2m20.070483101s ago: executing program 4 (id=40):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
statfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

2m17.374252944s ago: executing program 2 (id=43):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ef000000850000000200000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000800)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x102, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50)

2m16.472671047s ago: executing program 2 (id=45):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
ioctl$sock_proto_private(0xffffffffffffffff, 0x891d, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x123000, 0x91)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x4}, 0x8)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000380)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
getxattr(&(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="6f73322e2e0050917f085c7ba374abb7e55fa5da6a3134ec244923459bff7141bc3c6a87ac28e6c8e60671b62aa01a914ab048d5ebfd"], &(0x7f0000000440)=""/36, 0x24)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000004c0)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001800dd8d03000000000000000200000000000005000000000600150002000000100016800c00088008000180"], 0x34}}, 0x0)
ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000580))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50)
ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000640)=0x6)
r8 = syz_open_dev$cec(&(0x7f0000000680), 0xffffffffffffffff, 0x4a320)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000800)=[@text16={0x10, &(0x7f0000000780)="650f8600000f3565660f3882510e0d010066b8ab0000000f23c80f21f866350400a0000f23f89a0000ed000f20d86635200000000f22d8660f38825706baf80c66b85ce93e8e66efbafc0cb83495ef66b8010000000f01c1", 0x58}], 0x1, 0x1, &(0x7f0000000840)=[@cstype0={0x4, 0xe}, @dstype0={0x6, 0xa}], 0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000006c0)={"4497acf4", 0xb, 0x4, 0xfc, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
mmap$KVM_DIRTY_RING(&(0x7f0000002000/0x1000)=nil, 0x10000, 0x3000000, 0x86010, 0xffffffffffffffff, 0x40000)

2m13.606421975s ago: executing program 1 (id=46):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x4, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0xf, 0x4}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x200480d0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

2m13.583595013s ago: executing program 2 (id=47):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m11.267701158s ago: executing program 4 (id=50):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000280)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0)
add_key(&(0x7f00000192c0)='encrypted\x00', &(0x7f0000019300), &(0x7f0000019340), 0xca, 0xfffffffffffffffe)
r2 = getpgid(r0)
fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x1, r2})
add_key$user(0x0, &(0x7f00000193c0), &(0x7f0000019400), 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

2m10.1235564s ago: executing program 2 (id=51):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
statfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

2m10.029565065s ago: executing program 1 (id=52):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
getpgrp(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000280)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0)
add_key(&(0x7f00000192c0)='encrypted\x00', &(0x7f0000019300), &(0x7f0000019340), 0xca, 0xfffffffffffffffe)
r2 = getpgid(r0)
fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x1, r2})
add_key$user(0x0, &(0x7f00000193c0), &(0x7f0000019400), 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

2m7.723336153s ago: executing program 1 (id=53):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x3, 0x4, 0x0, 0x8, 0x7000000000, 0x4, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xf423f, 0x3f420f8000000000, 0x80000001, 0x1, 0x4, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x4, 0xacb, 0x3, 0x6})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r3, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0)
write$khugepaged_scan(r5, &(0x7f0000000440), 0x8)
write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0)

2m6.627864576s ago: executing program 4 (id=54):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x50}}, 0x20044084)
close(0xffffffffffffffff)

1m54.763103608s ago: executing program 32 (id=51):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
statfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r1, r2, 0x0)
ppoll(&(0x7f00000001c0)=[{r2, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

1m52.186570008s ago: executing program 33 (id=53):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_adjtime(0x0, &(0x7f0000000300)={0x8b8d, 0x3, 0x4, 0x0, 0x8, 0x7000000000, 0x4, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xf423f, 0x3f420f8000000000, 0x80000001, 0x1, 0x4, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x4, 0xacb, 0x3, 0x6})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r3, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0)
write$khugepaged_scan(r5, &(0x7f0000000440), 0x8)
write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0)

1m49.792700026s ago: executing program 34 (id=54):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x50}}, 0x20044084)
close(0xffffffffffffffff)

53.818676013s ago: executing program 3 (id=85):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000000100000280000001680000", 0x16)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)

53.570054366s ago: executing program 0 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x4, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0xf, 0x4}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r6)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

48.627405934s ago: executing program 0 (id=87):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000000, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x200, 0x0, 0x3, 0x6c4ba42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x5, 0xffffffffffff8001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x810000000000000, 0x21d, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000000000000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x10000000000, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x109001)
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x2e05, &(0x7f0000000940)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001a80)='./sys\x00', &(0x7f0000001ac0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000001b40)='./dev\x00', &(0x7f0000001b80)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000001c00)='md0', 0x3)

48.627098866s ago: executing program 3 (id=88):
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48)
fcntl$setstatus(r0, 0x4, 0x42400)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000040), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108)

44.962082659s ago: executing program 3 (id=89):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"})
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

43.552651499s ago: executing program 0 (id=90):
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00')

40.535271665s ago: executing program 3 (id=91):
syz_open_dev$dvb_frontend(0x0, 0x0, 0x882)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/igmp6\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000300)={0xf0f016, 0x2})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0)

40.080685091s ago: executing program 0 (id=92):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r3, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)

36.608618367s ago: executing program 0 (id=93):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x1234, 0x0, @remote}, 0x1c)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r6, 0x70b, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040840}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
prctl$PR_SET_SECUREBITS(0x1c, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a01, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1fd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)

30.254480822s ago: executing program 3 (id=94):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r5, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f0000019640)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019680)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808)
mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}})
write(r1, &(0x7f0000000100)='isp1301 0x2', 0xb)

28.588310696s ago: executing program 0 (id=95):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000000100000280000001680000", 0x16)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)

22.205929755s ago: executing program 3 (id=96):
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48)
fcntl$setstatus(r0, 0x4, 0x42400)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000040), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x9, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @remote, 0x40}}}, 0x108)

0s ago: executing program 35 (id=95):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000000100000280000001680000", 0x16)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1})
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts.
[   67.562970][ T5595] cgroup: Unknown subsys name 'net'
[   67.692671][ T5595] cgroup: Unknown subsys name 'cpuset'
[   67.701539][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.014924][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.401418][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[   71.401473][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[   73.593134][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.594803][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.610432][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.611872][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.612916][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.613912][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.614331][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.615432][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.616177][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.623627][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.624046][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.624443][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.625657][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.626105][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.626280][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.626377][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.627575][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.627686][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.628150][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.632529][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.649453][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.665591][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.670467][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.721058][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.735568][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.511202][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[   74.515394][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[   74.515884][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   74.519134][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[   74.726346][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   74.777886][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   74.796686][ T5606] infiniband rxe0: set active
[   74.797366][ T5606] infiniband rxe0: added rxe_eth0
[   74.811160][ T4940] rxe_eth0 speed is unknown, defaulting to 1000
[   74.860997][ T5619] rxe0: rxe_newlink: already configured on rxe_eth0
[   74.867976][ T5606] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   74.868008][ T5606] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   74.868043][ T5606] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   74.944394][ T5607] rxe_eth0 speed is unknown, defaulting to 1000
[   74.986969][ T5606] RDS/IB: rxe0: added
[   74.987329][ T5606] smc: adding ib device rxe0 with port count 1
[   74.987409][ T5606] smc:    ib device rxe0 port 1 has no pnetid
[   75.019944][ T4940] rxe_eth0 speed is unknown, defaulting to 1000
[   75.268301][ T5608] rxe_eth0 speed is unknown, defaulting to 1000
[   75.406019][ T1625] rxe_eth0 speed is unknown, defaulting to 1000
[   75.441962][ T1625] rxe_eth0 speed is unknown, defaulting to 1000
[   75.574830][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[   75.585865][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.586549][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.586772][ T5609] bridge_slave_0: entered allmulticast mode
[   75.588529][ T5609] bridge_slave_0: entered promiscuous mode
[   75.610439][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.610771][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.610898][ T5609] bridge_slave_1: entered allmulticast mode
[   75.612490][ T5609] bridge_slave_1: entered promiscuous mode
[   75.695190][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.719306][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.720062][ T5624] Bluetooth: hci0: command tx timeout
[   75.720179][ T5624] Bluetooth: hci2: command tx timeout
[   75.720252][ T5624] Bluetooth: hci4: command tx timeout
[   75.720316][ T5624] Bluetooth: hci1: command tx timeout
[   75.794636][ T5609] team0: Port device team_slave_0 added
[   75.800121][ T5610] Bluetooth: hci3: command tx timeout
[   75.812586][ T5609] team0: Port device team_slave_1 added
[   75.908032][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.908050][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.908079][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.946686][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.946701][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.946725][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.974613][ T5619] rxe_eth0 speed is unknown, defaulting to 1000
[   76.118261][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.118610][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.118726][ T5607] bridge_slave_0: entered allmulticast mode
[   76.123977][ T5607] bridge_slave_0: entered promiscuous mode
[   76.129652][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.129802][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.129927][ T5607] bridge_slave_1: entered allmulticast mode
[   76.133183][ T5607] bridge_slave_1: entered promiscuous mode
[   76.217261][ T5609] hsr_slave_0: entered promiscuous mode
[   76.218277][ T5609] hsr_slave_1: entered promiscuous mode
[   76.263163][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.288392][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.356159][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[   76.402746][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.402970][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.403097][ T5608] bridge_slave_0: entered allmulticast mode
[   76.405034][ T5608] bridge_slave_0: entered promiscuous mode
[   76.437370][ T5607] team0: Port device team_slave_0 added
[   76.441457][ T5607] team0: Port device team_slave_1 added
[   76.447325][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.448953][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.449352][ T5608] bridge_slave_1: entered allmulticast mode
[   76.452945][ T5608] bridge_slave_1: entered promiscuous mode
[   76.540774][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.544090][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.556085][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.556099][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.556123][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.585059][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.585075][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.585098][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.682555][ T5608] team0: Port device team_slave_0 added
[   76.710922][ T5608] team0: Port device team_slave_1 added
[   76.777417][ T5607] hsr_slave_0: entered promiscuous mode
[   76.778370][ T5607] hsr_slave_1: entered promiscuous mode
[   76.779057][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   76.779143][ T5607] Cannot create hsr debugfs directory
[   76.794881][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.794896][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.794919][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.839385][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.839400][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.839424][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.044781][ T5608] hsr_slave_0: entered promiscuous mode
[   77.045360][ T5608] hsr_slave_1: entered promiscuous mode
[   77.045809][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   77.045826][ T5608] Cannot create hsr debugfs directory
[   77.089191][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.099206][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   77.131822][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.134997][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.178313][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.183766][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.184810][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.190074][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.271580][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.271707][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.271780][ T5619] bridge_slave_0: entered allmulticast mode
[   77.272718][ T5619] bridge_slave_0: entered promiscuous mode
[   77.275454][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.275557][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.275919][ T5619] bridge_slave_1: entered allmulticast mode
[   77.277355][ T5619] bridge_slave_1: entered promiscuous mode
[   77.347879][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.384061][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.462479][ T5619] team0: Port device team_slave_0 added
[   77.504534][ T5619] team0: Port device team_slave_1 added
[   77.569324][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.569340][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.569362][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.623713][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.623728][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.623751][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.649069][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.649224][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.649721][ T5606] bridge_slave_0: entered allmulticast mode
[   77.651687][ T5606] bridge_slave_0: entered promiscuous mode
[   77.677149][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.677249][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.677648][ T5606] bridge_slave_1: entered allmulticast mode
[   77.680965][ T5606] bridge_slave_1: entered promiscuous mode
[   77.738667][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.762702][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.762785][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.765863][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   77.766730][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.773434][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.780815][ T5619] hsr_slave_0: entered promiscuous mode
[   77.781822][ T5619] hsr_slave_1: entered promiscuous mode
[   77.783878][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   77.783895][ T5619] Cannot create hsr debugfs directory
[   77.800300][ T5610] Bluetooth: hci1: command tx timeout
[   77.800330][ T5610] Bluetooth: hci4: command tx timeout
[   77.800351][ T5610] Bluetooth: hci2: command tx timeout
[   77.800371][ T5610] Bluetooth: hci0: command tx timeout
[   77.818571][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.827925][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.828873][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.834193][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.879723][ T5624] Bluetooth: hci3: command tx timeout
[   77.905898][ T5606] team0: Port device team_slave_0 added
[   77.925321][ T5606] team0: Port device team_slave_1 added
[   77.978080][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.978097][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.978110][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.009139][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.009154][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.009177][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.102255][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.105284][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.125835][ T5606] hsr_slave_0: entered promiscuous mode
[   78.126406][ T5606] hsr_slave_1: entered promiscuous mode
[   78.126791][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   78.126809][ T5606] Cannot create hsr debugfs directory
[   78.158507][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.162977][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.163793][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.169119][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.198415][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.206014][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.263081][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.362148][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.364488][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.384702][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   78.386545][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.389189][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.415767][ T4126] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.415897][ T4126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.417823][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.427874][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.459594][ T4126] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.459699][ T4126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.462216][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.464700][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.570990][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.577231][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.586176][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.587108][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.598306][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.623114][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.626293][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.627866][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.651990][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.708218][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   78.736800][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.736901][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.771951][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.772070][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.814339][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.896272][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   78.926803][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.926879][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.951475][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.951576][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.955675][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.019915][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   79.037127][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.037225][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.063356][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.063456][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.152430][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.252240][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   79.277409][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.277511][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.333116][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.333218][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.595084][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.879999][ T5624] Bluetooth: hci0: command tx timeout
[   79.880029][ T5624] Bluetooth: hci2: command tx timeout
[   79.880050][ T5624] Bluetooth: hci4: command tx timeout
[   79.880070][ T5624] Bluetooth: hci1: command tx timeout
[   79.959674][ T5610] Bluetooth: hci3: command tx timeout
[   80.249437][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.315586][ T5609] veth0_vlan: entered promiscuous mode
[   80.354067][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.376406][ T5609] veth1_vlan: entered promiscuous mode
[   80.383985][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.429235][ T5607] veth0_vlan: entered promiscuous mode
[   80.481200][ T5607] veth1_vlan: entered promiscuous mode
[   80.512605][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.557935][ T5609] veth0_macvtap: entered promiscuous mode
[   80.563781][ T5609] veth1_macvtap: entered promiscuous mode
[   80.578360][ T5619] veth0_vlan: entered promiscuous mode
[   80.584593][ T5608] veth0_vlan: entered promiscuous mode
[   80.602480][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.614430][ T5608] veth1_vlan: entered promiscuous mode
[   80.622399][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.628570][ T5607] veth0_macvtap: entered promiscuous mode
[   80.640057][ T5619] veth1_vlan: entered promiscuous mode
[   80.663009][ T5607] veth1_macvtap: entered promiscuous mode
[   80.737129][ T5606] veth0_vlan: entered promiscuous mode
[   80.758519][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.777785][ T5608] veth0_macvtap: entered promiscuous mode
[   80.789332][ T5606] veth1_vlan: entered promiscuous mode
[   80.806124][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.821201][ T5608] veth1_macvtap: entered promiscuous mode
[   80.844025][ T5619] veth0_macvtap: entered promiscuous mode
[   80.862282][ T5619] veth1_macvtap: entered promiscuous mode
[   80.871302][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.871323][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.918124][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.953089][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.953109][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.969024][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.970013][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970140][ T1177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970183][ T1177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970216][ T1177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970248][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970280][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970311][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970344][ T1177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.978169][ T5606] veth0_macvtap: entered promiscuous mode
[   80.996648][ T5606] veth1_macvtap: entered promiscuous mode
[   81.027108][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.031859][  T107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.070833][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.070892][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.070925][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.093750][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.154804][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.154825][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.197722][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.261355][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.279402][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.331738][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.331758][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.426801][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.426820][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.491231][ T4126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.495567][ T1177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.495757][ T1177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.495936][ T1177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.959850][ T5610] Bluetooth: hci1: command tx timeout
[   81.959881][ T5610] Bluetooth: hci4: command tx timeout
[   81.959902][ T5610] Bluetooth: hci2: command tx timeout
[   81.959921][ T5610] Bluetooth: hci0: command tx timeout
[   82.040344][ T5624] Bluetooth: hci3: command tx timeout
[   82.722536][ T5831] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.869648][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.869668][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.869832][ T1550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.872860][ T1550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.872923][ T1550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.872946][ T1550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.009650][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.009669][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.239114][ T5837] trusted_key: encrypted_key: insufficient parameters specified
[   84.671730][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.671750][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.507542][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.507600][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.863845][    T9] cfg80211: failed to load regulatory.db
[   86.954535][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.954598][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.416573][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   96.762540][   T13] IPVS: starting estimator thread 0...
[   96.850243][ T5911] IPVS: using max 26 ests per chain, 62400 per kthread
[   98.539727][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.799307][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'.
[  105.799385][ T5955] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  105.992527][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'.
[  106.348328][ T5961] trusted_key: encrypted_key: insufficient parameters specified
[  118.502042][ T6020] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  119.020144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  121.548512][ T6032] input: syz1 as /devices/virtual/input/input5
[  122.088359][ T6039] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  122.637493][ T6044] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  123.332581][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[  123.332597][ T6050] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  123.468285][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[  126.332565][ T6064] input: syz1 as /devices/virtual/input/input6
[  130.663039][ T6077] trusted_key: encrypted_key: insufficient parameters specified
[  131.801398][ T6079] trusted_key: encrypted_key: insufficient parameters specified
[  132.855220][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  132.855319][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  138.346467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[  138.712842][ T6088] ima: policy update failed
[  138.751209][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  138.776606][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  138.817248][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[  138.846500][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  138.866689][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  138.886565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[  140.226927][   T33] audit: type=1802 audit(1792145213.947:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.56" res=0 errno=-22
[  140.486318][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  141.778420][ T5875] IPVS: starting estimator thread 0...
[  142.018051][ T6093] IPVS: using max 27 ests per chain, 64800 per kthread
[  144.011590][ T6104] input: syz1 as /devices/virtual/input/input7
[  145.084825][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.100893][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.102178][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.103078][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.103648][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.655473][ T6110] rxe_eth0 speed is unknown, defaulting to 1000
[  146.889467][    C0] sched: DL replenish lagged too much
[  147.159631][ T5610] Bluetooth: hci5: command tx timeout
[  147.355393][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.356467][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.357053][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.357936][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.358824][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.661840][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.663531][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.663920][ T6110] bridge_slave_0: entered allmulticast mode
[  147.691812][ T6110] bridge_slave_0: entered promiscuous mode
[  147.703386][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.705016][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.705168][ T6110] bridge_slave_1: entered allmulticast mode
[  147.708824][ T6110] bridge_slave_1: entered promiscuous mode
[  147.814387][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.834704][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.240719][ T5624] Bluetooth: hci5: command tx timeout
[  149.482233][ T5624] Bluetooth: hci6: command tx timeout
[  149.555154][ T6110] team0: Port device team_slave_0 added
[  150.591396][ T6110] team0: Port device team_slave_1 added
[  150.747016][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.747032][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.747056][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.815836][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.815853][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.815877][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.115333][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.117076][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.118566][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.134285][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.158291][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.229349][ T6110] hsr_slave_0: entered promiscuous mode
[  151.242733][ T6110] hsr_slave_1: entered promiscuous mode
[  151.243367][ T6110] debugfs: 'hsr0' already exists in 'hsr'
[  151.243382][ T6110] Cannot create hsr debugfs directory
[  151.319555][ T5624] Bluetooth: hci5: command tx timeout
[  151.510169][ T6130] rxe_eth0 speed is unknown, defaulting to 1000
[  151.560409][ T5624] Bluetooth: hci6: command tx timeout
[  153.240934][ T5624] Bluetooth: hci4: command tx timeout
[  153.399601][ T5624] Bluetooth: hci5: command tx timeout
[  153.639553][ T5624] Bluetooth: hci6: command tx timeout
[  155.321837][ T5624] Bluetooth: hci4: command tx timeout
[  155.813501][ T5624] Bluetooth: hci6: command tx timeout
[  157.399601][ T5624] Bluetooth: hci4: command tx timeout
[  159.487170][ T5624] Bluetooth: hci4: command tx timeout
[  159.750943][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.778064][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.854158][ T6148] rxe_eth0 speed is unknown, defaulting to 1000
[  174.011282][ T6110] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.054270][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.170658][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.225080][ T6110] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.256392][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.307391][ T6110] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.360595][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.361558][ T6110] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.538449][ T6110] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.692187][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.813287][   T13] bridge_slave_1: left allmulticast mode
[  177.813326][   T13] bridge_slave_1: left promiscuous mode
[  177.814083][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.191570][   T13] bridge_slave_0: left allmulticast mode
[  178.191597][   T13] bridge_slave_0: left promiscuous mode
[  178.192543][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.443617][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.523597][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.527500][   T13] bond0 (unregistering): Released all slaves
[  182.047780][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  182.369077][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.203759][ T6249] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  191.243460][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.243566][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.243683][ T6130] bridge_slave_0: entered allmulticast mode
[  191.276704][ T6130] bridge_slave_0: entered promiscuous mode
[  191.318772][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.318875][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.319029][ T6130] bridge_slave_1: entered allmulticast mode
[  191.473284][ T6130] bridge_slave_1: entered promiscuous mode
[  191.820881][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[  191.820908][ T6261] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  194.288873][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.288927][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.681906][ T6110] 8021q: adding VLAN 0 to HW filter on device team0
[  194.758228][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[  196.449547][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[  196.449588][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  197.049353][   T13] hsr_slave_0: left promiscuous mode
[  197.364154][   T13] hsr_slave_1: left promiscuous mode
[  197.365184][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.365221][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.419753][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.419775][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.529023][   T13] veth1_macvtap: left promiscuous mode
[  197.529077][   T13] veth0_macvtap: left promiscuous mode
[  197.529194][   T13] veth1_vlan: left promiscuous mode
[  197.529275][   T13] veth0_vlan: left promiscuous mode
[  198.722073][   T13] team0 (unregistering): Port device team_slave_1 removed
[  198.756292][   T13] team0 (unregistering): Port device team_slave_0 removed
[  203.757329][ T6292] ima: policy update failed
[  203.827070][   T33] audit: type=1802 audit(1792145277.543:3): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.81" res=0 errno=-22
[  203.864071][ T4155] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.864187][ T4155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.892039][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  204.173179][ T6301] device-mapper: dirty region log: invalid region size 1024
[  204.173220][ T6301] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL)
[  204.173242][ T6301] device-mapper: ioctl: error adding target to table
[  204.372994][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.430965][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.495598][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.495700][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.703021][ T6130] team0: Port device team_slave_0 added
[  204.716267][ T6130] team0: Port device team_slave_1 added
[  205.123934][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.124039][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.124181][ T6148] bridge_slave_0: entered allmulticast mode
[  205.154473][ T6148] bridge_slave_0: entered promiscuous mode
[  205.198320][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.198423][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.198572][ T6148] bridge_slave_1: entered allmulticast mode
[  205.226743][ T6148] bridge_slave_1: entered promiscuous mode
[  205.448864][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.483664][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.483680][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.483704][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.542073][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.542089][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.542113][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.803574][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.965550][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.976792][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.985357][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.997784][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.012151][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.449336][ T6148] team0: Port device team_slave_0 added
[  206.528758][ T6148] team0: Port device team_slave_1 added
[  207.368084][ T6130] hsr_slave_0: entered promiscuous mode
[  207.369155][ T6130] hsr_slave_1: entered promiscuous mode
[  207.384514][ T6130] debugfs: 'hsr0' already exists in 'hsr'
[  207.384537][ T6130] Cannot create hsr debugfs directory
[  208.052278][ T5610] Bluetooth: hci1: command tx timeout
[  210.119617][ T5610] Bluetooth: hci1: command tx timeout
[  210.140935][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.140950][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.140974][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.372056][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.372073][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  210.372098][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.857783][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.914807][ T6339] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  212.200066][ T5616] Bluetooth: hci1: command tx timeout
[  212.200923][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.289756][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.291733][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.293659][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.402596][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.583752][ T6344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  214.279662][ T5610] Bluetooth: hci1: command tx timeout
[  215.319586][ T5610] Bluetooth: hci3: command tx timeout
[  215.701932][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.788516][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.799307][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.809916][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.812265][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.831980][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.700887][ T5610] Bluetooth: hci5: command tx timeout
[  218.703747][ T5624] Bluetooth: hci3: command tx timeout
[  218.963377][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  219.134736][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.700880][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.160738][ T6316] rxe_eth0 speed is unknown, defaulting to 1000
[  220.769834][ T5610] Bluetooth: hci5: command tx timeout
[  220.769913][ T5624] Bluetooth: hci3: command tx timeout
[  221.202992][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.492339][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.633768][ T6342] rxe_eth0 speed is unknown, defaulting to 1000
[  222.839701][ T5624] Bluetooth: hci3: command tx timeout
[  222.839735][ T5624] Bluetooth: hci5: command tx timeout
[  224.290519][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.931981][ T5610] Bluetooth: hci5: command tx timeout
[  226.729175][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.919968][ T6355] rxe_eth0 speed is unknown, defaulting to 1000
[  229.189107][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4
[  231.476209][ T6417] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  231.645471][ T6411] 9pnet_fd: p9_fd_create_tcp (6411): problem connecting socket to 127.0.0.1
[  256.959963][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  256.975626][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  317.946104][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.953216][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  332.393554][ T5610] Bluetooth: hci1: command 0x0406 tx timeout
[  340.136432][ T5621] Bluetooth: hci3: command 0x0406 tx timeout
[  340.136512][ T5621] Bluetooth: hci5: command 0x0406 tx timeout
[  376.049173][   T34] INFO: task dhcpcd:5272 blocked for more than 144 seconds.
[  376.049204][   T34]       Not tainted syzkaller #0
[  376.049214][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.049223][   T34] task:dhcpcd          state:D stack:25032 pid:5272  tgid:5272  ppid:1      task_flags:0x400140 flags:0x00080000
[  376.049284][   T34] Call Trace:
[  376.049296][   T34]  <TASK>
[  376.049309][   T34]  __schedule+0x17dd/0x5820
[  376.067242][   T34]  ? __pfx___schedule+0x10/0x10
[  376.067282][   T34]  ? schedule+0x90/0x2b0
[  376.067305][   T34]  schedule+0x164/0x2b0
[  376.067327][   T34]  schedule_preempt_disabled+0x13/0x30
[  376.067346][   T34]  __mutex_lock+0x7c4/0x15a0
[  376.067372][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  376.067397][   T34]  ? vlan_ioctl_handler+0xf0/0x630
[  376.067424][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  376.067456][   T34]  ? __might_fault+0xaf/0x130
[  376.067487][   T34]  vlan_ioctl_handler+0xf0/0x630
[  376.067512][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  376.067533][   T34]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  376.067573][   T34]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  376.067597][   T34]  sock_ioctl+0x612/0x7e0
[  376.067625][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  376.067660][   T34]  ? bpf_lsm_file_ioctl+0x9/0x20
[  376.067682][   T34]  ? __pfx_sock_ioctl+0x10/0x10
[  376.067706][   T34]  __se_sys_ioctl+0xfc/0x170
[  376.067732][   T34]  do_syscall_64+0x166/0x520
[  376.067753][   T34]  ? trace_irq_disable+0x3b/0x140
[  376.067775][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.067793][   T34]  ? clear_bhb_loop+0x70/0xc0
[  376.067816][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.067835][   T34] RIP: 0033:0x7ffbf756f378
[  376.067867][   T34] RSP: 002b:00007fff4c1d9f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  376.067887][   T34] RAX: ffffffffffffffda RBX: 0000564153ef8be0 RCX: 00007ffbf756f378
[  376.067900][   T34] RDX: 00007fff4c1d9f70 RSI: 0000000000008982 RDI: 000000000000000f
[  376.067912][   T34] RBP: 00007fff4c1d9f70 R08: 0000000000000000 R09: 0000000000000000
[  376.067924][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  376.067935][   T34] R13: 0000564153f02640 R14: 00007fff4c1ea380 R15: 0000564153ef8be0
[  376.067963][   T34]  </TASK>
[  376.068032][   T34] 
[  376.068032][   T34] Showing all locks held in the system:
[  376.068040][   T34] locks held by kthreadd/2: 1, last CPU#1:
[  376.068053][   T34]  #0: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  376.068103][   T34] locks held by kworker/0:0/9: 3, on CPU#0:
[  376.068115][   T34]  #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068173][   T34]  #1: ffffc900000e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068221][   T34]  #2: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  376.068270][   T34] locks held by kworker/0:1/10: 5, last CPU#0:
[  376.068283][   T34]  #0: ffff88807dce9948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068337][   T34]  #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068398][   T34]  #2: ffff888078df7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  376.068451][   T34]  #3: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  376.068493][   T34]  #4: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  376.068540][   T34] locks held by kworker/u8:0/12: 3, last CPU#1:
[  376.068553][   T34]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068602][   T34]  #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068651][   T34]  #2: ffff888056b00800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  376.068699][   T34] locks held by kworker/u8:1/13: 6, on CPU#1:
[  376.068712][   T34]  #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068760][   T34]  #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.068808][   T34]  #2: ffffffff91250868 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  376.068852][   T34]  #3: ffff88807fc31128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  376.068901][   T34]  #4: ffff8880365d0258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  376.068955][   T34]  #5: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x7cd/0x1040
[  376.069001][   T34] locks held by kworker/1:0/27: 4, on CPU#1:
[  376.069013][   T34]  #0: ffff88805871fd48 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.069066][   T34]  #1: ffffc90000a1fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.069133][   T34]  #2: ffff88807b0c9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  376.069186][   T34]  #3: ffff88807508b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  376.069239][   T34] locks held by kworker/1:1/32: 3, last CPU#1:
[  376.069252][   T34]  #0: ffff8880576cbd48 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.069305][   T34]  #1: ffffc90000a77c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.087284][   T34]  #2: ffff88801c7534b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  376.087342][   T34] locks held by khungtaskd/34: 1, last CPU#1:
[  376.087356][   T34]  #0: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  376.087401][   T34] locks held by kworker/u8:2/45: 3, last CPU#1:
[  376.087414][   T34]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.087462][   T34]  #1: ffffc90000b57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  376.087511][   T34]  #2: ffff888050640800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  376.087561][   T34] locks held by kworker/u8:3/51: 3, last CPU#1: