last executing test programs:

1m1.713719621s ago: executing program 1 (id=378):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x10}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0x0, 0x330, 0x110, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffff00, 0xffffff00, 'veth1_to_batadv\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x73, 0x5, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x1, 0x4}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'caif0\x00', {0x7, 0x1, 0x40, 0x8, 0x0, 0x9, 0x98a, 0x18, 0x40}, {0xffffffffffffffff}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x4, 0x0, [0x9, 0x1d, 0x12, 0x6, 0x25, 0xe, 0x13, 0x40, 0x1, 0x2d, 0xf, 0x32, 0x2b, 0x3c, 0x17, 0x8], 0x0, 0xffffff80, 0x6}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0xf, [0x4e23, 0x4e21, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e22, 0x4e22, 0x4e21, 0x4e24, 0x4e24, 0x4e22, 0x4e20, 0x4e20, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1], 0x1}}, @common=@inet=@udp={{0x30}, {[0x4e23, 0x4e22], [0x4e23, 0x4e22], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518)
lseek(r3, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1dd)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x7, 0x1]})
read(r5, 0x0, 0x0)
ioctl$COMEDI_CANCEL(r5, 0x6407)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0])
chdir(&(0x7f0000000100)='./file0\x00')
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
write(r4, &(0x7f0000000900)='2', 0x1)

1m1.523187314s ago: executing program 1 (id=380):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x4, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x27, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x13, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m0.825293429s ago: executing program 1 (id=385):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2020, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

59.902992716s ago: executing program 1 (id=390):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

59.113095116s ago: executing program 1 (id=393):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x4, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x27, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x13, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

58.614872435s ago: executing program 1 (id=398):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

58.280348368s ago: executing program 32 (id=398):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

51.906248367s ago: executing program 0 (id=423):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000280)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='1', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)

51.675238232s ago: executing program 0 (id=427):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '#%\\x*@#Lw\x9e5\x9f>k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b~F6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P(<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r2, 0x21, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x400)

49.019951253s ago: executing program 0 (id=436):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
shutdown(r0, 0x1)

48.084749844s ago: executing program 0 (id=439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)

47.432108326s ago: executing program 0 (id=442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='1', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r3)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)

46.941165363s ago: executing program 0 (id=444):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '#%\\x*@#Lw\x9e5\x9f>k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b~F6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P(<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r2, 0x21, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x400)

46.423720347s ago: executing program 33 (id=444):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '#%\\x*@#Lw\x9e5\x9f>k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b~F6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P(<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$eJzs3c9vHGf9B/D3rNeON98qX6dNaCSKsBKpIEUkTqwUwiUGIZRDhapy6NlKnMbqJqkSF6UFQQoITkgc+gcUJN84ICTuQeHCpdx69bESUi8RQlEltGhmZ9e79jr2Jv6RwOsVjed55sfzfOYzz8x411ltgP9Zl0+neT9FLp9+/W5ZX1udb6+tzh+qV7eTlOVG0uzOUtxMigfJQrm+GJgyMN/ko+WLb376cO2zbq1ZT9X2E/39pncU8og+7tVTZuv2ZkfuObmj9rttVeHlhSRX6vmwqZ22NbRhmbRT9RwOXGeTe+PsvuX1Djz7qqfTj7+czFTPzU1mksP1k7n6naC+OzT2Ncg9MNZdDgAAAJ5Tn9w66AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+VOk+v7/op4a9TyzKXrf/z/VW1aXn0ELO97y/p7GAQAAAAAAAAD746uP8ih3c6RX7xTV3/xPVpVj+aKT/F/ey50s5XbO5G4Ws5KV3M65JDMDDU3dXVxZuX2uv2dp9J7nR+55fr+OGAAAAAAAAAD+K/08rfW//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLOgSCa6s2o6lvyrnGcmjWbW1+Ve8vckUwcd7xiKDfV/d7oOKBwAAAB4MtNPsM//P8qj3M2R3uvjTlG+5s+Xqvp03svNrGQ5K2lnKVfr19Dlq/7G2up8e211/kY5lfXhOL7z+VhhTNUtTFS1UT2fqLZo5VqWqyVncqUK5moa3b5PJSd68QzENeDDz9fDvHRph5E167SWnf12xLsIu+f+UK3xmC1b68El/YzM1bGVex7tZqCo3qhJNmZi27PTHKrNVK1O9ns6l0b/nZ9j2+c8xaXaNr32HK7n5fH8ak9zPq5+JhqpMnG+N/rKa+bxmUi+9uc/vHW9ffOd69funH52DmkbE1ss3zgm5gcy8fJznYnmmNvPVZk43q9fzvfzw5zObN7I7SznR1nMSpbSe6NxsR7P5c+Zx2dqYaj2xnaRTNXnpXvOdhLTbL5XlRZzstr3SJZT5FauZimvVf/O51y+mQu5kIsDZ/j4lnFXx1Zd9Y2NV33vTP9lZPCnvl4Xyrvbr9fvcguPO+KtRudu6d77y7weHchrd9Q/7G91dOA6mBvI0ou97EyObHy8e+OGt9rLPn6xzXNif83UmSgvoN5TohfdS91MNKtn0eZx/rtOuV/aNzud64vvbtH+vQ31V+t5OaxWv7Ld1j2jT8XuKk/Vi5mu7yTDo6Nc91L/LjOwrrM+lrvrhp+45X7Hq3VF0btSf5Bb1QDYfKVO1b/DbWip38XLI3uZr/Y7MbBu6Pet3Eo7V/chfwA8ib+91S/O5PBU6x+tT1oft37Zut56ffq7h7516JWpTP518tvNuYlXG68Uf8rH+Wn1+h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhKd97/4J3Fdnvp9uhCY+tVQ4VWNi7ZquVDo9sp6i/02UFfz0VhOsnQkup7jnali+YY7bQ2htEtTCSpl3R+lux7fnrfaTV6m9+UheamETWqsDC05I+bG/xwzAiLnV0Xe1hoZH87LcfCqFUHeFMC9sXZlRvvnr3z/gffWL6x+PbS20s3Jy9cuDh38cJr82evLbeX5ro/DzpKYC+sP/QPOhIAAAAAAAAAAABgp0Z9MODkCyM/NDLuZzz8z0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgV1w+neb9FDk3d2aurK+tzrfLqVde37KZpNFIip8kxYNkId0pMwPNFfn9g3RG9PPR8sU3P3249tl6W83u9kmjnm/t8WuT3KunzCaZqOdPYai9K0/dXvHP3jGUCfui0+ksPF18sDv+EwAA//8BQfjb")
mkdirat(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r2, 0x21, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x400)

46.41433149s ago: executing program 2 (id=447):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x4, 0x5f2, &(0x7f0000000f80)="$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")
r0 = fanotify_init(0x60, 0x40000)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x108)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x800)
ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1c29)

46.240386308s ago: executing program 2 (id=449):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0xb00}, 0x1)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

44.905380571s ago: executing program 2 (id=451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='1', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r3)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)

44.729670589s ago: executing program 2 (id=453):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

44.217081643s ago: executing program 2 (id=455):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
unshare(0x2c020400)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)
add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, 0x0, 0x0, 0x0)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60060202"], 0x8)

43.747473663s ago: executing program 2 (id=457):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file3\x00', 0x808400, &(0x7f0000000100)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@errors_continue}]}, 0x4, 0x46d, &(0x7f0000000d80)="$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")
keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)

43.548083969s ago: executing program 34 (id=457):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file3\x00', 0x808400, &(0x7f0000000100)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@errors_continue}]}, 0x4, 0x46d, &(0x7f0000000d80)="$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")
keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)

41.589957276s ago: executing program 3 (id=469):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

41.340163806s ago: executing program 3 (id=470):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
recvmmsg(r0, 0x0, 0x0, 0x2020, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

41.219313629s ago: executing program 3 (id=471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='1', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r3)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r4, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)

41.170836423s ago: executing program 3 (id=472):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)

40.552183915s ago: executing program 3 (id=473):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffffffffffff8, 0x8002)
sync_file_range(r0, 0xceb, 0x6, 0x5)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000840))

40.015302105s ago: executing program 3 (id=474):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x150, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x120, 0x2, {{0xe, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfd], 0x80, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x0, 0xfffa, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x778, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc}, {0xc, 0x3, 0x66}, {0xc, 0x3, 0xd}, {0xc, 0x3, 0x800005}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}]}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0xc0}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x4}, {0xc}, {0xc, 0x3, 0x1}]}]}}}]}, 0x150}}, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.641866919s ago: executing program 35 (id=474):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x150, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x120, 0x2, {{0xe, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfd], 0x80, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x0, 0xfffa, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x778, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc}, {0xc, 0x3, 0x66}, {0xc, 0x3, 0xd}, {0xc, 0x3, 0x800005}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}]}, @TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0xc0}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x4}, {0xc}, {0xc, 0x3, 0x1}]}]}}}]}, 0x150}}, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22.961396113s ago: executing program 7 (id=475):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

22.749131783s ago: executing program 7 (id=510):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="03", 0x12}], 0x1}, 0x20004014)

22.571276052s ago: executing program 5 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

22.442266798s ago: executing program 5 (id=514):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000a00)="32c1191374a8", 0x6, 0xe81)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

22.308830336s ago: executing program 7 (id=515):
socket$packet(0x11, 0x3, 0x300)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
readv(r2, &(0x7f0000001b80)=[{&(0x7f0000000180)=""/183, 0xb7}], 0x1)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x82, {0xc, 0x3, 0x0, {0x4, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x1, 0x74, 0xffffffff, 0xffffbffe, 0xfffffffc, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531"], 0x53)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)

21.795301559s ago: executing program 5 (id=516):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff0800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21.378974295s ago: executing program 7 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

20.659127436s ago: executing program 7 (id=519):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4d, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x80, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x2, 0x0, 0x4, 0x200}, [@RTA_NH_ID={0x0, 0x1e, 0xfff}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_METRICS={0x0, 0x8, 0x0, 0x1, "4608f58395073bf6b55bf18f57483eb2e2fda3e9fd1de311c7542262921ca204a581f63afa35251b17bfde9eeb80a9bace5555e7a4077ba8529f623c2b2173770431d5bdeca4790286fcbe4c82d40b5b8a4e79448062baffacbccb24d837cea51f1d0eaf1cd53bfb52597bd6fbaa965c9ba249d082a70f3cdfd6367355e4f3846d99f60744eb7fca6a3f56f91c891593fbaeb3a8cc79aebc476c8c00a1d26da723e47d707be506ff6bf2ca4b86113e0b7749b2cd78058b57e1169afea52c5ffebb24b3a5dc314ead38cef2bdf9d4c76765994de370c5cc230bb0a63c72d77eafdbbd936d47815d58"}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20.489069673s ago: executing program 5 (id=521):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

19.839462205s ago: executing program 7 (id=524):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00')

19.82059959s ago: executing program 5 (id=525):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000080)=""/165, 0xa5}], 0x2)

19.233227034s ago: executing program 36 (id=524):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00')

19.223168397s ago: executing program 5 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

19.222903486s ago: executing program 4 (id=528):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000280)="4701000004000000ff6c83400000000020000000", 0x14, 0x81, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @remote}, 0x14)

18.70966705s ago: executing program 37 (id=527):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)

18.667046032s ago: executing program 4 (id=530):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)

18.049511904s ago: executing program 4 (id=531):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff0800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16.850072109s ago: executing program 4 (id=533):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

16.346582479s ago: executing program 4 (id=534):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000240)="06cd20b006bc04a09300be45aaf6e43d42b8716b", 0x14, 0x81, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

15.162598699s ago: executing program 6 (id=538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0x9, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x5, '\x00', 0x6}, {0x9, 0x0, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x46}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

14.876979509s ago: executing program 6 (id=539):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x20002, 0x100})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount(0x0, 0x0, 0x0, 0x101000, &(0x7f0000000100)='proc\x00')
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r3, 0x100, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

14.7673124s ago: executing program 6 (id=540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x1, 0x0, 0x0)
ioprio_get$pid(0x2, r0)
sched_getscheduler(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
keyctl$session_to_parent(0x12)

14.472686372s ago: executing program 6 (id=541):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

13.799988019s ago: executing program 6 (id=542):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0)

13.396233372s ago: executing program 4 (id=543):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32, @ANYBLOB="14000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0xc0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

13.022270157s ago: executing program 38 (id=543):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32, @ANYBLOB="14000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0xc0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

12.97528464s ago: executing program 6 (id=545):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

12.783138173s ago: executing program 39 (id=545):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0})

873.112406ms ago: executing program 8 (id=526):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00')
openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x70}}, 0x0)

775.381694ms ago: executing program 9 (id=529):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000002200)=ANY=[@ANYBLOB="12010003000000201e040030400001020301090269000301008002080b01010104"], 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x0, 0x478, &(0x7f00000014c0)="$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")

458.241353ms ago: executing program 8 (id=546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x54, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT={0x4}]}, 0x54}}, 0x20008000)

291.212559ms ago: executing program 8 (id=547):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x1, 0x0, 0x0)
ioprio_get$pid(0x2, r0)
sched_getscheduler(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
keyctl$session_to_parent(0x12)

0s ago: executing program 8 (id=548):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts.
[   66.619922][ T5762] cgroup: Unknown subsys name 'net'
[   66.749894][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.157784][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.306300][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.315777][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.324087][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.332704][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.340602][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.374622][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.381917][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.382814][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.390384][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.398701][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.405178][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.412862][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.418027][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.425353][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.432218][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.439136][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.446445][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.453157][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.463437][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.468200][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.473908][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.482295][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.487895][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.506972][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.978506][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   71.039841][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   71.050373][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   71.060424][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   71.174507][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.181700][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.192820][ T5774] bridge_slave_0: entered allmulticast mode
[   71.200074][ T5774] bridge_slave_0: entered promiscuous mode
[   71.229568][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.236773][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.244257][ T5774] bridge_slave_1: entered allmulticast mode
[   71.251053][ T5774] bridge_slave_1: entered promiscuous mode
[   71.329732][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.337238][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.344522][ T5777] bridge_slave_0: entered allmulticast mode
[   71.351779][ T5777] bridge_slave_0: entered promiscuous mode
[   71.369266][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.376520][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.383815][ T5777] bridge_slave_1: entered allmulticast mode
[   71.390628][ T5777] bridge_slave_1: entered promiscuous mode
[   71.407990][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.415539][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.422801][ T5775] bridge_slave_0: entered allmulticast mode
[   71.430322][ T5775] bridge_slave_0: entered promiscuous mode
[   71.438705][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.445939][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.453200][ T5775] bridge_slave_1: entered allmulticast mode
[   71.460233][ T5775] bridge_slave_1: entered promiscuous mode
[   71.469636][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.489223][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.497486][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.506654][ T5776] bridge_slave_0: entered allmulticast mode
[   71.514923][ T5776] bridge_slave_0: entered promiscuous mode
[   71.522846][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.530523][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.538041][ T5776] bridge_slave_1: entered allmulticast mode
[   71.545972][ T5776] bridge_slave_1: entered promiscuous mode
[   71.562098][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.632808][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.647148][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.659087][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.671891][ T5774] team0: Port device team_slave_0 added
[   71.682558][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[   71.685394][ T5774] team0: Port device team_slave_1 added
[   71.693544][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[   71.709703][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.720928][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.742220][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.796616][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.803910][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.830005][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.853846][ T5775] team0: Port device team_slave_0 added
[   71.862570][ T5776] team0: Port device team_slave_0 added
[   71.872273][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.879431][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.905816][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.927164][ T5777] team0: Port device team_slave_0 added
[   71.935619][ T5777] team0: Port device team_slave_1 added
[   71.949934][ T5775] team0: Port device team_slave_1 added
[   71.965208][ T5776] team0: Port device team_slave_1 added
[   72.018026][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.025125][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.051321][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.063381][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.070362][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.099130][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.135764][ T5774] hsr_slave_0: entered promiscuous mode
[   72.142097][ T5774] hsr_slave_1: entered promiscuous mode
[   72.150991][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.161004][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.187187][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.198906][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.206380][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.232462][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.251245][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.258314][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.284673][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.297481][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.305627][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.331734][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.421840][ T5776] hsr_slave_0: entered promiscuous mode
[   72.428426][ T5776] hsr_slave_1: entered promiscuous mode
[   72.435030][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.442863][ T5776] Cannot create hsr debugfs directory
[   72.460124][ T5775] hsr_slave_0: entered promiscuous mode
[   72.466621][ T5775] hsr_slave_1: entered promiscuous mode
[   72.473314][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.480902][ T5775] Cannot create hsr debugfs directory
[   72.524368][ T5777] hsr_slave_0: entered promiscuous mode
[   72.530624][ T5777] hsr_slave_1: entered promiscuous mode
[   72.536937][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.545171][ T5090] Bluetooth: hci0: command tx timeout
[   72.545220][ T5785] Bluetooth: hci2: command tx timeout
[   72.550831][ T5090] Bluetooth: hci3: command tx timeout
[   72.556662][   T51] Bluetooth: hci1: command tx timeout
[   72.567185][ T5777] Cannot create hsr debugfs directory
[   72.943700][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.959455][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.971259][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.981357][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.054824][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.065907][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.078122][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.087905][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.205715][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.215305][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.234751][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.247365][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.303667][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.320895][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.335160][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.357218][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.366931][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.392586][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   73.422641][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.430046][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.452863][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.460171][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.476858][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.549963][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   73.597061][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.604255][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.631459][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.646804][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.654010][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.736781][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   73.789426][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.796666][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.818421][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.840994][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.848394][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.947877][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   74.004195][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.011329][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.046260][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.053473][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.105421][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.282201][ T5774] veth0_vlan: entered promiscuous mode
[   74.303894][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.376009][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.392410][ T5774] veth1_vlan: entered promiscuous mode
[   74.488425][ T5775] veth0_vlan: entered promiscuous mode
[   74.504837][ T5777] veth0_vlan: entered promiscuous mode
[   74.512634][ T5774] veth0_macvtap: entered promiscuous mode
[   74.535307][ T5774] veth1_macvtap: entered promiscuous mode
[   74.546516][ T5775] veth1_vlan: entered promiscuous mode
[   74.561640][ T5777] veth1_vlan: entered promiscuous mode
[   74.581355][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.623767][ T5785] Bluetooth: hci2: command tx timeout
[   74.624400][   T51] Bluetooth: hci3: command tx timeout
[   74.629224][ T5785] Bluetooth: hci0: command tx timeout
[   74.635008][ T5090] Bluetooth: hci1: command tx timeout
[   74.662381][ T5777] veth0_macvtap: entered promiscuous mode
[   74.673889][ T5777] veth1_macvtap: entered promiscuous mode
[   74.686072][ T5775] veth0_macvtap: entered promiscuous mode
[   74.706990][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.719378][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.739072][ T5775] veth1_macvtap: entered promiscuous mode
[   74.749267][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.761724][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.775427][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.786335][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.795937][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.804745][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.813545][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.856022][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.871606][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.882721][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.890888][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.903991][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.914514][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.925180][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.936959][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.948080][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.958891][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.968996][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.979815][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.991720][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.001829][ T5776] veth0_vlan: entered promiscuous mode
[   75.020024][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.030387][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.039245][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.049732][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.060976][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.071010][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.080251][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.089146][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.141009][ T5776] veth1_vlan: entered promiscuous mode
[   75.261875][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.282859][ T5776] veth0_macvtap: entered promiscuous mode
[   75.292412][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.322059][ T5776] veth1_macvtap: entered promiscuous mode
[   75.340652][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.349514][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.410576][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.422498][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.437356][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.448059][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.459161][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.470109][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.481268][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.492034][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.504007][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.517659][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.528161][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.538342][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.548979][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.559986][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.568342][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.570913][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.586879][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.589581][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.603493][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.612229][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.635275][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.645300][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.732255][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.749715][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.765362][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.782163][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.890119][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.908816][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.977786][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.020837][ T5841] block device autoloading is deprecated and will be removed.
[   76.034552][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.381538][ T5848] null_blk: disk nullb1 created
[   76.438144][ T5848] nvmet: adding nsid 1 to subsystem testsubsys
[   76.573457][ T5858] netlink: 'syz.3.8': attribute type 4 has an invalid length.
[   76.701953][ T5860] ip_tables: iptables: counters copy to user failed while replacing table
[   76.703660][ T5858] syz.3.8 (5858) used greatest stack depth: 20464 bytes left
[   76.717542][   T51] Bluetooth: hci3: command tx timeout
[   76.719843][ T5785] Bluetooth: hci2: command tx timeout
[   76.723433][   T51] Bluetooth: hci0: command tx timeout
[   76.725503][ T5090] Bluetooth: hci1: command tx timeout
[   77.044508][ T5855] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.629575][ T5878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.902185][ T5888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.334854][ T5897] syzkaller0: entered promiscuous mode
[   78.341656][ T5897] syzkaller0: entered allmulticast mode
[   78.784713][ T5090] Bluetooth: hci1: command tx timeout
[   78.784733][ T5789] Bluetooth: hci0: command tx timeout
[   78.784758][ T5789] Bluetooth: hci3: command tx timeout
[   78.790285][ T5090] Bluetooth: hci2: command tx timeout
[   78.815029][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'.
[   78.824739][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'.
[   78.835352][ T5916] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[   78.844403][ T5916] iwpm_hello_cb: Unable to parse nlmsg
[   79.825649][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   80.144436][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.359561][    T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   80.370417][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.382918][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   80.403119][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.417431][    T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   80.426875][    T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   80.435016][    T8] usb 2-1: Product: syz
[   80.439927][    T8] usb 2-1: Manufacturer: syz
[   80.459261][    T8] cdc_wdm 2-1:1.0: skipping garbage
[   80.466728][    T8] cdc_wdm 2-1:1.0: skipping garbage
[   80.481093][    T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   80.488860][    T8] cdc_wdm 2-1:1.0: Unknown control protocol
[   80.691754][ T5838] usb 2-1: USB disconnect, device number 2
[   81.849573][ T6009] CIFS: Attempting to mount //127.0.0.1/share
[   82.669549][ T6009] CIFS: VFS: Error connecting to socket. Aborting operation.
[   82.689881][ T6009] CIFS: VFS: cifs_mount failed w/return code = -4
[   82.696170][ T6034] team0 (unregistering): Port device team_slave_0 removed
[   82.754892][ T6034] team0 (unregistering): Port device team_slave_1 removed
[   83.936296][ T6051] kvm: kvm [6049]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffff00000000
[   83.949851][ T6051] kvm: kvm [6049]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000
[   83.966821][ T6051] kvm: kvm [6049]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff00000000
[   84.022895][ T6066] syzkaller0: entered promiscuous mode
[   84.036508][ T6066] syzkaller0: entered allmulticast mode
[   84.507134][ T6074] syzkaller0: entered promiscuous mode
[   84.512692][ T6074] syzkaller0: entered allmulticast mode
[   84.974342][ T6092] binder: BINDER_SET_CONTEXT_MGR already set
[   84.980709][ T6092] binder: 6091:6092 ioctl 4018620d 200000004a80 returned -16
[   85.985669][ T6118] warning: `syz.3.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.110921][ T6120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   87.033928][   T23] cfg80211: failed to load regulatory.db
[   87.133856][ T6162] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   88.237498][ T6200] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   88.308939][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   90.145975][ T6238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   91.353628][ T6264] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   92.017188][ T6303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   93.709372][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.471901][ T6389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.413187][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.986016][ T6444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.562673][ T6474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.081076][ T6500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.829700][ T6533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.372596][ T6560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.801116][ T6574] syzkaller0: entered promiscuous mode
[   98.810463][ T6574] syzkaller0: entered allmulticast mode
[   99.149448][ T6587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.567573][ T6600] syzkaller0: entered promiscuous mode
[   99.573378][ T6600] syzkaller0: entered allmulticast mode
[   99.580048][ T6598] tap0: tun_chr_ioctl cmd 1074025677
[   99.614650][ T6598] tap0: linktype set to 780
[   99.942459][ T6610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.201548][ T6624] syzkaller0: entered promiscuous mode
[  100.207989][ T6624] syzkaller0: entered allmulticast mode
[  100.396884][ T6630] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[  100.925069][ T6652] syzkaller0: entered promiscuous mode
[  100.935600][ T6652] syzkaller0: entered allmulticast mode
[  101.878810][ T6674] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.299'.
[  101.998950][ T6681] syzkaller0: entered promiscuous mode
[  102.007641][ T6681] syzkaller0: entered allmulticast mode
[  102.124564][ T6687] =======================================================
[  102.124564][ T6687] WARNING: The mand mount option has been deprecated and
[  102.124564][ T6687]          and is ignored by this kernel. Remove the mand
[  102.124564][ T6687]          option from the mount to silence this warning.
[  102.124564][ T6687] =======================================================
[  102.199390][ T6689] syz.1.304[6689]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  102.241311][ T6689] loop1: detected capacity change from 0 to 1024
[  102.254644][ T6689] ext4: Unknown parameter 'noacl'
[  102.433170][ T6700] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.308'.
[  102.522124][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'.
[  102.769464][ T6713] syzkaller0: entered promiscuous mode
[  102.776990][ T6713] syzkaller0: entered allmulticast mode
[  103.460383][ T6741] syzkaller0: entered promiscuous mode
[  103.473168][ T6741] syzkaller0: entered allmulticast mode
[  103.577414][ T6744] loop3: detected capacity change from 0 to 2048
[  103.971854][ T6753] process 'syz.3.324' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0' with NULL argv: empty string added
[  105.079720][ T6774] syzkaller0: entered promiscuous mode
[  105.085633][ T6774] syzkaller0: entered allmulticast mode
[  105.586125][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.550981][   T27] audit: type=1800 audit(1790773845.993:2): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.346" name=08 dev="sda1" ino=2043 res=0 errno=0
[  107.713848][ T6243] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  107.917945][ T6243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.937256][ T6243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.968074][ T6243] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  108.002098][ T6243] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  108.018968][ T6243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.040976][ T6243] usb 1-1: config 0 descriptor??
[  108.487858][ T6243] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  108.574703][ T6243] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  108.801366][ T5764] usb 1-1: USB disconnect, device number 2
[  108.872747][ T6833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.564389][ T6856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.326603][ T6867] Zero length message leads to an empty skb
[  110.333299][ T6867] syzkaller0: entered promiscuous mode
[  110.338827][ T6867] syzkaller0: entered allmulticast mode
[  110.415973][ T6871] loop3: detected capacity change from 0 to 1024
[  110.423206][ T6243] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  110.623287][ T6243] usb 2-1: Using ep0 maxpacket: 8
[  110.649314][ T6243] usb 2-1: unable to get BOS descriptor or descriptor too short
[  110.707828][ T6243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.727583][ T6243] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  110.742300][ T6243] usb 2-1: too many endpoints for config 1 interface 0 altsetting 228: 36, using maximum allowed: 30
[  110.855672][ T6243] usb 2-1: config 1 interface 0 altsetting 228 has 0 endpoint descriptors, different from the interface descriptor's value: 36
[  111.052297][ T6243] usb 2-1: config 1 interface 0 has no altsetting 0
[  111.307191][ T6243] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.358997][ T6243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.396090][ T6243] usb 2-1: Product: syz
[  111.413153][ T6243] usb 2-1: Manufacturer: syz
[  111.417826][ T6243] usb 2-1: SerialNumber: syz
[  111.735858][ T6243] cdc_ether: probe of 2-1:1.0 failed with error -22
[  111.747561][ T6243] usb 2-1: USB disconnect, device number 3
[  111.939593][ T6900] syzkaller0: entered promiscuous mode
[  111.950828][ T6900] syzkaller0: entered allmulticast mode
[  112.905705][ T6922] loop3: detected capacity change from 0 to 164
[  113.372696][ T6936] loop3: detected capacity change from 0 to 512
[  113.495190][ T6936] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  113.511739][ T6936] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  113.522308][ T6936] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  113.543692][ T6936] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  113.551661][ T6936] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  113.564448][ T6936] EXT4-fs (loop3): failed to initialize system zone (-117)
[  113.572025][ T6936] EXT4-fs (loop3): mount failed
[  113.599861][ T6942] loop2: detected capacity change from 0 to 1024
[  113.963209][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  114.186248][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.216622][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.233085][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.251829][ T5838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.261593][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.300383][ T5838] usb 3-1: config 0 descriptor??
[  114.854572][ T5838] usbhid 3-1:0.0: can't add hid device: -71
[  114.870729][ T5838] usbhid: probe of 3-1:0.0 failed with error -71
[  114.899604][ T5838] usb 3-1: USB disconnect, device number 2
[  115.119962][ T6961] bridge0: port 3(syzkaller0) entered blocking state
[  115.143303][ T6961] bridge0: port 3(syzkaller0) entered disabled state
[  115.150266][ T6961] syzkaller0: entered allmulticast mode
[  115.199057][ T6961] syzkaller0: entered promiscuous mode
[  115.225581][ T6961] bridge0: port 3(syzkaller0) entered blocking state
[  115.233369][ T6961] bridge0: port 3(syzkaller0) entered forwarding state
[  115.271111][ T6960] bridge0: port 3(syzkaller0) entered disabled state
[  115.337411][ T6960] syzkaller0 (unregistering): left allmulticast mode
[  115.346710][ T6960] syzkaller0 (unregistering): left promiscuous mode
[  115.353867][ T6960] bridge0: port 3(syzkaller0) entered disabled state
[  115.780633][   T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.956547][   T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.993613][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  116.099657][   T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.213053][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.237024][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.239946][   T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.257274][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.299913][   T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.323113][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.352036][   T23] usb 1-1: config 0 descriptor??
[  116.660002][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  116.671667][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  116.681469][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  116.690866][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  116.700730][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  116.722377][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.848408][   T23] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description
[  116.889637][   T23] plantronics 0003:047F:FFFF.0002: parse failed
[  116.914009][   T23] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22
[  117.106840][ T5817] usb 1-1: USB disconnect, device number 3
[  117.161289][ T6995] loop2: detected capacity change from 0 to 128
[  117.260876][   T27] audit: type=1804 audit(1790773856.783:3): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.403" name="/newroot/100/file0/file0" dev="loop2" ino=1048594 res=1 errno=0
[  117.485300][ T7006] loop2: detected capacity change from 0 to 2048
[  117.545598][ T7009] loop3: detected capacity change from 0 to 2048
[  117.567365][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  117.605008][ T7006] loop2: detected capacity change from 0 to 128
[  117.605473][ T5786] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  117.628008][ T5792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  117.660399][ T7006] EXT4-fs (loop2): Test dummy encryption mode enabled
[  117.721118][ T7009] loop3: detected capacity change from 0 to 128
[  117.741763][ T7009] EXT4-fs (loop3): Test dummy encryption mode enabled
[  117.753437][ T7006] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.763542][ T6984] chnl_net:caif_netlink_parms(): no params data found
[  117.783332][ T7006] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.819205][ T7009] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.967661][ T7009] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.126105][ T5090] Bluetooth: hci1: command tx timeout
[  119.426873][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.465693][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.657893][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.665840][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.675474][ T6984] bridge_slave_0: entered allmulticast mode
[  119.682761][ T6984] bridge_slave_0: entered promiscuous mode
[  119.697193][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.705315][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.712556][ T6984] bridge_slave_1: entered allmulticast mode
[  119.720430][ T6984] bridge_slave_1: entered promiscuous mode
[  119.976814][ T7046] loop0: detected capacity change from 0 to 1024
[  119.980655][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.006389][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.280113][ T6984] team0: Port device team_slave_0 added
[  120.387586][   T48] hsr_slave_0: left promiscuous mode
[  120.416187][ T7056] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  120.423315][   T48] hsr_slave_1: left promiscuous mode
[  120.434822][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.445412][ T7057] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  120.452158][ T7056] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  120.458868][ T7057] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  120.496957][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.537929][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.585267][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.636001][   T48] bridge_slave_1: left allmulticast mode
[  120.641788][   T48] bridge_slave_1: left promiscuous mode
[  120.649022][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.681038][   T48] bridge_slave_0: left allmulticast mode
[  120.686992][   T48] bridge_slave_0: left promiscuous mode
[  120.703015][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.900971][   T48] veth1_macvtap: left promiscuous mode
[  120.923749][   T48] veth0_macvtap: left promiscuous mode
[  120.929466][   T48] veth1_vlan: left promiscuous mode
[  120.943533][   T48] veth0_vlan: left promiscuous mode
[  120.961010][ T7068] loop2: detected capacity change from 0 to 2048
[  121.017531][ T3479] hfsplus: b-tree write err: -5, ino 25
[  121.036140][ T3479] hfsplus: b-tree write err: -5, ino 4
[  121.041952][ T3479] hfsplus: b-tree write err: -5, ino 2
[  121.078955][ T3479] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  121.143899][ T3479] hfsplus: b-tree write err: -5, ino 27
[  121.216376][ T5090] Bluetooth: hci1: command tx timeout
[  122.670518][ T7098] loop0: detected capacity change from 0 to 1024
[  123.114332][   T48] team0 (unregistering): Port device team_slave_1 removed
[  123.198752][   T48] team0 (unregistering): Port device team_slave_0 removed
[  123.249914][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.263103][ T5090] Bluetooth: hci1: command tx timeout
[  123.310152][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.295394][   T48] bond0 (unregistering): Released all slaves
[  124.868812][ T6984] team0: Port device team_slave_1 added
[  125.054781][ T7125] loop3: detected capacity change from 0 to 2048
[  125.123153][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  125.152152][ T7127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.222265][ T7125] loop3: detected capacity change from 0 to 128
[  125.231500][ T5786] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  125.276864][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.284683][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.310583][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.318702][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.337203][ T7125] EXT4-fs (loop3): Test dummy encryption mode enabled
[  125.346440][ T5090] Bluetooth: hci1: command tx timeout
[  125.358927][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.398811][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.412884][ T7125] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.425530][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.469154][ T7125] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.619967][ T6984] hsr_slave_0: entered promiscuous mode
[  125.656950][ T6984] hsr_slave_1: entered promiscuous mode
[  125.686862][ T6984] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.703147][ T6984] Cannot create hsr debugfs directory
[  126.309709][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.176642][ T7164] loop3: detected capacity change from 0 to 512
[  127.189236][ T7164] EXT4-fs: Ignoring removed nobh option
[  127.257795][ T6984] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.275034][ T6984] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.286044][ T6984] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.297520][ T6984] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.310600][ T7164] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.443: invalid indirect mapped block 256 (level 2)
[  127.429825][ T7164] EXT4-fs (loop3): 2 truncates cleaned up
[  127.445637][ T7164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.477771][ T6984] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.532008][ T6984] 8021q: adding VLAN 0 to HW filter on device team0
[  127.623991][   T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.700174][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.707432][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.729476][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.732794][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.745720][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.828879][   T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.946473][   T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.958053][ T7178] loop2: detected capacity change from 0 to 128
[  128.094066][   T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.687334][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.698026][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.711086][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.724407][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.734015][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  128.741386][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.786671][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.486747][ T7192] chnl_net:caif_netlink_parms(): no params data found
[  130.232345][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.240100][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.248356][ T7192] bridge_slave_0: entered allmulticast mode
[  130.257504][ T7192] bridge_slave_0: entered promiscuous mode
[  130.311984][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.331658][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.340186][ T7192] bridge_slave_1: entered allmulticast mode
[  130.347721][ T7192] bridge_slave_1: entered promiscuous mode
[  130.387995][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.406177][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.423991][   T48] hsr_slave_0: left promiscuous mode
[  130.429844][   T48] hsr_slave_1: left promiscuous mode
[  130.436920][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.445885][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.454152][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.461625][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.469699][   T48] bridge_slave_1: left allmulticast mode
[  130.475612][   T48] bridge_slave_1: left promiscuous mode
[  130.481393][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.505828][   T48] bridge_slave_0: left allmulticast mode
[  130.511638][   T48] bridge_slave_0: left promiscuous mode
[  130.523208][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.574763][   T48] veth1_macvtap: left promiscuous mode
[  130.580569][   T48] veth0_macvtap: left promiscuous mode
[  130.586821][   T48] veth1_vlan: left promiscuous mode
[  130.592319][   T48] veth0_vlan: left promiscuous mode
[  130.783557][   T51] Bluetooth: hci3: command tx timeout
[  131.119487][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.138714][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.152671][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.182100][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.197379][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  131.205842][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.288489][ T7241] usb usb7: usbfs: process 7241 (syz.3.460) did not claim interface 0 before use
[  131.480196][   T48] team0 (unregistering): Port device team_slave_1 removed
[  131.539885][   T48] team0 (unregistering): Port device team_slave_0 removed
[  131.598628][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.652397][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.805239][ T7249] loop3: detected capacity change from 0 to 512
[  131.944373][ T7249] EXT4-fs (loop3): mounted filesystem 007f0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.957280][ T7249] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.017556][ T5774] EXT4-fs (loop3): unmounting filesystem 007f0000-0000-0000-0000-000000000000.
[  132.116405][   T48] bond0 (unregistering): Released all slaves
[  132.264753][ T6984] veth0_vlan: entered promiscuous mode
[  132.286668][ T7192] team0: Port device team_slave_0 added
[  132.297719][ T6984] veth1_vlan: entered promiscuous mode
[  132.311868][ T7192] team0: Port device team_slave_1 added
[  132.364145][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.371172][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.420453][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.458371][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.480359][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.507996][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.587385][ T6984] veth0_macvtap: entered promiscuous mode
[  132.656181][ T6984] veth1_macvtap: entered promiscuous mode
[  132.688658][ T7192] hsr_slave_0: entered promiscuous mode
[  132.705373][ T7192] hsr_slave_1: entered promiscuous mode
[  132.723079][ T7192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.730783][ T7192] Cannot create hsr debugfs directory
[  132.786830][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.800891][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.814460][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.825399][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.836036][ T7271] binder: 7270:7271 ioctl c0306201 0 returned -14
[  132.837407][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.853592][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.864536][   T51] Bluetooth: hci3: command tx timeout
[  132.870846][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.880793][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.891457][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.911121][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.956328][ T6984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.974913][ T6984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.999627][ T6984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.012877][ T6984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.108776][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.118780][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.359126][   T51] Bluetooth: hci0: command tx timeout
[  133.751763][   T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.868558][ T7236] chnl_net:caif_netlink_parms(): no params data found
[  133.921361][   T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.997105][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.007549][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.036552][   T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.163364][   T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.187730][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.188187][ T7192] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  134.209121][ T7192] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  134.233186][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.241235][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.251850][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.260193][ T7236] bridge_slave_0: entered allmulticast mode
[  134.269757][ T7236] bridge_slave_0: entered promiscuous mode
[  134.278649][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.286065][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.293686][ T7236] bridge_slave_1: entered allmulticast mode
[  134.301027][ T7236] bridge_slave_1: entered promiscuous mode
[  134.318723][ T7192] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  134.360745][ T7192] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  134.387629][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.419966][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.539411][ T7236] team0: Port device team_slave_0 added
[  134.584504][ T7236] team0: Port device team_slave_1 added
[  134.717312][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.734614][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.768989][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.814367][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.821371][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.897763][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.943422][   T51] Bluetooth: hci3: command tx timeout
[  135.278465][ T7236] hsr_slave_0: entered promiscuous mode
[  135.298521][ T7236] hsr_slave_1: entered promiscuous mode
[  135.318559][ T7236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.339395][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.349338][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.358184][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.366234][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.377069][ T7236] Cannot create hsr debugfs directory
[  135.397020][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  135.404605][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.423983][   T51] Bluetooth: hci0: command tx timeout
[  135.674556][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.767942][ T7192] 8021q: adding VLAN 0 to HW filter on device team0
[  135.856228][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.863459][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.014325][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.021546][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.423617][ T7236] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  136.440630][ T7236] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  136.508453][ T7236] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  136.539203][ T7236] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  136.669910][ T7316] chnl_net:caif_netlink_parms(): no params data found
[  136.996333][   T48] hsr_slave_0: left promiscuous mode
[  137.002506][   T48] hsr_slave_1: left promiscuous mode
[  137.015271][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.022746][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.036547][ T5090] Bluetooth: hci3: command tx timeout
[  137.053739][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.061214][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.080555][   T48] bridge_slave_1: left allmulticast mode
[  137.103124][   T48] bridge_slave_1: left promiscuous mode
[  137.108931][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.126903][   T48] bridge_slave_0: left allmulticast mode
[  137.132614][   T48] bridge_slave_0: left promiscuous mode
[  137.138529][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.185116][   T48] veth1_macvtap: left promiscuous mode
[  137.190729][   T48] veth0_macvtap: left promiscuous mode
[  137.196551][   T48] veth1_vlan: left promiscuous mode
[  137.202051][   T48] veth0_vlan: left promiscuous mode
[  137.424289][ T5090] Bluetooth: hci2: command tx timeout
[  137.509182][ T5090] Bluetooth: hci0: command tx timeout
[  137.633171][ T5764] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  137.869850][ T5764] usb 5-1: config 0 interface 0 has no altsetting 0
[  137.876771][ T5764] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  137.886357][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.905189][ T5764] usb 5-1: config 0 descriptor??
[  137.952313][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.008917][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.348092][ T5764] usbhid 5-1:0.0: can't add hid device: -71
[  138.356787][ T5764] usbhid: probe of 5-1:0.0 failed with error -71
[  138.370257][ T5764] usb 5-1: USB disconnect, device number 2
[  138.385729][   T48] bond0 (unregistering): Released all slaves
[  138.547944][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.563446][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.570723][ T7316] bridge_slave_0: entered allmulticast mode
[  138.589611][ T7316] bridge_slave_0: entered promiscuous mode
[  138.611255][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.663992][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.674037][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.681316][ T7316] bridge_slave_1: entered allmulticast mode
[  138.696017][ T7316] bridge_slave_1: entered promiscuous mode
[  138.821262][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.856762][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.988805][ T7316] team0: Port device team_slave_0 added
[  139.037730][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.058597][ T7316] team0: Port device team_slave_1 added
[  139.135799][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.142805][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.185235][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.229735][ T7236] 8021q: adding VLAN 0 to HW filter on device team0
[  139.248792][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.264763][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.294955][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.397240][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.404468][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.436856][ T7316] hsr_slave_0: entered promiscuous mode
[  139.457270][ T7316] hsr_slave_1: entered promiscuous mode
[  139.466201][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.473969][ T7316] Cannot create hsr debugfs directory
[  139.493710][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.500892][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.510727][ T5090] Bluetooth: hci2: command tx timeout
[  139.571666][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.598181][ T5090] Bluetooth: hci0: command tx timeout
[  139.675561][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.788185][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.885742][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.901179][ T7192] veth0_vlan: entered promiscuous mode
[  139.922855][ T7192] veth1_vlan: entered promiscuous mode
[  140.051016][ T7386] loop4: detected capacity change from 0 to 2048
[  140.210925][ T7316] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  140.215480][ T7386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.247410][ T7316] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  140.268366][ T7386] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.280745][ T7316] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  140.309583][ T7316] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  140.397042][ T6984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.405892][ T7192] veth0_macvtap: entered promiscuous mode
[  140.557514][ T7400] loop4: detected capacity change from 0 to 256
[  140.566927][ T7192] veth1_macvtap: entered promiscuous mode
[  140.635432][ T7400] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.674971][ T7400] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  140.689341][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.711329][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.713802][ T7400] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x38bc65dc, utbl_chksum : 0xe619d30d)
[  140.733032][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.735270][ T7400] exFAT-fs (loop4): failed to load alloc-bitmap
[  140.754205][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.756053][ T7400] exFAT-fs (loop4): failed to recognize exfat type
[  140.790753][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.887845][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.922331][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.949707][ T7192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.988203][ T7192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.010969][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.105320][ T7192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.133097][ T7192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.141848][ T7192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.163166][ T7192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.178586][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.583105][ T5090] Bluetooth: hci2: command tx timeout
[  141.619689][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.821803][ T7316] 8021q: adding VLAN 0 to HW filter on device team0
[  142.034714][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.042593][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.046834][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.057081][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.116524][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.123752][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.420925][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.458903][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.902448][ T7236] veth0_vlan: entered promiscuous mode
[  143.053102][   T48] hsr_slave_0: left promiscuous mode
[  143.079078][   T48] hsr_slave_1: left promiscuous mode
[  143.087851][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.111439][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.123847][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.145488][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.158595][   T48] bridge_slave_1: left allmulticast mode
[  143.167578][   T48] bridge_slave_1: left promiscuous mode
[  143.175500][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.209687][   T48] bridge_slave_0: left allmulticast mode
[  143.217972][   T48] bridge_slave_0: left promiscuous mode
[  143.225694][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.260081][   T48] veth1_macvtap: left promiscuous mode
[  143.270778][   T48] veth0_macvtap: left promiscuous mode
[  143.293361][   T48] veth1_vlan: left promiscuous mode
[  143.298769][   T48] veth0_vlan: left promiscuous mode
[  143.484443][ T7451] loop5: detected capacity change from 0 to 1024
[  143.664565][ T5090] Bluetooth: hci2: command tx timeout
[  145.083813][   T48] team0 (unregistering): Port device team_slave_1 removed
[  145.166178][   T48] team0 (unregistering): Port device team_slave_0 removed
[  145.223979][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.313286][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.657251][   T48] bond0 (unregistering): Released all slaves
[  145.809539][ T7461] syzkaller0: entered promiscuous mode
[  145.815833][ T7461] syzkaller0: entered allmulticast mode
[  146.563374][ T7475] loop4: detected capacity change from 0 to 1024
[  146.727653][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'.
[  146.780282][ T2987] hfsplus: b-tree write err: -5, ino 25
[  146.791772][ T2987] hfsplus: b-tree write err: -5, ino 4
[  146.807058][ T2987] hfsplus: b-tree write err: -5, ino 2
[  146.956300][ T7479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  147.070666][ T7481] loop4: detected capacity change from 0 to 2048
[  147.199907][ T7481] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  147.215632][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.268309][ T7236] veth1_vlan: entered promiscuous mode
[  148.351587][ T7493] futex_wake_op: syz.4.503 tries to shift op by 144; fix this program
[  148.883225][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.115062][ T7236] veth0_macvtap: entered promiscuous mode
[  149.171968][ T7236] veth1_macvtap: entered promiscuous mode
[  149.263943][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.277308][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.302992][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.321355][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.346352][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.388865][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.420898][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.448093][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.470539][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.502809][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.528923][ T7236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.583782][ T7236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.592106][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  149.599442][ T7236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.616433][ T7236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.778187][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.795052][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  149.815028][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  149.827315][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.850948][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.880798][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  149.908315][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.912170][ T5837] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  149.923007][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.990135][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.023394][ T7504] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.043700][ T7504] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.056815][ T5837] pl2303 5-1:1.0: pl2303 converter detected
[  150.087417][ T7316] veth0_vlan: entered promiscuous mode
[  150.093688][ T5837] usb 5-1: pl2303 converter now attached to ttyUSB0
[  150.136897][ T7316] veth1_vlan: entered promiscuous mode
[  150.269664][ T7316] veth0_macvtap: entered promiscuous mode
[  150.317718][ T7316] veth1_macvtap: entered promiscuous mode
[  150.424302][ T7504] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  150.426296][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.455850][ T7504] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  150.473139][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.474265][ T7504] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  150.494296][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.504727][ T7504] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  150.504783][ T7504] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  150.513244][ T5838] usb 5-1: USB disconnect, device number 3
[  150.544657][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.573366][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.589876][ T5838] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  150.593071][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.603922][ T5838] pl2303 5-1:1.0: device disconnected
[  150.625467][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.651474][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.682497][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.697532][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.710617][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.722028][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.734222][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.752236][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.810055][ T7316] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.839586][ T7316] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.856972][ T7316] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.866864][ T7316] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.084185][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.114262][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.168562][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.178254][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.424890][ T7537] binder: 7536:7537 ioctl c0306201 0 returned -14
[  151.780552][ T7559] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  151.830971][ T7559] CIFS: Attempting to mount //127.0.0.1/share
[  151.872474][ T7559] CIFS: VFS: Error connecting to socket. Aborting operation.
[  151.896569][ T7559] CIFS: VFS: cifs_mount failed w/return code = -111
[  151.934734][ T7564] loop5: detected capacity change from 0 to 1024
[  151.961306][ T7497] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  152.029165][ T7564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  152.089730][ T7564] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.155292][ T7497] usb 5-1: unable to get BOS descriptor or descriptor too short
[  152.164981][ T7497] usb 5-1: not running at top speed; connect to a high speed hub
[  152.184126][ T7564] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 3: comm syz.5.514: lblock 3 mapped to illegal pblock 3 (length 1)
[  152.212645][ T7497] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  152.235881][ T7564] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  152.251916][ T7497] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  152.266634][ T7497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.276066][ T7497] usb 5-1: Product: syz
[  152.280395][ T7564] EXT4-fs (loop5): This should not happen!! Data will be lost
[  152.280395][ T7564] 
[  152.295208][ T7497] usb 5-1: Manufacturer: syz
[  152.299923][ T7497] usb 5-1: SerialNumber: syz
[  152.347109][ T7580] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.514: Freeing blocks not in datazone - block = 3, count = 1
[  152.382830][ T7564] syz.5.514 (7564) used greatest stack depth: 19816 bytes left
[  152.451677][ T7192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  152.574615][ T7497] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  152.591922][ T7497] usb 5-1: found format II with max.bitrate = 512, frame size=20479
[  152.613639][ T7497] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  152.622130][ T7497] usb 5-1: found format II with max.bitrate = 512, frame size=20479
[  152.670849][ T7497] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  152.770839][ T7497] usb 5-1: USB disconnect, device number 4
[  154.566563][ T3497] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.919066][ T3497] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.071341][ T3497] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.327404][ T3497] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.354004][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  156.364467][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  156.372908][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  156.397652][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  156.407545][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  156.421888][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  156.915569][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.933612][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.943968][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.959122][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.968662][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  156.979710][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.752777][ T7649] chnl_net:caif_netlink_parms(): no params data found
[  158.231810][ T3497] hsr_slave_0: left promiscuous mode
[  158.240893][ T3497] hsr_slave_1: left promiscuous mode
[  158.269417][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.281859][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.299456][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.315366][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.329010][ T3497] bridge_slave_1: left allmulticast mode
[  158.334923][ T3497] bridge_slave_1: left promiscuous mode
[  158.340787][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.352519][ T3497] bridge_slave_0: left allmulticast mode
[  158.358646][ T3497] bridge_slave_0: left promiscuous mode
[  158.373380][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.390271][ T7693] loop6: detected capacity change from 0 to 2048
[  158.439126][ T3497] veth1_macvtap: left promiscuous mode
[  158.452230][ T3497] veth0_macvtap: left promiscuous mode
[  158.463467][ T5090] Bluetooth: hci2: command tx timeout
[  158.471632][ T3497] veth1_vlan: left promiscuous mode
[  158.477404][ T3497] veth0_vlan: left promiscuous mode
[  158.515852][ T7693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.747782][ T7236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.872242][ T7701] loop6: detected capacity change from 0 to 512
[  158.879862][ T7701] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.900393][ T7701] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.537: corrupted in-inode xattr: e_value size too large
[  158.926604][ T7701] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.537: couldn't read orphan inode 15 (err -117)
[  158.983748][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.030682][ T5090] Bluetooth: hci3: command tx timeout
[  159.131931][ T7236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.440826][ T3497] team0 (unregistering): Port device team_slave_1 removed
[  159.525967][ T3497] team0 (unregistering): Port device team_slave_0 removed
[  159.607446][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.696623][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.407917][ T3497] bond0 (unregistering): Released all slaves
[  160.555161][ T5090] Bluetooth: hci2: command tx timeout
[  160.789832][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.806266][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.817183][ T7649] bridge_slave_0: entered allmulticast mode
[  160.827303][ T7649] bridge_slave_0: entered promiscuous mode
[  160.838402][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.850153][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.861746][ T7649] bridge_slave_1: entered allmulticast mode
[  160.871828][ T7649] bridge_slave_1: entered promiscuous mode
[  160.928155][ T7665] chnl_net:caif_netlink_parms(): no params data found
[  161.007204][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.070333][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.105261][ T5090] Bluetooth: hci3: command tx timeout
[  161.276236][ T7649] team0: Port device team_slave_0 added
[  161.368137][ T7649] team0: Port device team_slave_1 added
[  161.428725][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.453128][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.460394][ T7665] bridge_slave_0: entered allmulticast mode
[  161.494480][ T7665] bridge_slave_0: entered promiscuous mode
[  161.528051][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.554342][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.561648][ T7665] bridge_slave_1: entered allmulticast mode
[  161.594492][ T7665] bridge_slave_1: entered promiscuous mode
[  161.655897][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.662910][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.741053][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.801723][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.822991][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.883001][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.935708][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.945683][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.961041][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.981180][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.990895][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.015803][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  162.018873][   T65] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.036120][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.117995][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.169666][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.186510][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.190976][ T7665] team0: Port device team_slave_0 added
[  162.201435][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.221930][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.224546][   T65] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.243726][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.251109][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.275540][ T7649] hsr_slave_0: entered promiscuous mode
[  162.281877][ T7649] hsr_slave_1: entered promiscuous mode
[  162.294151][ T7665] team0: Port device team_slave_1 added
[  162.325041][   T65] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.371011][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.379124][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.418768][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.462648][   T65] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.478334][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.485704][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.512826][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.623450][   T51] Bluetooth: hci2: command tx timeout
[  162.670366][ T7665] hsr_slave_0: entered promiscuous mode
[  162.676687][ T7665] hsr_slave_1: entered promiscuous mode
[  162.683234][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.690801][ T7665] Cannot create hsr debugfs directory
[  162.921650][   T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.051981][   T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.131305][   T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.184423][   T51] Bluetooth: hci3: command tx timeout
[  163.260603][   T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.281363][ T7742] chnl_net:caif_netlink_parms(): no params data found
[  163.336395][ T7649] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  163.347019][ T7738] chnl_net:caif_netlink_parms(): no params data found
[  163.401596][ T7649] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  163.458131][ T7649] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  163.471721][ T7649] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  163.621251][   T65] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.680596][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.688199][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.696431][ T7742] bridge_slave_0: entered allmulticast mode
[  163.707550][ T7742] bridge_slave_0: entered promiscuous mode
[  163.722064][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.730004][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.738246][ T7742] bridge_slave_1: entered allmulticast mode
[  163.745647][ T7742] bridge_slave_1: entered promiscuous mode
[  163.753333][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.760495][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.772145][ T7738] bridge_slave_0: entered allmulticast mode
[  163.779178][ T7738] bridge_slave_0: entered promiscuous mode
[  163.804269][   T65] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.818025][ T7665] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  163.850942][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.859546][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.870348][ T7738] bridge_slave_1: entered allmulticast mode
[  163.878771][ T7738] bridge_slave_1: entered promiscuous mode
[  163.896690][ T7665] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  163.912159][ T7665] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  163.929149][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.941890][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.971192][   T65] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.000518][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.015408][ T7665] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  164.057274][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.092080][   T65] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.110612][ T7742] team0: Port device team_slave_0 added
[  164.128141][ T7742] team0: Port device team_slave_1 added
[  164.143686][   T51] Bluetooth: hci0: command tx timeout
[  164.177008][ T7738] team0: Port device team_slave_0 added
[  164.215598][ T7738] team0: Port device team_slave_1 added
[  164.239631][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.248599][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.275278][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.288402][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.295504][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.322444][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.323356][   T51] Bluetooth: hci1: command tx timeout
[  164.367517][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.374566][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.401406][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.427368][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.436626][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.463792][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.558059][ T7738] hsr_slave_0: entered promiscuous mode
[  164.565691][ T7738] hsr_slave_1: entered promiscuous mode
[  164.571868][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.581020][ T7738] Cannot create hsr debugfs directory
[  164.594911][ T7742] hsr_slave_0: entered promiscuous mode
[  164.605566][ T7742] hsr_slave_1: entered promiscuous mode
[  164.611692][ T7742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.620004][ T7742] Cannot create hsr debugfs directory
[  164.703495][   T51] Bluetooth: hci2: command tx timeout
[  165.111610][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.276510][   T51] Bluetooth: hci3: command tx timeout
[  165.359354][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.451168][ T7649] 8021q: adding VLAN 0 to HW filter on device team0
[  165.467400][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.474556][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.497314][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.504521][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.578150][ T7665] 8021q: adding VLAN 0 to HW filter on device team0
[  165.591327][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.598970][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.700158][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.707492][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.226131][   T51] Bluetooth: hci0: command tx timeout
[  166.361242][ T7738] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  166.384318][   T51] Bluetooth: hci1: command tx timeout
[  166.397387][ T7738] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  166.601175][ T7738] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  166.661410][ T7738] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  166.812175][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.886781][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.510617][ T7742] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  167.564029][ T7742] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.579073][ T7742] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  167.617173][ T7742] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.657388][   T65] hsr_slave_0: left promiscuous mode
[  167.664594][   T65] hsr_slave_1: left promiscuous mode
[  167.670612][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.679272][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.687794][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.695756][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.704375][   T65] bridge_slave_1: left allmulticast mode
[  167.710075][   T65] bridge_slave_1: left promiscuous mode
[  167.716351][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.726655][   T65] bridge_slave_0: left allmulticast mode
[  167.732333][   T65] bridge_slave_0: left promiscuous mode
[  167.738325][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.751366][   T65] hsr_slave_0: left promiscuous mode
[  167.757655][   T65] hsr_slave_1: left promiscuous mode
[  167.764866][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.772325][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.780340][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.789386][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.797364][   T65] bridge_slave_1: left allmulticast mode
[  167.803234][   T65] bridge_slave_1: left promiscuous mode
[  167.808923][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.818458][   T65] bridge_slave_0: left allmulticast mode
[  167.824595][   T65] bridge_slave_0: left promiscuous mode
[  167.830272][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.846159][   T65] hsr_slave_0: left promiscuous mode
[  167.852036][   T65] hsr_slave_1: left promiscuous mode
[  167.858737][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.866641][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.876323][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.884063][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.891726][   T65] bridge_slave_1: left allmulticast mode
[  167.897964][   T65] bridge_slave_1: left promiscuous mode
[  167.904527][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.914186][   T65] bridge_slave_0: left allmulticast mode
[  167.919857][   T65] bridge_slave_0: left promiscuous mode
[  167.925853][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.974824][   T65] veth1_macvtap: left promiscuous mode
[  167.980420][   T65] veth0_macvtap: left promiscuous mode
[  167.987973][   T65] veth1_vlan: left promiscuous mode
[  167.993435][   T65] veth0_vlan: left promiscuous mode
[  167.999892][   T65] veth1_macvtap: left promiscuous mode
[  168.005840][   T65] veth0_macvtap: left promiscuous mode
[  168.011418][   T65] veth1_vlan: left promiscuous mode
[  168.016937][   T65] veth0_vlan: left promiscuous mode
[  168.025525][   T65] veth1_macvtap: left promiscuous mode
[  168.031054][   T65] veth0_macvtap: left promiscuous mode
[  168.037049][   T65] veth1_vlan: left promiscuous mode
[  168.042335][   T65] veth0_vlan: left promiscuous mode
[  168.304585][   T51] Bluetooth: hci0: command tx timeout
[  168.464122][   T51] Bluetooth: hci1: command tx timeout
[  168.889677][   T65] team0 (unregistering): Port device team_slave_1 removed
[  168.938080][   T65] team0 (unregistering): Port device team_slave_0 removed
[  168.980999][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.026058][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.382716][   T65] bond0 (unregistering): Released all slaves
[  170.008227][   T65] team0 (unregistering): Port device team_slave_1 removed
[  170.053311][   T65] team0 (unregistering): Port device team_slave_0 removed
[  170.099696][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.141894][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.387390][   T51] Bluetooth: hci0: command tx timeout
[  170.499154][   T65] bond0 (unregistering): Released all slaves
[  170.546828][   T51] Bluetooth: hci1: command tx timeout
[  171.184843][   T65] team0 (unregistering): Port device team_slave_1 removed
[  171.237166][   T65] team0 (unregistering): Port device team_slave_0 removed
[  171.288271][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.345146][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.694632][   T65] bond0 (unregistering): Released all slaves
[  171.791895][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.817054][ T7649] veth0_vlan: entered promiscuous mode
[  171.827387][ T7665] veth0_vlan: entered promiscuous mode
[  171.922433][ T7665] veth1_vlan: entered promiscuous mode
[  171.935673][ T7738] 8021q: adding VLAN 0 to HW filter on device team0
[  171.949417][ T7649] veth1_vlan: entered promiscuous mode
[  171.991196][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.998424][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.067362][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.074568][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.120964][ T7649] veth0_macvtap: entered promiscuous mode
[  172.159181][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.172854][ T7665] veth0_macvtap: entered promiscuous mode
[  172.200297][ T7649] veth1_macvtap: entered promiscuous mode
[  172.248735][ T7665] veth1_macvtap: entered promiscuous mode
[  172.290014][ T7742] 8021q: adding VLAN 0 to HW filter on device team0
[  172.342496][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.367149][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.379191][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.391199][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.401686][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.422165][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.429418][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.461889][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.474689][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.489330][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.507561][ T7649] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.517758][ T7649] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.527444][ T7649] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.536297][ T7649] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.572128][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.579276][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.595591][ T7665] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.605508][ T7665] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.614624][ T7665] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.623586][ T7665] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.938822][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.966233][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.060301][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.091040][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.135170][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.157814][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.180307][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.287785][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.319086][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.399117][ T7738] veth0_vlan: entered promiscuous mode
[  173.465949][ T7738] veth1_vlan: entered promiscuous mode
[  173.502030][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.512302][ T7787] CIFS: Attempting to mount //127.0.0.1/share
[  173.605102][ T7788] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  173.651253][ T7738] veth0_macvtap: entered promiscuous mode
[  173.685345][ T7738] veth1_macvtap: entered promiscuous mode
[  173.764447][ T7787] CIFS: VFS: cifs_mount failed w/return code = -112
[  173.776151][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.797823][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.808706][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.819226][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.832118][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.846213][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.858692][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.868657][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.879935][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.896779][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.910712][ T7742] veth0_vlan: entered promiscuous mode
[  173.953158][   T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  173.954035][ T7742] veth1_vlan: entered promiscuous mode
[  174.047408][ T7738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.061793][ T7738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.081452][ T7738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.097997][ T7738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.202485][ T7742] veth0_macvtap: entered promiscuous mode
[  174.287699][ T7742] veth1_macvtap: entered promiscuous mode
[  174.304020][   T42] usb 10-1: Using ep0 maxpacket: 32
[  174.340344][ T7792] loop9: detected capacity change from 0 to 512
[  174.414212][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.446453][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.455993][ T7792] EXT4-fs: Ignoring removed nobh option
[  174.460639][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.498876][ T7792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  174.499870][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.540159][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.554457][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.574443][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.649682][ T7792] ------------[ cut here ]------------
[  174.655694][ T7792] EA inode 11 i_nlink=0
[  174.689609][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.698842][ T7792] WARNING: CPU: 1 PID: 7792 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0
[  174.715252][ T7792] Modules linked in:
[  174.719245][ T7792] CPU: 1 PID: 7792 Comm: syz.9.529 Not tainted syzkaller #0
[  174.726640][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.736949][ T7792] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  174.743838][ T7792] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08
[  174.763585][ T7792] RSP: 0018:ffffc9000351f360 EFLAGS: 00010246
[  174.769738][ T7792] RAX: 7663ade271fd1b00 RBX: ffff88805db4d4a8 RCX: 0000000000080000
[  174.775834][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.777849][ T7792] RDX: ffffc9000f84a000 RSI: 0000000000026dbe RDI: 0000000000026dbf
[  174.796655][ T7792] RBP: ffffc9000351f450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  174.804747][ T7792] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805db4d300
[  174.809653][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.812762][ T7792] R13: ffffc9000351f3c0 R14: dffffc0000000000 R15: 0000000000000000
[  174.829414][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.831242][ T7792] FS:  00007f981528d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  174.842319][ T7742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.850103][ T7792] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.850124][ T7792] CR2: 000020000003e000 CR3: 0000000069a24000 CR4: 00000000003506e0
[  174.850143][ T7792] Call Trace:
[  174.850152][ T7792]  <TASK>
[  174.850160][ T7792]  ? asm_sysvec_call_function_single+0x1a/0x20
[  174.850202][ T7792]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  174.850255][ T7792]  ? ext4_xattr_inode_dec_ref_all+0x9a1/0x1030
[  174.850291][ T7792]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  174.900500][ T7742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.900910][ T7792]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  174.922702][ T7792]  ? __ext4_journal_ensure_credits+0x450/0x450
[  174.925984][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.929043][ T7792]  ext4_xattr_delete_inode+0xb3b/0xd00
[  174.941714][ T7792]  ? lockdep_hardirqs_on+0x98/0x150
[  174.947317][ T7792]  ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0
[  174.953605][ T7792]  ? ext4_evict_inode+0xa69/0xe70
[  174.958718][ T7792]  ext4_evict_inode+0xa88/0xe70
[  174.963676][ T7792]  ? evict+0x482/0x8a0
[  174.967821][ T7792]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  174.973843][ T7792]  ? do_raw_spin_unlock+0x121/0x230
[  174.979116][ T7792]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  174.985741][ T7792]  evict+0x4b7/0x8a0
[  174.989692][ T7792]  ? __lock_acquire+0x7d80/0x7d80
[  174.994937][ T7792]  ? proc_nr_inodes+0x230/0x230
[  174.999870][ T7792]  ? do_raw_spin_unlock+0x121/0x230
[  175.005335][ T7792]  ? _raw_spin_unlock+0x28/0x40
[  175.010322][ T7792]  ext4_orphan_cleanup+0xdff/0x1650
[  175.015666][ T7792]  ? ext4_orphan_file_block_trigger+0x440/0x440
[  175.021995][ T7792]  ? ext4_orphan_del+0xc90/0xc90
[  175.027057][ T7792]  ? ext4_register_li_request+0x182/0x930
[  175.032852][ T7792]  ? errseq_check_and_advance+0x66/0x120
[  175.038694][ T7792]  ext4_fill_super+0x5fb5/0x6870
[  175.043805][ T7792]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  175.050130][ T7792]  ? __might_sleep+0xe0/0xe0
[  175.054836][ T7792]  ? read_lock_is_recursive+0x20/0x20
[  175.060286][ T7792]  ? snprintf+0xe9/0x140
[  175.064648][ T7792]  ? down_read_killable+0x340/0x340
[  175.069929][ T7792]  ? setup_bdev_super+0x56b/0x660
[  175.075152][ T7792]  get_tree_bdev+0x3e5/0x520
[  175.079823][ T7792]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  175.086191][ T7792]  ? setup_bdev_super+0x660/0x660
[  175.091875][ T7792]  ? apparmor_capable+0x137/0x1a0
[  175.097172][ T7792]  ? bpf_lsm_capable+0x9/0x10
[  175.101923][ T7792]  ? security_capable+0x89/0xb0
[  175.106978][ T7792]  vfs_get_tree+0x8c/0x280
[  175.111477][ T7792]  do_new_mount+0x24a/0xa40
[  175.116308][ T7792]  __se_sys_mount+0x2e7/0x3d0
[  175.121066][ T7792]  ? __x64_sys_mount+0xc0/0xc0
[  175.125947][ T7792]  ? lockdep_hardirqs_on+0x98/0x150
[  175.131232][ T7792]  ? __x64_sys_mount+0x20/0xc0
[  175.136101][ T7792]  do_syscall_64+0x55/0xb0
[  175.140588][ T7792]  ? clear_bhb_loop+0x40/0x90
[  175.145381][ T7792]  ? clear_bhb_loop+0x40/0x90
[  175.150129][ T7792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.156157][ T7792] RIP: 0033:0x7f981439f3ca
[  175.160656][ T7792] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.180409][ T7792] RSP: 002b:00007f981528ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  175.189491][ T7792] RAX: ffffffffffffffda RBX: 00007f981528cee0 RCX: 00007f981439f3ca
[  175.197702][ T7792] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f981528cea0
[  175.205864][ T7792] RBP: 0000200000000180 R08: 00007f981528cee0 R09: 0000000000200700
[  175.213940][ T7792] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000000
[  175.221997][ T7792] R13: 00007f981528cea0 R14: 0000000000000478 R15: 0000200000000040
[  175.230123][ T7792]  </TASK>
[  175.233264][ T7792] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  175.240585][ T7792] CPU: 1 PID: 7792 Comm: syz.9.529 Not tainted syzkaller #0
[  175.247900][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.257981][ T7792] Call Trace:
[  175.261282][ T7792]  <TASK>
[  175.264238][ T7792]  dump_stack_lvl+0x18c/0x250
[  175.268962][ T7792]  ? show_regs_print_info+0x20/0x20
[  175.274201][ T7792]  ? load_image+0x420/0x420
[  175.278754][ T7792]  panic+0x2ca/0x720
[  175.282694][ T7792]  ? bpf_jit_dump+0xd0/0xd0
[  175.287247][ T7792]  __warn+0x2e0/0x470
[  175.291255][ T7792]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  175.297272][ T7792]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  175.303292][ T7792]  report_bug+0x2be/0x4f0
[  175.307653][ T7792]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  175.313657][ T7792]  ? ext4_xattr_inode_update_ref+0x572/0x5d0
[  175.319636][ T7792]  ? ext4_xattr_inode_update_ref+0x574/0x5d0
[  175.325617][ T7792]  handle_bug+0xcf/0x120
[  175.329871][ T7792]  exc_invalid_op+0x1a/0x50
[  175.334384][ T7792]  asm_exc_invalid_op+0x1a/0x20
[  175.339245][ T7792] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0
[  175.345841][ T7792] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08
[  175.365996][ T7792] RSP: 0018:ffffc9000351f360 EFLAGS: 00010246
[  175.372090][ T7792] RAX: 7663ade271fd1b00 RBX: ffff88805db4d4a8 RCX: 0000000000080000
[  175.380069][ T7792] RDX: ffffc9000f84a000 RSI: 0000000000026dbe RDI: 0000000000026dbf
[  175.388085][ T7792] RBP: ffffc9000351f450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
[  175.396066][ T7792] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805db4d300
[  175.404048][ T7792] R13: ffffc9000351f3c0 R14: dffffc0000000000 R15: 0000000000000000
[  175.412047][ T7792]  ? asm_sysvec_call_function_single+0x1a/0x20
[  175.418221][ T7792]  ? ext4_xattr_list_entries+0x3d0/0x3d0
[  175.423860][ T7792]  ? ext4_xattr_inode_dec_ref_all+0x9a1/0x1030
[  175.430039][ T7792]  ext4_xattr_inode_dec_ref_all+0x9bb/0x1030
[  175.436054][ T7792]  ? ext4_xattr_delete_inode+0xd00/0xd00
[  175.441698][ T7792]  ? __ext4_journal_ensure_credits+0x450/0x450
[  175.447954][ T7792]  ext4_xattr_delete_inode+0xb3b/0xd00
[  175.453431][ T7792]  ? lockdep_hardirqs_on+0x98/0x150
[  175.458646][ T7792]  ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0
[  175.464729][ T7792]  ? ext4_evict_inode+0xa69/0xe70
[  175.469767][ T7792]  ext4_evict_inode+0xa88/0xe70
[  175.474624][ T7792]  ? evict+0x482/0x8a0
[  175.478712][ T7792]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  175.484621][ T7792]  ? do_raw_spin_unlock+0x121/0x230
[  175.489827][ T7792]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  175.495724][ T7792]  evict+0x4b7/0x8a0
[  175.499625][ T7792]  ? __lock_acquire+0x7d80/0x7d80
[  175.504657][ T7792]  ? proc_nr_inodes+0x230/0x230
[  175.509515][ T7792]  ? do_raw_spin_unlock+0x121/0x230
[  175.514726][ T7792]  ? _raw_spin_unlock+0x28/0x40
[  175.519590][ T7792]  ext4_orphan_cleanup+0xdff/0x1650
[  175.524798][ T7792]  ? ext4_orphan_file_block_trigger+0x440/0x440
[  175.531060][ T7792]  ? ext4_orphan_del+0xc90/0xc90
[  175.536023][ T7792]  ? ext4_register_li_request+0x182/0x930
[  175.541749][ T7792]  ? errseq_check_and_advance+0x66/0x120
[  175.547384][ T7792]  ext4_fill_super+0x5fb5/0x6870
[  175.552343][ T7792]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  175.558588][ T7792]  ? __might_sleep+0xe0/0xe0
[  175.563184][ T7792]  ? read_lock_is_recursive+0x20/0x20
[  175.568553][ T7792]  ? snprintf+0xe9/0x140
[  175.572812][ T7792]  ? down_read_killable+0x340/0x340
[  175.578012][ T7792]  ? setup_bdev_super+0x56b/0x660
[  175.583042][ T7792]  get_tree_bdev+0x3e5/0x520
[  175.587644][ T7792]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  175.593900][ T7792]  ? setup_bdev_super+0x660/0x660
[  175.598928][ T7792]  ? apparmor_capable+0x137/0x1a0
[  175.603962][ T7792]  ? bpf_lsm_capable+0x9/0x10
[  175.608637][ T7792]  ? security_capable+0x89/0xb0
[  175.613498][ T7792]  vfs_get_tree+0x8c/0x280
[  175.617925][ T7792]  do_new_mount+0x24a/0xa40
[  175.622432][ T7792]  __se_sys_mount+0x2e7/0x3d0
[  175.627117][ T7792]  ? __x64_sys_mount+0xc0/0xc0
[  175.631883][ T7792]  ? lockdep_hardirqs_on+0x98/0x150
[  175.637083][ T7792]  ? __x64_sys_mount+0x20/0xc0
[  175.641851][ T7792]  do_syscall_64+0x55/0xb0
[  175.646270][ T7792]  ? clear_bhb_loop+0x40/0x90
[  175.650950][ T7792]  ? clear_bhb_loop+0x40/0x90
[  175.655642][ T7792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  175.661539][ T7792] RIP: 0033:0x7f981439f3ca
[  175.665959][ T7792] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.685597][ T7792] RSP: 002b:00007f981528ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  175.694018][ T7792] RAX: ffffffffffffffda RBX: 00007f981528cee0 RCX: 00007f981439f3ca
[  175.701992][ T7792] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f981528cea0
[  175.709967][ T7792] RBP: 0000200000000180 R08: 00007f981528cee0 R09: 0000000000200700
[  175.718008][ T7792] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000000
[  175.727142][ T7792] R13: 00007f981528cea0 R14: 0000000000000478 R15: 0000200000000040
[  175.735132][ T7792]  </TASK>
[  175.738408][ T7792] Kernel Offset: disabled
[  175.742792][ T7792] Rebooting in 86400 seconds..