last executing test programs:

1m39.444725281s ago: executing program 0 (id=24):
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x1aa, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m36.556105116s ago: executing program 0 (id=28):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84015}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
brk(0x689d80000000)
r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x1c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m35.272752668s ago: executing program 0 (id=30):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0xfffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0)
syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040), &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)

1m31.07338838s ago: executing program 0 (id=37):
fanotify_init(0x10, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe})
ptrace$pokeuser(0x6, 0x0, 0x118, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r4, 0xffff)
close(0x3)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x5, 0x0, 0x2000})
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x50)

1m28.47861049s ago: executing program 0 (id=39):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
syz_emit_ethernet(0x1aa, &(0x7f0000000a80)=ANY=[@ANYRESHEX], 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(r0, 0x0, 0x0, 0x4000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)

1m26.189623066s ago: executing program 0 (id=44):
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x1aa, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4000001)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m10.385309715s ago: executing program 32 (id=44):
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x1aa, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4000001)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19.367215778s ago: executing program 4 (id=151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
fcntl$setown(r2, 0x8, r0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
socket$igmp(0x2, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0c010320", @ANYRES64], 0xf)

17.688697177s ago: executing program 3 (id=156):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
close_range(0xffffffffffffffff, r0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x7})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x1fb, 0xfffffffb, 0xfffffff9}}, 0xe8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600)

17.570598557s ago: executing program 2 (id=157):
fanotify_init(0x10, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe})
ptrace$pokeuser(0x6, 0x0, 0x118, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x3)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x50)

16.050588973s ago: executing program 2 (id=159):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000)
writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2)

16.047132831s ago: executing program 5 (id=160):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_create_resource$binfmt(0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(r0, 0x0, 0x0, 0x4000)

13.903860616s ago: executing program 2 (id=161):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0xfffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0)
syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)

13.75229404s ago: executing program 5 (id=162):
recvmsg(0xffffffffffffffff, 0x0, 0x102)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40090)

12.01006023s ago: executing program 4 (id=164):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x50b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
vmsplice(r2, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000280)="64b81bda58bf7cc372cece7a68bba1c3df52476738f9", 0x16}, {&(0x7f0000000ac0)="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", 0xfe0}, {&(0x7f0000000600)="1dc5f9d8193fb0c033a70a246ab32927e314f58a0fea503e365368f038218151fb4afb035e18991bd0cd3a7c24bc9a326e48706e13c6b5af0536b19d9c559b688f133c53bf0365fd2be7ce7bc19e55666a5d8f18673ea66c31efb25404f24da912e5330c6074d0e00946dc659cf772185ab4e49a9423e7a8329433e85fc17e40dd0240d2d3c91aca64bf3d3a808af0a71bd7290afbeabeafce9777ac5e9b0aeb4eb0d2e66bdc38a34def6cb5770e7e18b1e2976a9d89a93e549741b7e4659a89dc0c72e870", 0xc5}, {&(0x7f0000000380)}], 0x4, 0x0, 0x0, 0x5)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x322, 0x6, 0x0, 0x4, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]})

11.419832588s ago: executing program 3 (id=165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

11.157507206s ago: executing program 3 (id=166):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x17ff, 0x9f78, 0x101, 0xec})
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000400"/28], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff000000000008000400", @ANYRES32=r0, @ANYBLOB], 0x44}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f00000033c0)=""/4113, 0x1011}, {&(0x7f00000015c0)=""/228, 0xe4}, {&(0x7f00000016c0)=""/211, 0xd3}, {&(0x7f0000000100)=""/85, 0x55}], 0x5}, 0x401}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0)

11.099746146s ago: executing program 4 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES8=r4], 0x34}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x1)
mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100008, 0x0)
r6 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)

10.920511669s ago: executing program 1 (id=168):
fanotify_init(0x10, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe})
ptrace$pokeuser(0x6, 0x0, 0x118, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r3, 0xffff)
close(0x3)

10.497332172s ago: executing program 3 (id=169):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0)
syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)

9.753710358s ago: executing program 1 (id=170):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7f, 0x6}, 0x90)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80202, 0x0)
r4 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})

8.644313587s ago: executing program 2 (id=171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000)
writev(r4, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2)

8.122325022s ago: executing program 1 (id=172):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = semget$private(0x0, 0x1, 0x641)
semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x4)
semop(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x4000880)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()

8.011629564s ago: executing program 5 (id=173):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000300)="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", 0xfc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x9000)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

7.947652581s ago: executing program 4 (id=174):
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = memfd_create(0x0, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x2, 0x5bac7, 0xfce4f})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x1000000, 0x1000000})
rmdir(0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)
socket(0x10, 0x3, 0x0)

7.123919172s ago: executing program 2 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, 0x0, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

6.876868629s ago: executing program 5 (id=176):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r1 = io_uring_setup(0x899, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="9baa00fea0000000716d8f78d400000095000000010000"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xa}, 0x2)

5.748344134s ago: executing program 2 (id=177):
socket$caif_stream(0x25, 0x1, 0x5)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0xffff)
readlinkat(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
cachestat(r2, &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001700)={'syz0\x00', {0x54f, 0x1, 0x5, 0xfff}, 0x1b, [0x7, 0x4, 0x7ff, 0x1000004, 0x8, 0x3, 0x1, 0x3, 0x19d2, 0xaa, 0x123, 0x7, 0x3, 0x65f, 0x6, 0xa, 0x3, 0x7f, 0x6, 0xe, 0x7fff, 0x800, 0x0, 0xc, 0x2, 0x3, 0xae, 0x2, 0x10, 0x40, 0x40055c, 0x7, 0xc, 0x4, 0x6, 0xc, 0x0, 0x9, 0x80000001, 0x1200000, 0x2, 0xfffff8e4, 0x0, 0xcb0, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, 0xfff, 0x3ff, 0x1, 0x5b, 0xffffe9ab, 0x9, 0x7, 0x2169, 0xffff8000, 0x5, 0xee, 0x9, 0xd7a, 0x7fffffff], [0x36, 0x200, 0x6, 0x10ff, 0x6, 0x2, 0xe00, 0x6, 0x10, 0xfffffff8, 0x1c, 0x3, 0xd1, 0xa, 0x800, 0x4, 0xf8b, 0x40003, 0x9, 0x1, 0x6, 0x6, 0x627e, 0x10000, 0x784, 0x7dd, 0x8, 0x1000, 0x5, 0x9, 0xa, 0xfffffffa, 0xa80, 0x7, 0x3, 0x3, 0xb, 0x80000001, 0x7f, 0x6, 0xfff, 0x591b999d, 0x80000000, 0xa7c1, 0x4, 0x101, 0xffff7fff, 0x4, 0x7, 0x3, 0x401, 0x8000, 0x1, 0x0, 0x2, 0xd, 0x5, 0x4, 0x3, 0x9, 0x8001, 0x68a3, 0x100, 0x8], [0x400, 0x5, 0x2, 0x9e4, 0x1, 0x100, 0x6d, 0x7, 0x8854, 0x4, 0x6, 0x2f, 0xe7, 0x9, 0x1, 0x2, 0xd3, 0x6, 0x4, 0xffff, 0xfffffffe, 0x3, 0xffffffff, 0x1, 0x1500, 0x0, 0xb8, 0x5, 0x80, 0x572, 0x9, 0x4, 0xe, 0x0, 0x0, 0x8, 0xe, 0x76, 0x60, 0x4, 0xf6b2, 0x5, 0x80000080, 0x0, 0x0, 0x4, 0xa20, 0x7, 0x97, 0x5, 0x18c9, 0x80000001, 0x0, 0x1, 0x6c, 0x0, 0x1, 0xfffffffb, 0x9264, 0x3, 0x9f, 0x2, 0x60e, 0x10000], [0x7, 0x1, 0x1, 0x1, 0x80000000, 0x9, 0x9, 0x4, 0x5, 0x6, 0x3, 0x4, 0x6, 0x242, 0x3800, 0x1, 0x0, 0x5e, 0x2, 0xffffffff, 0x0, 0x6, 0x1, 0x5, 0xb, 0x84000000, 0x20009, 0x6, 0x0, 0x100, 0x9, 0x4, 0xb98c, 0x2, 0xae341edb, 0x9, 0xb, 0x5, 0x5375, 0x8000, 0x800, 0x5, 0x6, 0xffffff15, 0x8, 0x3, 0x3a1, 0x0, 0x7, 0x7, 0x1, 0x5, 0x7, 0x7fff, 0x0, 0x7, 0x8, 0x6, 0x1000, 0x9, 0x4, 0x1e, 0x94, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000"], 0xa0}}, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04221d02aaaaaaaaaa12040395a77fb5020affffffffffff0002a37ae862972e3b8e1df3c8088c99194caae6a13d53e7c6414b48f6b45c8313b501bdfa0000000000000000"], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff01000000000000000002000001140000001100"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0)

5.627946537s ago: executing program 5 (id=178):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x300000000000f7)
bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc)
r2 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
epoll_create1(0x80000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x8})
keyctl$revoke(0x3, r0)
syz_usb_disconnect(0xffffffffffffffff)
r6 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3c, 0x67, 0xa8, 0x10, 0x12d1, 0x4d6d, 0x46a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)

4.067963421s ago: executing program 3 (id=179):
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x1aa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.209251052s ago: executing program 1 (id=180):
fanotify_init(0x10, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe})
ptrace$pokeuser(0x6, 0x0, 0x118, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
close(0x3)

2.782421779s ago: executing program 4 (id=181):
r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x803)
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
setrlimit(0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
rmdir(&(0x7f0000000000)='./file0\x00')

2.061975115s ago: executing program 1 (id=182):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7f, 0x6}, 0x90)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x80202, 0x0)
r4 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})

1.919872429s ago: executing program 5 (id=183):
r0 = socket(0xb, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYBLOB="08000ad5818a1b9cea7a3726e43f4f2082002e80184c8705137f1f0f9a88723a7dcde7de17a3ca9213ed903ea416893b67e822437053c198734390e6b8111a11590d1b291d2f8507ae2480a4bf69fe4ac18012ed8cdf42d845ac", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0)

692.628087ms ago: executing program 1 (id=184):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x300000000000f7)
bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc)
r2 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
epoll_create1(0x80000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x8})
keyctl$revoke(0x3, r0)
syz_usb_connect(0x5, 0x35, 0x0, 0x0)
r6 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3c, 0x67, 0xa8, 0x10, 0x12d1, 0x4d6d, 0x46a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)

13.023564ms ago: executing program 4 (id=185):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000300)="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", 0xfc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x9000)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

0s ago: executing program 3 (id=186):
recvmsg(0xffffffffffffffff, 0x0, 0x102)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40090)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts.
[   79.448464][ T5827] cgroup: Unknown subsys name 'net'
[   79.583406][ T5827] cgroup: Unknown subsys name 'cpuset'
[   79.592765][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.191783][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.507806][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.531950][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.554403][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.564094][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.571999][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.580982][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.589835][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.593603][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.606875][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.609122][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.622907][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.630861][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.637330][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.642720][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.650225][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.653674][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.664079][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.669788][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.678049][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.682055][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.687304][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.697395][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.708732][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.734540][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.734735][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.373625][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   84.463709][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   84.653226][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   84.682085][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   84.764624][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.772961][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.780307][ T5841] bridge_slave_0: entered allmulticast mode
[   84.788086][ T5841] bridge_slave_0: entered promiscuous mode
[   84.842609][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.850052][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.857420][ T5841] bridge_slave_1: entered allmulticast mode
[   84.865461][ T5841] bridge_slave_1: entered promiscuous mode
[   84.898510][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   84.952547][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.959922][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.967137][ T5846] bridge_slave_0: entered allmulticast mode
[   84.975383][ T5846] bridge_slave_0: entered promiscuous mode
[   85.022219][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.029935][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.037140][ T5846] bridge_slave_1: entered allmulticast mode
[   85.045402][ T5846] bridge_slave_1: entered promiscuous mode
[   85.071668][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.129920][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.198924][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.206970][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.214599][ T5847] bridge_slave_0: entered allmulticast mode
[   85.222462][ T5847] bridge_slave_0: entered promiscuous mode
[   85.234966][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.244609][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.251997][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.259194][ T5839] bridge_slave_0: entered allmulticast mode
[   85.267158][ T5839] bridge_slave_0: entered promiscuous mode
[   85.305088][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.312737][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.320358][ T5847] bridge_slave_1: entered allmulticast mode
[   85.329474][ T5847] bridge_slave_1: entered promiscuous mode
[   85.342739][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.352179][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.359459][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.367411][ T5839] bridge_slave_1: entered allmulticast mode
[   85.376671][ T5839] bridge_slave_1: entered promiscuous mode
[   85.401859][ T5841] team0: Port device team_slave_0 added
[   85.411557][ T5841] team0: Port device team_slave_1 added
[   85.456185][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.463559][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.471252][ T5844] bridge_slave_0: entered allmulticast mode
[   85.479041][ T5844] bridge_slave_0: entered promiscuous mode
[   85.546453][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.555729][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.564025][ T5844] bridge_slave_1: entered allmulticast mode
[   85.578325][ T5844] bridge_slave_1: entered promiscuous mode
[   85.605754][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.618350][ T5846] team0: Port device team_slave_0 added
[   85.628325][ T5846] team0: Port device team_slave_1 added
[   85.638691][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.662938][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.669930][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.696060][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.711713][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.737146][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.761024][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.767972][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.792532][ T5842] Bluetooth: hci3: command tx timeout
[   85.794398][ T5854] Bluetooth: hci4: command tx timeout
[   85.800156][ T5842] Bluetooth: hci0: command tx timeout
[   85.808168][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.811758][ T5849] Bluetooth: hci1: command tx timeout
[   85.827298][ T5859] Bluetooth: hci2: command tx timeout
[   85.888943][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.921654][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.928618][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.955446][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.970701][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.977700][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.003815][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.017924][ T5839] team0: Port device team_slave_0 added
[   86.027497][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.054520][ T5847] team0: Port device team_slave_0 added
[   86.072241][ T5839] team0: Port device team_slave_1 added
[   86.108288][ T5847] team0: Port device team_slave_1 added
[   86.158118][ T5844] team0: Port device team_slave_0 added
[   86.168143][ T5844] team0: Port device team_slave_1 added
[   86.202357][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.209303][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.235429][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.272873][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.280209][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.306283][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.324417][ T5841] hsr_slave_0: entered promiscuous mode
[   86.331707][ T5841] hsr_slave_1: entered promiscuous mode
[   86.340527][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.347491][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.373932][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.412150][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.419110][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.445699][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.487783][ T5846] hsr_slave_0: entered promiscuous mode
[   86.494721][ T5846] hsr_slave_1: entered promiscuous mode
[   86.501676][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   86.507469][ T5846] Cannot create hsr debugfs directory
[   86.514815][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.522387][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.549867][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.608936][ T5847] hsr_slave_0: entered promiscuous mode
[   86.616112][ T5847] hsr_slave_1: entered promiscuous mode
[   86.623030][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   86.628780][ T5847] Cannot create hsr debugfs directory
[   86.636398][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.643410][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.669322][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.965893][ T5839] hsr_slave_0: entered promiscuous mode
[   86.973665][ T5839] hsr_slave_1: entered promiscuous mode
[   86.981158][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   86.986938][ T5839] Cannot create hsr debugfs directory
[   87.084785][ T5844] hsr_slave_0: entered promiscuous mode
[   87.092765][ T5844] hsr_slave_1: entered promiscuous mode
[   87.099952][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   87.105916][ T5844] Cannot create hsr debugfs directory
[   87.658740][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.672696][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.684519][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.708109][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.777060][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.800476][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.812974][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.832685][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.870352][ T5842] Bluetooth: hci4: command tx timeout
[   87.871708][ T5859] Bluetooth: hci0: command tx timeout
[   87.876066][ T5842] Bluetooth: hci3: command tx timeout
[   87.881523][ T5854] Bluetooth: hci2: command tx timeout
[   87.886832][ T5849] Bluetooth: hci1: command tx timeout
[   87.971218][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.983381][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.000880][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.018387][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.134736][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.146758][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.171803][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.183948][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.272169][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.370559][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.385225][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   88.402383][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.415685][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.427670][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.446883][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.454504][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.474805][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.508601][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.515751][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.588336][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   88.648712][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.655916][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.666658][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.673825][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.802010][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.887447][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   88.944860][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.958446][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.965694][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.034565][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.041786][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.099043][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.148613][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   89.207489][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   89.223062][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.230302][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.265901][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.273152][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.296894][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.304115][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.328493][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.335692][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.358034][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.465817][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.704014][ T5841] veth0_vlan: entered promiscuous mode
[   89.796131][ T5841] veth1_vlan: entered promiscuous mode
[   89.866366][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.950318][ T5859] Bluetooth: hci0: command tx timeout
[   89.953858][   T51] Bluetooth: hci3: command tx timeout
[   89.958942][ T5859] Bluetooth: hci1: command tx timeout
[   89.961321][ T5842] Bluetooth: hci4: command tx timeout
[   89.974497][ T5854] Bluetooth: hci2: command tx timeout
[   90.078623][ T5841] veth0_macvtap: entered promiscuous mode
[   90.117218][ T5841] veth1_macvtap: entered promiscuous mode
[   90.212637][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.233069][ T5846] veth0_vlan: entered promiscuous mode
[   90.251422][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.271650][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.295734][ T5846] veth1_vlan: entered promiscuous mode
[   90.313876][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.338277][ T5847] veth0_vlan: entered promiscuous mode
[   90.349211][   T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.359273][   T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.379012][   T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.402439][   T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.438235][ T5847] veth1_vlan: entered promiscuous mode
[   90.588145][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.606304][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.637052][ T5846] veth0_macvtap: entered promiscuous mode
[   90.660483][ T5844] veth0_vlan: entered promiscuous mode
[   90.673602][ T5846] veth1_macvtap: entered promiscuous mode
[   90.726625][ T5847] veth0_macvtap: entered promiscuous mode
[   90.738383][ T5844] veth1_vlan: entered promiscuous mode
[   90.764932][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.774090][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.775493][ T5839] veth0_vlan: entered promiscuous mode
[   90.794780][ T5847] veth1_macvtap: entered promiscuous mode
[   90.867971][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.876653][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.895882][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.917672][ T5839] veth1_vlan: entered promiscuous mode
[   90.981155][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.007160][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.018720][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.050971][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.060467][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.083040][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.095743][ T5844] veth0_macvtap: entered promiscuous mode
[   91.546134][   T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.572209][   T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.660052][ T5844] veth1_macvtap: entered promiscuous mode
[   91.671725][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.689773][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.835208][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.874733][    T9] cfg80211: failed to load regulatory.db
[   91.946380][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.954670][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.966734][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.984417][ T5839] veth0_macvtap: entered promiscuous mode
[   92.031436][ T5854] Bluetooth: hci2: command tx timeout
[   92.032163][   T51] Bluetooth: hci3: command tx timeout
[   92.036955][ T5859] Bluetooth: hci1: command tx timeout
[   92.044934][ T5849] Bluetooth: hci4: command tx timeout
[   92.049045][ T5854] Bluetooth: hci0: command tx timeout
[   92.069191][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.090773][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.094824][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.105099][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.136359][ T5839] veth1_macvtap: entered promiscuous mode
[   92.184193][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.205441][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.233921][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.278965][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.304028][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.333366][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.401742][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.490960][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.606263][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.648145][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.397351][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.408760][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.125243][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.154841][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.345357][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.364028][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.025204][  T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.049265][  T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.353709][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.384261][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.755852][ T5999] netlink: 'syz.4.11': attribute type 1 has an invalid length.
[   95.763713][ T5999] netlink: 'syz.4.11': attribute type 2 has an invalid length.
[   95.771717][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'.
[   96.074273][ T6000] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10'.
[   96.523746][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.732737][   T24] usb 5-1: Using ep0 maxpacket: 16
[   96.780132][   T24] usb 5-1: config 0 has no interfaces?
[   96.810999][   T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[   96.854949][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.902408][   T24] usb 5-1: Product: syz
[   96.925498][   T24] usb 5-1: Manufacturer: syz
[   96.938928][   T24] usb 5-1: SerialNumber: syz
[   96.995030][   T24] usb 5-1: config 0 descriptor??
[   98.821717][    T9] usb 5-1: USB disconnect, device number 2
[   99.130078][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  100.250733][ T5840] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  100.515743][ T5840] usb 3-1: config index 0 descriptor too short (expected 8192, got 36)
[  101.437808][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.451731][ T5840] usb 3-1: config 0 has no interfaces?
[  101.458171][ T5840] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  101.467433][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.502897][ T5840] usb 3-1: config 0 descriptor??
[  105.591936][  T809] usb 3-1: USB disconnect, device number 2
[  107.544835][ T6068] netlink: 'syz.3.26': attribute type 1 has an invalid length.
[  107.573189][ T6068] netlink: 'syz.3.26': attribute type 2 has an invalid length.
[  108.069674][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'.
[  108.750654][  T809] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  109.311555][  T809] usb 4-1: Using ep0 maxpacket: 16
[  109.446431][  T809] usb 4-1: device descriptor read/all, error -71
[  111.048950][ T6103] netlink: 'syz.4.34': attribute type 1 has an invalid length.
[  111.056901][ T6103] netlink: 'syz.4.34': attribute type 2 has an invalid length.
[  111.064857][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'.
[  111.659729][  T810] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.862350][  T810] usb 5-1: Using ep0 maxpacket: 16
[  111.876736][  T810] usb 5-1: config 0 has no interfaces?
[  111.903127][  T810] usb 5-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  111.938389][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.978114][  T810] usb 5-1: Product: syz
[  112.002306][  T810] usb 5-1: Manufacturer: syz
[  112.021432][  T810] usb 5-1: SerialNumber: syz
[  112.239118][ T6107] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[  112.246930][ T6107] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[  112.254738][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'.
[  112.469893][  T810] usb 5-1: config 0 descriptor??
[  113.339911][  T809] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  114.356200][  T809] usb 2-1: Using ep0 maxpacket: 16
[  114.374753][  T809] usb 2-1: config 0 has no interfaces?
[  114.392588][  T809] usb 2-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  114.403511][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.417182][  T809] usb 2-1: Product: syz
[  114.434508][  T809] usb 2-1: Manufacturer: syz
[  114.442967][  T809] usb 2-1: SerialNumber: syz
[  114.481980][  T809] usb 2-1: config 0 descriptor??
[  114.683875][ T5963] usb 5-1: USB disconnect, device number 3
[  116.416006][ T6123] netlink: 'syz.3.38': attribute type 1 has an invalid length.
[  116.423927][ T6123] netlink: 'syz.3.38': attribute type 2 has an invalid length.
[  116.432114][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'.
[  116.752126][ T5840] usb 2-1: USB disconnect, device number 2
[  117.630541][  T810] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  118.488169][  T810] usb 4-1: Using ep0 maxpacket: 16
[  118.632713][  T810] usb 4-1: device descriptor read/all, error -71
[  122.201347][ T6170] netlink: 'syz.3.49': attribute type 1 has an invalid length.
[  122.209194][ T6170] netlink: 'syz.3.49': attribute type 2 has an invalid length.
[  122.216982][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'.
[  122.809730][ T5963] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.974181][ T5963] usb 4-1: Using ep0 maxpacket: 16
[  122.994281][ T5963] usb 4-1: config 0 has no interfaces?
[  123.014224][ T5963] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  123.046100][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.084498][ T5963] usb 4-1: Product: syz
[  123.107753][ T5963] usb 4-1: Manufacturer: syz
[  123.124423][ T5963] usb 4-1: SerialNumber: syz
[  123.179116][ T5963] usb 4-1: config 0 descriptor??
[  123.744111][ T6173] netlink: 'syz.4.51': attribute type 1 has an invalid length.
[  123.751903][ T6173] netlink: 'syz.4.51': attribute type 2 has an invalid length.
[  123.759782][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'.
[  124.399959][ T5963] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  124.405021][ T6179] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[  124.415577][ T6179] netlink: 'syz.1.52': attribute type 2 has an invalid length.
[  124.424358][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'.
[  124.831038][ T5963] usb 5-1: Using ep0 maxpacket: 16
[  124.850052][ T5963] usb 5-1: config 0 has no interfaces?
[  124.857884][ T5963] usb 5-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  124.872104][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.895677][ T5963] usb 5-1: Product: syz
[  124.903949][ T5963] usb 5-1: Manufacturer: syz
[  124.917291][ T5963] usb 5-1: SerialNumber: syz
[  124.929285][ T5963] usb 5-1: config 0 descriptor??
[  125.110723][ T5963] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  125.119495][  T810] usb 4-1: USB disconnect, device number 6
[  125.270368][ T5963] usb 2-1: Using ep0 maxpacket: 16
[  125.443830][ T5963] usb 2-1: config 0 has no interfaces?
[  125.455368][ T5963] usb 2-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  125.465339][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.702350][ T5963] usb 2-1: Product: syz
[  125.707390][ T5963] usb 2-1: Manufacturer: syz
[  125.712456][ T5963] usb 2-1: SerialNumber: syz
[  125.725267][ T5963] usb 2-1: config 0 descriptor??
[  126.965314][   T10] usb 5-1: USB disconnect, device number 4
[  128.545771][ T5944] usb 2-1: USB disconnect, device number 3
[  128.860319][   T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  129.136923][ T6212] binder: 6204:6212 ioctl c0046209 0 returned -22
[  129.686278][   T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  129.866127][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  130.056708][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  130.097460][ T6210] netlink: 'syz.2.60': attribute type 1 has an invalid length.
[  130.105513][ T6210] netlink: 'syz.2.60': attribute type 2 has an invalid length.
[  130.113755][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'.
[  130.220045][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  130.238784][   T10] usb 4-1: Product: syz
[  131.824445][   T10] usb 4-1: Manufacturer: syz
[  131.832922][   T10] usb 4-1: SerialNumber: syz
[  131.884560][   T10] usb 4-1: config 0 descriptor??
[  132.377014][   T10] usb 4-1: can't set config #0, error -71
[  132.404163][   T10] usb 4-1: USB disconnect, device number 7
[  132.886305][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  132.905580][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  133.613974][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  133.764907][ T6229] binder: 6224:6229 ioctl c0046209 0 returned -22
[  134.309707][   T10] usb 3-1: Using ep0 maxpacket: 16
[  134.380191][   T10] usb 3-1: device descriptor read/all, error -71
[  135.526982][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  135.552798][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.560616][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  135.570774][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  135.579186][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.120952][ T6249] netlink: 180 bytes leftover after parsing attributes in process `syz.1.70'.
[  137.705530][ T5859] Bluetooth: hci5: command tx timeout
[  138.009015][ T6243] chnl_net:caif_netlink_parms(): no params data found
[  138.935358][ T6273] netlink: 'syz.2.75': attribute type 1 has an invalid length.
[  138.943149][ T6273] netlink: 'syz.2.75': attribute type 2 has an invalid length.
[  138.950893][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'.
[  139.315206][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.374621][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.404142][ T6243] bridge_slave_0: entered allmulticast mode
[  139.463413][ T6243] bridge_slave_0: entered promiscuous mode
[  139.519634][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.538789][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.558416][ T6243] bridge_slave_1: entered allmulticast mode
[  139.610542][ T6243] bridge_slave_1: entered promiscuous mode
[  139.771039][  T810] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  139.799709][ T5859] Bluetooth: hci5: command tx timeout
[  139.827313][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.897906][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.959945][  T810] usb 3-1: Using ep0 maxpacket: 16
[  139.979134][  T810] usb 3-1: config 0 has no interfaces?
[  140.025113][  T810] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  140.051667][  T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.069141][ T6243] team0: Port device team_slave_0 added
[  140.083552][  T810] usb 3-1: Product: syz
[  140.102692][  T810] usb 3-1: Manufacturer: syz
[  140.108919][ T6243] team0: Port device team_slave_1 added
[  140.119078][  T810] usb 3-1: SerialNumber: syz
[  140.154893][  T810] usb 3-1: config 0 descriptor??
[  140.268787][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.297080][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.364709][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.444938][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.472430][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.558984][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.840533][ T6243] hsr_slave_0: entered promiscuous mode
[  140.858106][ T6243] hsr_slave_1: entered promiscuous mode
[  140.884588][ T6243] debugfs: 'hsr0' already exists in 'hsr'
[  140.899769][ T6243] Cannot create hsr debugfs directory
[  141.756878][ T6243] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  141.850654][ T5944] usb 3-1: USB disconnect, device number 5
[  141.862771][ T6243] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  141.869819][ T5859] Bluetooth: hci5: command tx timeout
[  141.959868][ T6243] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  142.029474][ T6243] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  142.508905][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.613374][ T6243] 8021q: adding VLAN 0 to HW filter on device team0
[  142.701703][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.708912][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.869384][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.876631][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.644000][ T6307] 9p: Bad value for 'rfdno'
[  143.949704][ T5859] Bluetooth: hci5: command tx timeout
[  145.119981][ T6318] netlink: 'syz.4.83': attribute type 1 has an invalid length.
[  145.127768][ T6318] netlink: 'syz.4.83': attribute type 2 has an invalid length.
[  145.135667][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'.
[  145.502283][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.790430][ T5944] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  145.961057][ T5944] usb 5-1: Using ep0 maxpacket: 16
[  145.987498][ T5944] usb 5-1: config 0 has no interfaces?
[  146.019545][ T5944] usb 5-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  146.044302][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.073486][ T5944] usb 5-1: Product: syz
[  146.088338][ T5944] usb 5-1: Manufacturer: syz
[  146.102876][ T5944] usb 5-1: SerialNumber: syz
[  146.143251][ T5944] usb 5-1: config 0 descriptor??
[  146.553572][ T6243] veth0_vlan: entered promiscuous mode
[  146.618372][ T6243] veth1_vlan: entered promiscuous mode
[  146.807973][ T6243] veth0_macvtap: entered promiscuous mode
[  146.849390][ T6243] veth1_macvtap: entered promiscuous mode
[  146.944524][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.000919][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.051610][ T1154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.127093][ T1154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.152960][ T1154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.200909][ T1154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.752852][ T6211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.780090][ T6211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.134511][ T5943] usb 5-1: USB disconnect, device number 5
[  148.189053][  T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.247191][  T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.485560][ T6373] netlink: 'syz.4.94': attribute type 3 has an invalid length.
[  153.699067][ T6381] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  159.280217][ T6425] netlink: 220 bytes leftover after parsing attributes in process `syz.4.104'.
[  159.402210][ T6420] tipc: Started in network mode
[  159.407852][ T6420] tipc: Node identity f6920567e6e1, cluster identity 4711
[  159.416902][ T6420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.358329][ T6417] tipc: Disabling bearer <eth:syzkaller0>
[  160.471415][ T5944] tipc: Node number set to 275973479
[  160.793033][ T6433] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[  160.801218][ T6433] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[  160.809174][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[  162.490655][  T810] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  163.949968][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  164.188603][  T810] usb 2-1: Using ep0 maxpacket: 16
[  164.316115][  T810] usb 2-1: config 0 has no interfaces?
[  164.987039][  T810] usb 2-1: string descriptor 0 read error: -71
[  164.993891][  T810] usb 2-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  165.003507][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.632922][  T810] usb 2-1: config 0 descriptor??
[  165.744995][  T810] usb 2-1: can't set config #0, error -71
[  165.753981][  T810] usb 2-1: USB disconnect, device number 4
[  169.227731][ T6478] netlink: 'syz.5.118': attribute type 1 has an invalid length.
[  169.235461][ T6478] netlink: 'syz.5.118': attribute type 2 has an invalid length.
[  169.243183][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.118'.
[  170.399769][ T5944] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  171.681380][ T5944] usb 6-1: Using ep0 maxpacket: 16
[  171.759592][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  171.799593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  171.839596][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  171.869597][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  171.879627][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  172.119616][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  172.159632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  172.314536][ T5944] usb 6-1: device descriptor read/all, error -71
[  177.771528][ T6538] netlink: 'syz.5.133': attribute type 1 has an invalid length.
[  177.782097][ T6538] netlink: 'syz.5.133': attribute type 2 has an invalid length.
[  177.791807][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.133'.
[  178.329676][  T810] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  178.490977][  T810] usb 6-1: Using ep0 maxpacket: 16
[  178.512395][  T810] usb 6-1: config 0 has no interfaces?
[  178.538238][  T810] usb 6-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  178.574034][  T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.607805][  T810] usb 6-1: Product: syz
[  178.624621][  T810] usb 6-1: Manufacturer: syz
[  178.706112][  T810] usb 6-1: SerialNumber: syz
[  178.794344][  T810] usb 6-1: config 0 descriptor??
[  178.994283][ T6554] netlink: 220 bytes leftover after parsing attributes in process `syz.1.139'.
[  180.679720][   T24] usb 6-1: USB disconnect, device number 4
[  182.101034][ T6579] netlink: 'syz.3.143': attribute type 3 has an invalid length.
[  187.234927][ T6623] netlink: 220 bytes leftover after parsing attributes in process `syz.3.156'.
[  192.326094][ T6653] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[  192.334153][ T6653] netlink: 'syz.1.163': attribute type 2 has an invalid length.
[  192.342548][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'.
[  193.675980][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.166'.
[  194.828254][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  194.840906][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  195.079631][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  196.008046][  T809] IPVS: starting estimator thread 0...
[  196.020861][ T6672] capability: warning: `syz.1.170' uses deprecated v2 capabilities in a way that may be insecure
[  196.139792][ T6673] IPVS: using max 39 ests per chain, 93600 per kthread
[  197.118296][ T6687] netlink: 180 bytes leftover after parsing attributes in process `syz.5.173'.
[  199.490196][ T6704] netlink: 'syz.5.178': attribute type 1 has an invalid length.
[  199.498012][ T6704] netlink: 'syz.5.178': attribute type 2 has an invalid length.
[  199.505929][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.178'.
[  200.220605][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  200.389688][   T24] usb 6-1: Using ep0 maxpacket: 16
[  200.412253][   T24] usb 6-1: config 0 has no interfaces?
[  200.435815][   T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6
[  200.465237][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.499240][   T24] usb 6-1: Product: syz
[  200.517517][   T24] usb 6-1: Manufacturer: syz
[  200.538376][   T24] usb 6-1: SerialNumber: syz
[  200.606646][   T24] usb 6-1: config 0 descriptor??
[  200.884217][ T6711] binder: 6698:6711 ioctl c0046209 0 returned -22
[  202.730266][  T810] usb 6-1: USB disconnect, device number 5
[  204.921577][ T6734] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[  204.929410][ T6734] netlink: 'syz.1.184': attribute type 2 has an invalid length.
[  204.937276][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'.
[  205.429486][ T6741] netlink: 180 bytes leftover after parsing attributes in process `syz.4.185'.
[  205.480079][ T6741] evm: overlay not supported
[  205.991882][ T6726] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI
[  206.003844][ T6726] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]
[  206.012297][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.5.183 Not tainted syzkaller #0 PREEMPT(full) 
[  206.021493][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  206.031546][ T6726] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  206.037013][ T6726] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  206.056615][ T6726] RSP: 0018:ffffc9001046f9a0 EFLAGS: 00010006
[  206.062686][ T6726] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  206.070656][ T6726] RDX: 1ffff9200208df40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200
[  206.078626][ T6726] RBP: ffffc9001046faa0 R08: 0000000000000003 R09: 0000000000000004
[  206.086599][ T6726] R10: dffffc0000000000 R11: fffff5200208df50 R12: 0000000000000000
[  206.094565][ T6726] R13: ffff88807ab102d0 R14: 0000000000000018 R15: ffffc9001046fc20
[  206.102533][ T6726] FS:  000055558fce4500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000
[  206.111463][ T6726] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.118042][ T6726] CR2: 0000001b31ff9ff8 CR3: 00000000337dc000 CR4: 00000000003526f0
[  206.126012][ T6726] Call Trace:
[  206.129309][ T6726]  <TASK>
[  206.132241][ T6726]  ? __lock_acquire+0x6b5/0x2cf0
[  206.137217][ T6726]  ? __pfx_rwsem_mark_wake+0x10/0x10
[  206.142505][ T6726]  ? do_raw_spin_lock+0x12b/0x2f0
[  206.147621][ T6726]  rwsem_del_wake_waiter+0x25d/0x2e0
[  206.152915][ T6726]  rwsem_down_write_slowpath+0xa6f/0x1080
[  206.158650][ T6726]  ? rwsem_down_write_slowpath+0x4a3/0x1080
[  206.164545][ T6726]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  206.170705][ T6726]  ? futex_wake+0x4ac/0x580
[  206.175203][ T6726]  ? __pfx_futex_wait+0x10/0x10
[  206.180060][ T6726]  ? vm_mmap_pgoff+0x234/0x4f0
[  206.184823][ T6726]  down_write_killable+0x1eb/0x240
[  206.189937][ T6726]  ? __pfx_down_write_killable+0x10/0x10
[  206.195571][ T6726]  ? apparmor_mmap_file+0x197/0x3e0
[  206.200781][ T6726]  ? security_mmap_file+0x4df/0xa20
[  206.205980][ T6726]  vm_mmap_pgoff+0x234/0x4f0
[  206.210585][ T6726]  ? __se_sys_futex+0x3a8/0x450
[  206.215433][ T6726]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  206.220546][ T6726]  ? __pfx___se_sys_futex+0x10/0x10
[  206.225745][ T6726]  ? rcu_is_watching+0x15/0xb0
[  206.230594][ T6726]  ? ksys_mmap_pgoff+0xf3/0x760
[  206.235462][ T6726]  ? __x64_sys_mmap+0x7f/0x140
[  206.240236][ T6726]  do_syscall_64+0x14d/0xf80
[  206.244849][ T6726]  ? trace_irq_disable+0x3b/0x150
[  206.249972][ T6726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.256034][ T6726]  ? clear_bhb_loop+0x40/0x90
[  206.260712][ T6726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.266608][ T6726] RIP: 0033:0x7f85d699c502
[  206.271037][ T6726] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  206.290639][ T6726] RSP: 002b:00007ffec52e44b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  206.299048][ T6726] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85d699c502
[  206.307016][ T6726] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  206.314985][ T6726] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000
[  206.322964][ T6726] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffec52e4620
[  206.330957][ T6726] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  206.338940][ T6726]  </TASK>
[  206.341964][ T6726] Modules linked in:
[  206.345871][ T6726] ---[ end trace 0000000000000000 ]---
[  206.351415][ T6726] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0
[  206.356882][ T6726] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be
[  206.376485][ T6726] RSP: 0018:ffffc9001046f9a0 EFLAGS: 00010006
[  206.382551][ T6726] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000
[  206.390516][ T6726] RDX: 1ffff9200208df40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200
[  206.398483][ T6726] RBP: ffffc9001046faa0 R08: 0000000000000003 R09: 0000000000000004
[  206.406449][ T6726] R10: dffffc0000000000 R11: fffff5200208df50 R12: 0000000000000000
[  206.414417][ T6726] R13: ffff88807ab102d0 R14: 0000000000000018 R15: ffffc9001046fc20
[  206.422383][ T6726] FS:  000055558fce4500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000
[  206.431304][ T6726] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.437881][ T6726] CR2: 0000001b31ff9ff8 CR3: 00000000337dc000 CR4: 00000000003526f0
[  206.445853][ T6726] Kernel panic - not syncing: Fatal exception
[  207.576421][ T6726] Shutting down cpus with NMI
[  207.581790][ T6726] Kernel Offset: disabled
[  207.586129][ T6726] Rebooting in 86400 seconds..