last executing test programs:

53.664347516s ago: executing program 2 (id=3):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

50.396447306s ago: executing program 2 (id=8):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x7fff, 0x0, 0x10000000000000, 0x2c43, 0xfffffffb, 0x9, 0x0, 0x300, 0x5eb3b4c5, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x400, 0x7481, 0x0, 0x8})
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

50.034956511s ago: executing program 3 (id=4):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

49.795344398s ago: executing program 3 (id=9):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

46.930075593s ago: executing program 3 (id=10):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x880)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)={0x20, 0x37, 0x1, {0x1, 0x0, 0x10000, r1, 0x2, '})'}}, 0x20)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ioprio_set$uid(0x3, 0x0, 0x0)

46.735364388s ago: executing program 2 (id=11):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

42.606259386s ago: executing program 2 (id=12):
r0 = fanotify_init(0x0, 0x800)
fanotify_mark(r0, 0x411, 0x40000009, 0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00')
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

42.237716915s ago: executing program 4 (id=5):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x7fff, 0x0, 0x10000000000000, 0x2c43, 0xfffffffb, 0x9, 0x0, 0x300, 0x5eb3b4c5, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x400, 0x7481, 0x0, 0x8})
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

40.348563121s ago: executing program 0 (id=14):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)

40.142359287s ago: executing program 4 (id=16):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

34.612162679s ago: executing program 0 (id=18):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

32.254668023s ago: executing program 4 (id=19):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0)
fchdir(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

32.031195611s ago: executing program 0 (id=20):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

29.635761885s ago: executing program 32 (id=10):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x880)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)={0x20, 0x37, 0x1, {0x1, 0x0, 0x10000, r1, 0x2, '})'}}, 0x20)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ioprio_set$uid(0x3, 0x0, 0x0)

29.40499063s ago: executing program 0 (id=22):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

29.381626498s ago: executing program 1 (id=23):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800852, &(0x7f0000000100)={[{@nossd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@nossd_spread}, {@discard_sync}, {@clear_cache}, {@space_cache_v1}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000002b00)=ANY=[@ANYBLOB='errors=continue,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=macroman,umask=00000000000000000000015,zero_size_dir,keep_last_dots,iocharset=cp737,discard,sys_tz,errors=remount-ro,iocharset=cp860,discard,fmask=00000000000000000000010,dmask=00000000000000000000000,obj_role=!,dont_hash,obj_role=maccroatian,mask=^MAY_READ,euid=', @ANYRESDEC=0x0, @ANYBLOB="b50d07a23c03dd922d5e7b05f6e7fd6204a983cb4a3090b69d15dc92152fb80b3603f9fa976b756ba4ab432d4c369b16035e34c95a0300f2c018a483900eac1271df4c4465b8368d9ee7bcc85a17b4dd54aeff6d1f0fb28f5e412d3b9c3f6b8e76e45461096e581fbfa7c9e1c5547da2dec99c5a7718b59f39ea852b105f50d4c049a1ec12af6fa65dc26a296855e11732b5905a251994a7267b80ca9742"], 0x1, 0x1534, &(0x7f0000000e40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(0x0, &(0x7f00000002c0)='.\x02\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

26.781763233s ago: executing program 33 (id=12):
r0 = fanotify_init(0x0, 0x800)
fanotify_mark(r0, 0x411, 0x40000009, 0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00')
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

20.935626215s ago: executing program 0 (id=26):
r0 = socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee15688a8003c000203000aff3f000098fc5ad90a00", 0x22)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x50000, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r1], 0x50)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRESDEC, @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
shutdown(r1, 0x0)
sendfile(r1, r2, 0x0, 0xdc)
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32], 0xff, 0x6de, &(0x7f0000000180)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

20.724493314s ago: executing program 1 (id=27):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x7fff, 0x0, 0x10000000000000, 0x2c43, 0xfffffffb, 0x9, 0x0, 0x300, 0x5eb3b4c5, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x400, 0x7481, 0x0, 0x8})
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

20.570009284s ago: executing program 5 (id=28):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x5}, [@generic={0x55, 0x0, 0x6, 0x6, 0x200}]}, &(0x7f0000001300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xa, 0x9, 0x3bb}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000014c0)=[{0x1, 0x1, 0x7, 0x5}, {0x2, 0x5, 0x9, 0xa}], 0x10, 0x200}, 0x94)
keyctl$set_reqkey_keyring(0xe, 0x3)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

20.294089323s ago: executing program 1 (id=29):
r0 = socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee15688a8003c000203000aff3f000098fc5ad90a00", 0x22)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x50000, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
write(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32], &(0x7f00000001c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
shutdown(r1, 0x0)
sendfile(r1, r2, 0x0, 0xdc)

18.661221108s ago: executing program 5 (id=30):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$MON_IOCG_STATS(r6, 0xc0109207, 0x0)
fchdir(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

18.359175069s ago: executing program 4 (id=31):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, 0x0, 0x0, 0xffffffbf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x5, &(0x7f0000000040)=0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r6, 0x4, 0x40800)
setsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r7, 0x2000009)
sendfile(r6, r7, 0x0, 0x7ffff004)

16.447189014s ago: executing program 1 (id=32):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

13.812951867s ago: executing program 4 (id=33):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

11.516501801s ago: executing program 0 (id=34):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x7fff, 0x0, 0x10000000000000, 0x2c43, 0xfffffffb, 0x9, 0x0, 0x300, 0x5eb3b4c5, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x400, 0x7481, 0x0, 0x8})
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

9.487244361s ago: executing program 5 (id=35):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82014001000010009de"], 0x19)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)

6.95036535s ago: executing program 1 (id=36):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036000000"], 0x5b0}, 0x20008001)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x814)

3.82674897s ago: executing program 4 (id=37):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800852, &(0x7f0000000100)={[{@nossd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@nossd_spread}, {@discard_sync}, {@clear_cache}, {@space_cache_v1}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000002b00)=ANY=[@ANYBLOB='errors=continue,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=macroman,umask=00000000000000000000015,zero_size_dir,keep_last_dots,iocharset=cp737,discard,sys_tz,errors=remount-ro,iocharset=cp860,discard,fmask=00000000000000000000010,dmask=00000000000000000000000,obj_role=!,dont_hash,obj_role=maccroatian,mask=^MAY_READ,euid=', @ANYRESDEC=0x0, @ANYBLOB="b50d07a23c03dd922d5e7b05f6e7fd6204a983cb4a3090b69d15dc92152fb80b3603f9fa976b756ba4ab432d4c369b16035e34c95a0300f2c018a483900eac1271df4c4465b8368d9ee7bcc85a17b4dd54aeff6d1f0fb28f5e412d3b9c3f6b8e76e45461096e581fbfa7c9e1c5547da2dec99c5a7718b59f39ea852b105f50d4c049a1ec12af6fa65dc26a296855e11732b5905a251994a7267b80ca9742"], 0x1, 0x1534, &(0x7f0000000e40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(0x0, &(0x7f00000002c0)='.\x02\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

2.115994603s ago: executing program 5 (id=38):
r0 = socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee15688a8003c000203000aff3f000098fc5ad90a00", 0x22)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x50000, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xdc)

1.798432689s ago: executing program 5 (id=39):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

365.059788ms ago: executing program 5 (id=40):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@quota}, {@sysvgroups}, {@i_version}]}, 0x1, 0x511, &(0x7f0000000580)="$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")
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB="010229bd7000fedbdf252700000008", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x401c2103, &(0x7f00000001c0))
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getpriority(0x2, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0xa, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0xfffffffe, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x81, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x21, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x2, 0x800040, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x7, 0x6, 0x8, 0x0, 0xffffffff, 0x100ff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x7ffffffe, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x1, 0x8], [0x1ff, 0x2, 0x4, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x10000002, 0x6, 0x1, 0xa, 0x4, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c)
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000010c0)=""/6, 0x6)
write(r0, 0x0, 0x0)

0s ago: executing program 1 (id=41):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0)
fchdir(0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts.
[  101.636540][  T789] cfg80211: failed to load regulatory.db
[  102.869995][ T5811] cgroup: Unknown subsys name 'net'
[  103.009905][ T5811] cgroup: Unknown subsys name 'cpuset'
[  103.019496][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  104.709025][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  108.896155][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  108.904046][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.914576][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.923588][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.931157][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  108.939019][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.945120][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.946856][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  108.955608][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.968768][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  108.978100][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  108.986424][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.986486][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.994549][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.000907][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  109.008659][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.016131][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.022428][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.030233][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.038918][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.045842][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.056886][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.061030][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.065829][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  109.071343][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.079816][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.088253][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.094859][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.106787][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.116228][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  109.957204][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  110.056015][ T5830] chnl_net:caif_netlink_parms(): no params data found
[  110.307766][ T5831] chnl_net:caif_netlink_parms(): no params data found
[  110.325495][ T5832] chnl_net:caif_netlink_parms(): no params data found
[  110.372162][ T5834] chnl_net:caif_netlink_parms(): no params data found
[  110.392005][ T5835] chnl_net:caif_netlink_parms(): no params data found
[  110.545730][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.553850][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.562541][ T5833] bridge_slave_0: entered allmulticast mode
[  110.570483][ T5833] bridge_slave_0: entered promiscuous mode
[  110.642015][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.649530][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.658583][ T5833] bridge_slave_1: entered allmulticast mode
[  110.666189][ T5833] bridge_slave_1: entered promiscuous mode
[  110.744524][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.751770][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.759311][ T5830] bridge_slave_0: entered allmulticast mode
[  110.767339][ T5830] bridge_slave_0: entered promiscuous mode
[  110.828226][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.837516][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.845804][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.852978][ T5830] bridge_slave_1: entered allmulticast mode
[  110.860651][ T5830] bridge_slave_1: entered promiscuous mode
[  110.903660][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.910925][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.918451][ T5832] bridge_slave_0: entered allmulticast mode
[  110.926357][ T5832] bridge_slave_0: entered promiscuous mode
[  110.937440][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.005680][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.013065][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.020413][ T5832] bridge_slave_1: entered allmulticast mode
[  111.028118][ T5832] bridge_slave_1: entered promiscuous mode
[  111.066712][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.073870][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.082117][ T5831] bridge_slave_0: entered allmulticast mode
[  111.089724][ T5831] bridge_slave_0: entered promiscuous mode
[  111.111849][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.119056][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.126331][ T5835] bridge_slave_0: entered allmulticast mode
[  111.134341][ T5835] bridge_slave_0: entered promiscuous mode
[  111.155325][ T5143] Bluetooth: hci3: command tx timeout
[  111.155631][ T5841] Bluetooth: hci1: command tx timeout
[  111.162795][ T5852] Bluetooth: hci4: command tx timeout
[  111.166747][ T5841] Bluetooth: hci0: command tx timeout
[  111.196840][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.206514][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.213819][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.221953][ T5831] bridge_slave_1: entered allmulticast mode
[  111.230066][ T5831] bridge_slave_1: entered promiscuous mode
[  111.234902][ T5841] Bluetooth: hci2: command tx timeout
[  111.235985][ T5852] Bluetooth: hci5: command tx timeout
[  111.248446][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.255657][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.262980][ T5834] bridge_slave_0: entered allmulticast mode
[  111.270649][ T5834] bridge_slave_0: entered promiscuous mode
[  111.278686][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.286125][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.293540][ T5835] bridge_slave_1: entered allmulticast mode
[  111.301256][ T5835] bridge_slave_1: entered promiscuous mode
[  111.330872][ T5833] team0: Port device team_slave_0 added
[  111.339407][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.393398][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.401256][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.408995][ T5834] bridge_slave_1: entered allmulticast mode
[  111.417245][ T5834] bridge_slave_1: entered promiscuous mode
[  111.441862][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.453426][ T5833] team0: Port device team_slave_1 added
[  111.465151][ T5830] team0: Port device team_slave_0 added
[  111.518351][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.545186][ T5830] team0: Port device team_slave_1 added
[  111.553867][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.581797][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.637958][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.650844][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.663849][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.690651][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.698460][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.725827][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.770480][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.797295][ T5832] team0: Port device team_slave_0 added
[  111.803714][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.810794][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.838321][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.850633][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.858522][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.885401][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.943505][ T5832] team0: Port device team_slave_1 added
[  111.969491][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.976762][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.003644][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.017681][ T5831] team0: Port device team_slave_0 added
[  112.040271][ T5835] team0: Port device team_slave_0 added
[  112.072527][ T5831] team0: Port device team_slave_1 added
[  112.080268][ T5834] team0: Port device team_slave_0 added
[  112.088281][ T5835] team0: Port device team_slave_1 added
[  112.109985][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.117148][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.143135][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.173335][ T5834] team0: Port device team_slave_1 added
[  112.207606][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.215161][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.241319][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.330508][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.337655][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.368755][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.396112][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.403079][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.430162][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.449831][ T5833] hsr_slave_0: entered promiscuous mode
[  112.457091][ T5833] hsr_slave_1: entered promiscuous mode
[  112.481246][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.488261][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.514774][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.527088][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.534365][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.561176][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.573146][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.580509][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.606809][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.625843][ T5830] hsr_slave_0: entered promiscuous mode
[  112.632334][ T5830] hsr_slave_1: entered promiscuous mode
[  112.638960][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[  112.645051][ T5830] Cannot create hsr debugfs directory
[  112.658804][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.665822][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.691831][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.842277][ T5832] hsr_slave_0: entered promiscuous mode
[  112.849114][ T5832] hsr_slave_1: entered promiscuous mode
[  112.855809][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[  112.861651][ T5832] Cannot create hsr debugfs directory
[  112.997089][ T5831] hsr_slave_0: entered promiscuous mode
[  113.003658][ T5831] hsr_slave_1: entered promiscuous mode
[  113.010464][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[  113.016622][ T5831] Cannot create hsr debugfs directory
[  113.028280][ T5835] hsr_slave_0: entered promiscuous mode
[  113.035247][ T5835] hsr_slave_1: entered promiscuous mode
[  113.041460][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[  113.047331][ T5835] Cannot create hsr debugfs directory
[  113.058584][ T5834] hsr_slave_0: entered promiscuous mode
[  113.065164][ T5834] hsr_slave_1: entered promiscuous mode
[  113.071461][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[  113.077638][ T5834] Cannot create hsr debugfs directory
[  113.234178][ T5852] Bluetooth: hci0: command tx timeout
[  113.234203][ T5841] Bluetooth: hci4: command tx timeout
[  113.234233][ T5143] Bluetooth: hci1: command tx timeout
[  113.239629][ T5850] Bluetooth: hci3: command tx timeout
[  113.314244][ T5143] Bluetooth: hci2: command tx timeout
[  113.324751][ T5143] Bluetooth: hci5: command tx timeout
[  113.745130][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.785086][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.810512][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.839904][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.915550][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  113.928096][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  113.942475][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  113.970356][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  114.047116][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  114.071971][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  114.089057][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  114.107832][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  114.213748][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  114.226240][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.242248][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  114.271602][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.343199][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.387970][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  114.401817][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  114.417848][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  114.430341][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  114.561238][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  114.589788][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.608674][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.620567][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.637503][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  114.651845][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.659082][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.703815][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.710983][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.770036][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.808533][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.893106][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[  114.921906][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[  114.934299][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.941432][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.984898][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.992052][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.019061][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.026225][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.055390][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.080784][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.087989][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.173132][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[  115.209669][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.250374][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.257590][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.314439][ T5852] Bluetooth: hci4: command tx timeout
[  115.314473][ T5841] Bluetooth: hci0: command tx timeout
[  115.319932][ T5143] Bluetooth: hci3: command tx timeout
[  115.325524][ T5850] Bluetooth: hci1: command tx timeout
[  115.363445][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.370659][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.390185][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  115.404184][ T5850] Bluetooth: hci5: command tx timeout
[  115.404845][ T5143] Bluetooth: hci2: command tx timeout
[  115.445906][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.453043][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.469364][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.487988][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.521903][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.529079][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.658822][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[  115.708286][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.787720][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.794925][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.863933][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.871114][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.091404][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.165846][ T5833] veth0_vlan: entered promiscuous mode
[  116.182040][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.227587][ T5833] veth1_vlan: entered promiscuous mode
[  116.362108][ T5832] veth0_vlan: entered promiscuous mode
[  116.450315][ T5832] veth1_vlan: entered promiscuous mode
[  116.476160][ T5833] veth0_macvtap: entered promiscuous mode
[  116.512903][ T5833] veth1_macvtap: entered promiscuous mode
[  116.614793][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.661053][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.678751][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.738423][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.779663][ T5832] veth0_macvtap: entered promiscuous mode
[  116.809828][ T5832] veth1_macvtap: entered promiscuous mode
[  116.817611][ T3561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.829111][ T3561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.851437][ T1333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.861522][ T1333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.927889][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.941970][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.008378][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.079750][ T5835] veth0_vlan: entered promiscuous mode
[  117.096904][ T3504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.107230][ T3504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.140453][ T3504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.156302][ T3504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.165760][ T5831] veth0_vlan: entered promiscuous mode
[  117.215443][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.223263][ T5835] veth1_vlan: entered promiscuous mode
[  117.226810][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.265122][ T5831] veth1_vlan: entered promiscuous mode
[  117.328605][ T5830] veth0_vlan: entered promiscuous mode
[  117.381889][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.405425][ T5143] Bluetooth: hci1: command tx timeout
[  117.405521][ T5841] Bluetooth: hci3: command tx timeout
[  117.411010][ T5852] Bluetooth: hci4: command tx timeout
[  117.416382][ T5850] Bluetooth: hci0: command tx timeout
[  117.432206][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.449330][ T5830] veth1_vlan: entered promiscuous mode
[  117.474229][ T5850] Bluetooth: hci5: command tx timeout
[  117.479877][ T5841] Bluetooth: hci2: command tx timeout
[  117.480496][ T5835] veth0_macvtap: entered promiscuous mode
[  117.519020][ T5831] veth0_macvtap: entered promiscuous mode
[  117.530399][ T5831] veth1_macvtap: entered promiscuous mode
[  117.577877][ T5835] veth1_macvtap: entered promiscuous mode
[  117.599629][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  117.615743][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.623593][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.683848][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.713824][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.768753][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.772395][ T5971] loop2: detected capacity change from 0 to 128
[  117.778560][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.805925][ T5971] =======================================================
[  117.805925][ T5971] WARNING: The mand mount option has been deprecated and
[  117.805925][ T5971]          and is ignored by this kernel. Remove the mand
[  117.805925][ T5971]          option from the mount to silence this warning.
[  117.805925][ T5971] =======================================================
[  117.849969][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.851022][ T5971] EXT4-fs (loop2): Test dummy encryption mode enabled
[  117.859132][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.885096][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.921071][ T5971] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.936112][ T5971] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.948927][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.972841][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.002034][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.018086][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.029230][ T5971] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  118.049380][ T5971] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  118.198091][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.224931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  118.233184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  118.394399][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.403468][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.634800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  120.645406][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.695436][ T5830] veth0_macvtap: entered promiscuous mode
[  120.729341][ T5830] veth1_macvtap: entered promiscuous mode
[  120.780309][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.804258][ T5834] veth0_vlan: entered promiscuous mode
[  120.811178][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.886275][ T5834] veth1_vlan: entered promiscuous mode
[  120.947794][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.961860][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.972815][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.012450][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.049627][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.110318][ T5981] loop2: detected capacity change from 0 to 128
[  121.162950][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.183756][ T5981] EXT4-fs (loop2): Test dummy encryption mode enabled
[  121.205182][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.213417][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.216611][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.240075][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.251989][ T5981] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.301284][ T1333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.349165][ T5981] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.425035][ T5834] veth0_macvtap: entered promiscuous mode
[  121.496524][ T5834] veth1_macvtap: entered promiscuous mode
[  121.497497][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.520322][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.594527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.223874][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.284615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.833217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  122.833732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  122.935778][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  123.039138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  124.445605][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.453459][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.537310][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.649178][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.662285][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.675321][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.692563][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.734018][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.781885][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.816564][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.026721][ T5999] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  129.338246][ T6006] loop1: detected capacity change from 0 to 128
[  129.351236][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.379552][ T6010] loop4: detected capacity change from 0 to 128
[  129.402355][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.402436][ T6006] EXT4-fs (loop1): Test dummy encryption mode enabled
[  129.447971][ T6010] EXT4-fs (loop4): Test dummy encryption mode enabled
[  129.746712][ T6010] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.780833][ T6010] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.055809][ T6006] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.115900][ T6006] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.121458][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.195399][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.212549][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.291902][ T5830] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.779930][ T6029] FAT-fs (loop1): unable to read boot sector
[  136.779005][ T6027] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  136.785262][ T6027] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  137.018225][ T6027] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  137.027552][ T6027] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  139.196096][ T6027] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  139.202511][ T6027] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  139.415454][ T6027] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  139.423359][ T6027] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  139.585402][ T6027] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  139.591448][ T6027] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  141.634284][ T5841] Bluetooth: hci3: command tx timeout
[  141.693771][ T6027] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  141.700307][ T6027] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  144.455020][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  144.464005][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  144.634731][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  144.662175][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.695322][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.708138][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.717312][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  144.737453][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  144.750040][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.757794][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.766111][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.773811][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.183694][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  145.195491][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  145.234402][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  145.255457][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  145.265220][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  145.632765][ T6058] chnl_net:caif_netlink_parms(): no params data found
[  146.069014][ T6057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.225400][ T6069] loop5: detected capacity change from 0 to 128
[  146.284303][ T6069] EXT4-fs (loop5): Test dummy encryption mode enabled
[  146.584903][ T6069] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.661957][ T6057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.684856][ T6069] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.860091][ T5841] Bluetooth: hci6: command tx timeout
[  147.394272][ T5841] Bluetooth: hci7: command tx timeout
[  148.276949][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.329815][ T5850] Bluetooth: hci7: command tx timeout
[  150.335308][ T5841] Bluetooth: hci6: command tx timeout
[  150.422595][ T6057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.621016][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.674211][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.719803][ T6058] bridge_slave_0: entered allmulticast mode
[  150.729047][ T6091] loop1: detected capacity change from 0 to 128
[  150.767389][ T6091] EXT4-fs (loop1): Test dummy encryption mode enabled
[  150.790308][ T6058] bridge_slave_0: entered promiscuous mode
[  150.808794][ T6091] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  150.823607][ T6091] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.075319][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.404219][ T5850] Bluetooth: hci7: command tx timeout
[  152.404524][ T5841] Bluetooth: hci6: command tx timeout
[  152.792169][ T6057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.935806][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.505265][ T6100] Zero length message leads to an empty skb
[  154.826326][ T5850] Bluetooth: hci7: command tx timeout
[  154.831812][ T5841] Bluetooth: hci6: command tx timeout
[  154.837809][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.929594][ T6058] bridge_slave_1: entered allmulticast mode
[  154.984162][ T6058] bridge_slave_1: entered promiscuous mode
[  155.190263][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.467832][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.374967][ T6058] team0: Port device team_slave_0 added
[  157.697673][ T6058] team0: Port device team_slave_1 added
[  157.961282][ T6057] bridge_slave_1: left allmulticast mode
[  157.974019][ T6057] bridge_slave_1: left promiscuous mode
[  157.981476][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.086092][ T6057] bridge_slave_0: left allmulticast mode
[  158.091786][ T6057] bridge_slave_0: left promiscuous mode
[  158.155696][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.308496][ T6115] loop0: detected capacity change from 0 to 1024
[  165.076812][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.125997][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.148116][ T6057] bond0 (unregistering): Released all slaves
[  165.206015][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.213005][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.307174][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.356191][ T6064] chnl_net:caif_netlink_parms(): no params data found
[  167.434032][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.470726][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  167.504977][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.701200][ T6130] loop0: detected capacity change from 0 to 128
[  167.730886][ T6130] EXT4-fs (loop0): Test dummy encryption mode enabled
[  167.806166][ T6130] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  167.829182][ T6130] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  169.605580][ T6149] loop5: detected capacity change from 0 to 128
[  169.627226][ T6149] EXT4-fs (loop5): Test dummy encryption mode enabled
[  169.686288][ T6149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.725447][ T6149] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.335292][ T6058] hsr_slave_0: entered promiscuous mode
[  170.342164][ T6058] hsr_slave_1: entered promiscuous mode
[  170.375208][ T6058] debugfs: 'hsr0' already exists in 'hsr'
[  170.386704][ T6058] Cannot create hsr debugfs directory
[  170.680944][ T6161] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  170.681212][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.801037][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.832735][ T6064] bridge_slave_0: entered allmulticast mode
[  170.879252][ T6064] bridge_slave_0: entered promiscuous mode
[  170.919731][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.940394][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.959940][ T6064] bridge_slave_1: entered allmulticast mode
[  170.985974][ T6064] bridge_slave_1: entered promiscuous mode
[  171.068494][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.336709][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.815375][ T6168] loop5: detected capacity change from 0 to 512
[  280.844187][    C0] ------------[ cut here ]------------
[  280.850431][    C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#0: syz.1.41/6170
[  280.862156][    C0] Modules linked in:
[  280.866745][    C0] CPU: 0 UID: 0 PID: 6170 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) 
[  280.875859][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  280.885927][    C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  280.892957][    C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 42 c2 9a e8 90 45 84 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 54 1a 89 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00
[  280.912644][    C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046
[  280.918728][    C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a37d90
[  280.926701][    C0] RDX: fffffbfff3584858 RSI: 0000000000000004 RDI: ffffffff9ac242c0
[  280.934810][    C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584858
[  280.942896][    C0] R10: 0000000000000003 R11: ffff888036160b30 R12: 1ffffffff1c02250
[  280.950887][    C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bd92
[  280.958958][    C0] FS:  00007f12e13dc6c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000
[  280.967902][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.974497][    C0] CR2: 000000110c42129d CR3: 0000000027b80000 CR4: 0000000000350ef0
[  280.982473][    C0] Call Trace:
[  280.985748][    C0]  <IRQ>
[  280.988611][    C0]  rcu_core+0x4cf/0x15f0
[  280.992894][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.998572][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.004326][    C0]  ? tmigr_handle_remote+0x132/0x380
[  281.009634][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  281.015313][    C0]  ? __pfx_rcu_core+0x10/0x10
[  281.020038][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.025714][    C0]  ? run_timer_base+0x121/0x190
[  281.030588][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  281.035872][    C0]  handle_softirqs+0x219/0x950
[  281.040663][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  281.045972][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.051617][    C0]  __irq_exit_rcu+0x109/0x170
[  281.056336][    C0]  irq_exit_rcu+0x9/0x30
[  281.060609][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  281.066266][    C0]  </IRQ>
[  281.069188][    C0]  <TASK>
[  281.072109][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.078089][    C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  281.083912][    C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 2a 5e 20 f6 48 89 df e8 e2 b0 20 f6 e8 fd 71 4d f6 fb bf 01 00 00 00 <e8> f2 b3 10 f6 65 8b 05 9b 19 39 08 85 c0 74 06 5b e9 6c ba 96 f5
[  281.103846][    C0] RSP: 0018:ffffc90004067ca0 EFLAGS: 00000206
[  281.109912][    C0] RAX: 00000000055402c9 RBX: ffff88802e4c2e40 RCX: ffffffff81c6f78f
[  281.117979][    C0] RDX: 0000000000000000 RSI: ffffffff8dacc5d0 RDI: 0000000000000001
[  281.125945][    C0] RBP: ffff88802e4c3040 R08: 0000000000000001 R09: 0000000000000001
[  281.133929][    C0] R10: ffffffff9088e9d7 R11: ffff888036160b30 R12: 0000000000000000
[  281.141911][    C0] R13: 0000000000000011 R14: 0000000000000200 R15: ffff88802e4c2e40
[  281.149917][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x110
[  281.155924][    C0]  get_signal+0x1e6a/0x26d0
[  281.160482][    C0]  ? __pfx_get_signal+0x10/0x10
[  281.165359][    C0]  arch_do_signal_or_restart+0x8f/0x7e0
[  281.170926][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  281.177109][    C0]  ? __pfx_restore_altstack+0x10/0x10
[  281.182493][    C0]  ? restore_signal_shadow_stack+0x63/0x460
[  281.188406][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.194049][    C0]  exit_to_user_mode_loop+0x8c/0x540
[  281.199348][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.204989][    C0]  do_syscall_64+0x4ee/0xf80
[  281.209600][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.215519][    C0] RIP: 0033:0x7f12e058f749
[  281.219935][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.239542][    C0] RSP: 002b:00007f12e13dc0e8 EFLAGS: 00000246
[  281.245624][    C0] RAX: 0000000000000000 RBX: 00007f12e07e5fa8 RCX: 00007f12e058f749
[  281.253623][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12e07e5fac
[  281.261593][    C0] RBP: 00007f12e07e5fa0 R08: 00007f12e13dd000 R09: 0000000000000000
[  281.269557][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.277527][    C0] R13: 00007f12e07e6038 R14: 00007ffc1bfaf420 R15: 00007ffc1bfaf508
[  281.285513][    C0]  </TASK>
[  281.288521][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  281.295791][    C0] CPU: 0 UID: 0 PID: 6170 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT(full) 
[  281.304926][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  281.314985][    C0] Call Trace:
[  281.318263][    C0]  <IRQ>
[  281.321109][    C0]  dump_stack_lvl+0x3d/0x1f0
[  281.325748][    C0]  vpanic+0x640/0x6f0
[  281.329741][    C0]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  281.336121][    C0]  panic+0xca/0xd0
[  281.339854][    C0]  ? __pfx_panic+0x10/0x10
[  281.344281][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  281.349400][    C0]  check_panic_on_warn+0xab/0xb0
[  281.354342][    C0]  __warn+0x108/0x3c0
[  281.358329][    C0]  __report_bug+0x2a0/0x520
[  281.362844][    C0]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  281.369207][    C0]  ? __pfx___report_bug+0x10/0x10
[  281.374243][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.379886][    C0]  ? find_held_lock+0x2b/0x80
[  281.384580][    C0]  ? rcu_is_watching+0x12/0xc0
[  281.389362][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.395000][    C0]  ? __lock_acquire+0x436/0x2890
[  281.399945][    C0]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  281.406301][    C0]  report_bug+0xb2/0x220
[  281.410576][    C0]  ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  281.416914][    C0]  handle_bug+0x127/0x260
[  281.421245][    C0]  exc_invalid_op+0x17/0x50
[  281.425747][    C0]  asm_exc_invalid_op+0x1a/0x20
[  281.430593][    C0] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0
[  281.437550][    C0] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 42 c2 9a e8 90 45 84 00 b8 01 00 00 00 87 05 25 c5 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 54 1a 89 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00
[  281.457165][    C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00010046
[  281.463239][    C0] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a37d90
[  281.471209][    C0] RDX: fffffbfff3584858 RSI: 0000000000000004 RDI: ffffffff9ac242c0
[  281.479192][    C0] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584858
[  281.487175][    C0] R10: 0000000000000003 R11: ffff888036160b30 R12: 1ffffffff1c02250
[  281.495149][    C0] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b843bd92
[  281.503139][    C0]  ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0
[  281.509522][    C0]  rcu_core+0x4cf/0x15f0
[  281.513808][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.519461][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.525103][    C0]  ? tmigr_handle_remote+0x132/0x380
[  281.530396][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  281.536030][    C0]  ? __pfx_rcu_core+0x10/0x10
[  281.540728][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.546364][    C0]  ? run_timer_base+0x121/0x190
[  281.551222][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  281.556432][    C0]  handle_softirqs+0x219/0x950
[  281.561222][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  281.566528][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.572179][    C0]  __irq_exit_rcu+0x109/0x170
[  281.576870][    C0]  irq_exit_rcu+0x9/0x30
[  281.581647][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  281.587298][    C0]  </IRQ>
[  281.590219][    C0]  <TASK>
[  281.593138][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  281.599137][    C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  281.604960][    C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 2a 5e 20 f6 48 89 df e8 e2 b0 20 f6 e8 fd 71 4d f6 fb bf 01 00 00 00 <e8> f2 b3 10 f6 65 8b 05 9b 19 39 08 85 c0 74 06 5b e9 6c ba 96 f5
[  281.624578][    C0] RSP: 0018:ffffc90004067ca0 EFLAGS: 00000206
[  281.630656][    C0] RAX: 00000000055402c9 RBX: ffff88802e4c2e40 RCX: ffffffff81c6f78f
[  281.638628][    C0] RDX: 0000000000000000 RSI: ffffffff8dacc5d0 RDI: 0000000000000001
[  281.646595][    C0] RBP: ffff88802e4c3040 R08: 0000000000000001 R09: 0000000000000001
[  281.654580][    C0] R10: ffffffff9088e9d7 R11: ffff888036160b30 R12: 0000000000000000
[  281.662549][    C0] R13: 0000000000000011 R14: 0000000000000200 R15: ffff88802e4c2e40
[  281.670529][    C0]  ? trace_irq_enable.constprop.0+0x2f/0x110
[  281.676536][    C0]  get_signal+0x1e6a/0x26d0
[  281.681278][    C0]  ? __pfx_get_signal+0x10/0x10
[  281.686177][    C0]  arch_do_signal_or_restart+0x8f/0x7e0
[  281.692095][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  281.698271][    C0]  ? __pfx_restore_altstack+0x10/0x10
[  281.703669][    C0]  ? restore_signal_shadow_stack+0x63/0x460
[  281.709589][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.715237][    C0]  exit_to_user_mode_loop+0x8c/0x540
[  281.720540][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.726181][    C0]  do_syscall_64+0x4ee/0xf80
[  281.730794][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.736684][    C0] RIP: 0033:0x7f12e058f749
[  281.741095][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.760712][    C0] RSP: 002b:00007f12e13dc0e8 EFLAGS: 00000246
[  281.766916][    C0] RAX: 0000000000000000 RBX: 00007f12e07e5fa8 RCX: 00007f12e058f749
[  281.774891][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12e07e5fac
[  281.782856][    C0] RBP: 00007f12e07e5fa0 R08: 00007f12e13dd000 R09: 0000000000000000
[  281.790822][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.798785][    C0] R13: 00007f12e07e6038 R14: 00007ffc1bfaf420 R15: 00007ffc1bfaf508
[  281.806772][    C0]  </TASK>
[  281.810305][    C0] Kernel Offset: disabled
[  281.814717][    C0] Rebooting in 86400 seconds..