last executing test programs:

41.823489082s ago: executing program 2 (id=12):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e3850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0)
getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001011000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)

40.131446946s ago: executing program 4 (id=5):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, &(0x7f00000001c0))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="08b5b899", 0x4}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0)
close(r2)

39.860199684s ago: executing program 4 (id=18):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = gettid()
sched_setscheduler(r4, 0x0, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10)
r10 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@broadcast, 0x0, 0x0, 0xff}}, 0x28}}, 0x0)
getpeername$packet(r11, 0x0, &(0x7f0000000100))

38.680957572s ago: executing program 2 (id=19):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0xc044)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff66, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

38.340306708s ago: executing program 2 (id=21):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @win={{0x0, 0x9, 0xfffffffd}, 0x2, 0x8, &(0x7f0000000100)={{0x1095c187, 0xc73e, 0xdeb, 0x100}, &(0x7f00000000c0)={{0x0, 0x5fbd, 0x7}, &(0x7f0000000080)={{0x6, 0x5, 0x2, 0xfffffffe}}}}, 0x10001, &(0x7f0000000140)="7fabd02894f8c1c21b41894cea38319617de258b53163350d33d289aa10f309ee0715ed3fd5ec6e27d6525d1b625304a67131fa8dade1cff8c5b6f7d8c50ccc403e574fa8b838a3e244222f412a55c78026cb7e0767db1300728431198f2a1ca1dd2377c4ef3807849582ce0309810", 0x6}})
fcntl$notify(r0, 0x402, 0x29)
prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
chdir(0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
r4 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='xen_mc_flush\x00', r3}, 0x46)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x1, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0)
recvmsg(r5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000280), 0x45}, 0x0)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x41013, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000003c0), 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r10=>0x0, @loopback, @private}, &(0x7f0000000280)=0xe0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r10, r9, 0x1a, 0x2000, 0x0, @prog_fd=r9}, 0x20)

38.318794124s ago: executing program 4 (id=22):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040b40461de63b800000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x2)
getpid()
syz_open_dev$admmidi(&(0x7f0000000080), 0x5, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000740)=""/146, 0x92}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000000c0)}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/214, 0xd6}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/110, 0x6e}], 0x8, &(0x7f00000004c0)=""/5, 0x5}, 0x3}], 0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b752afb7eac2261e639998a26df3a90a8d67066818aaf601b66be9b89851a5eb044656f89e54aeb76496d9f81357944f9ac7e81b3defefe9c2b387a4b46e3c31a5c089e425e832af7b4be34d75f03ac0c44d4e9a5fa5e7dec09a74a480fb834eec7dd2d4ebd971955626df9af2bd0aeb5504f0b4ae8c104520ff7d8953"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000050)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8000af905000100011302000000d9702fcbe1f5f90034236f538b4f6df0ac1192514fe223364ef04a5071d2787b5d34bdabcaea06981787834772912835507571560092fa"], 0xf)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000a40)='e', 0x1}], 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)

35.520813542s ago: executing program 2 (id=27):
creat(0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
rename(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
creat(0x0, 0x0)
mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r1, 0x2, 0x2, 0x0, @link_id}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab59fc179fd1f80600000000000000c6a4b4e00d9683dda1af1ea89df2bb0000000300000000000000000000fdec00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0)
ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f00000000c0)=0x1)
close_range(r3, 0xffffffffffffffff, 0x0)

35.305761123s ago: executing program 2 (id=30):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff4b)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x3, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r4})
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x103, 0x4)
bind$llc(r7, &(0x7f0000000340)={0x1a, 0x308, 0x1, 0x0, 0x0, 0x4, @local}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffe})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x88f, 0x2}, {}, {}, @raw32}], 0x1c)

34.400563925s ago: executing program 4 (id=32):
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000133000/0x1000)=nil, 0x1000, 0x15)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa877e10702750909711000000010902120001000000000904"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r3])
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
getdents(r4, &(0x7f0000000040)=""/104, 0x68)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x20)
ioctl$FS_IOC_SETFLAGS(r9, 0xc0606610, &(0x7f0000000040)=0x60)

33.868605351s ago: executing program 2 (id=33):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (fail_nth: 4)

10.895545725s ago: executing program 1 (id=73):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xf0})
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000080)=0xd0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xcbf, 0x33}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x56}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="c3bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="43e837a85b23"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, 0x84}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)
r7 = open(0x0, 0x0, 0x0)
fcntl$setsig(r7, 0xa, 0x21)
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r8, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc06}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='io_uring_link\x00', r9}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

10.129586519s ago: executing program 1 (id=74):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc9)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x840)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x76dc)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r7 = fanotify_init(0x4, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r7, 0x101, 0x20, r8, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

9.1779631s ago: executing program 1 (id=76):
socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
geteuid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setreuid(0x0, 0xee00)
setreuid(0xee00, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {}, 0x5})
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x4c, 0x97, 0xa6, 0x20, 0xa97a, 0x5131, 0xc000, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4, 0x50}}]}}]}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)

8.417941005s ago: executing program 0 (id=77):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000800000000000000000000730112000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90)

7.848404954s ago: executing program 0 (id=79):
add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, 0x0, 0x1, 0x5}, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}})

6.744554686s ago: executing program 0 (id=80):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
capset(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x111042, 0x100)
lseek(r3, 0x7, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x0)
fcntl$setsig(0xffffffffffffffff, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000002c0)={0x0, 0x1151, 0x4, '\x00', &(0x7f0000000280)=0x4})
openat(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x20)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000180))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="2c726f6f746d6f64653d3030303030303030c34db07b30303030302c757300010000643d000000000000", @ANYRESDEC=0x0, @ANYBLOB="79468ca42d325e9221ad619fd7891b9806836aa5a72f8a3289032bd542ed4da058829de8920ce6708cc00360638a89bcffe1a407cbd3a8e0f40e368208f931a81647bf73296fc643b383209efefa74220bd2", @ANYRESDEC=r2, @ANYRES8=r5, @ANYRES8=r1, @ANYBLOB="fbe9aad9c7cfc1ef54859944e9a5a0a1516ae9e23dd6c93f8919c20f73274dcd8c0590d725dc712fca63182a6dd3fe1c6ccef04c23f975b00b43992361edff82a2a46076276ed4e7a8067d25f3f8386f900db1dac55ed643d5fe7747ea4617e6ec6b23539e6bbf", @ANYRES16=0x0])
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)
umount2(&(0x7f0000001540)='./file0\x00', 0x2)
dup3(r4, r5, 0x0)

6.312282013s ago: executing program 0 (id=82):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x64}}, 0x20004800)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x19c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xd0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffbff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}]}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff1420}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x58}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3528}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x93d8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x687}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4080)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'wg2\x00'})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4)

5.553546439s ago: executing program 3 (id=83):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10)
sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0)
brk(0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000140)=""/109, 0x6d, <r2=>0x0, &(0x7f00000001c0)=""/236, 0xec}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
removexattr(0x0, 0x0)
r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x6256, 0x0, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000200000aa00000000000000000800120000000000000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x43006cbca46ee8a1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES8=r3, @ANYRES8=r3, @ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x90)

5.406959073s ago: executing program 3 (id=84):
r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380))
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x6, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r8, r9, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0})
io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000014c0)={{r2}, "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"})
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0)

4.199310743s ago: executing program 3 (id=85):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0xb})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = io_uring_setup(0x5ff1, &(0x7f0000000380)={0x0, 0xe981, 0x1, 0x3, 0x120})
io_uring_enter(r4, 0x2a96, 0x91ec, 0x18, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, <r6=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000020b4321f00000000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twr'], 0xa)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

4.047773277s ago: executing program 1 (id=86):
r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380))
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x6, 0x9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000014c0)={{r2}, "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"})
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0)

3.194936928s ago: executing program 3 (id=87):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a42b72"], 0x0)
memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\xdd\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`jiu\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}}}}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = socket(0x15, 0x5, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f977623dc2375d5e8c4582dc55f87568e1bc1dea669a6453c3a5dc344609c5a324509ee5cda874f3362bcd5106c2a593c0ef506fd41afeb0c2c713abc920728f1deef6e0c69a4a76174f15f6a"], 0x0, 0x29}, 0x20)
getsockopt(r4, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))
ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x2710, 0x0, &(0x7f0000644000/0x3000)=nil})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800110700000000000000001c1400343af42d01000000000500130000000000e25df06bbd2c2442967df541a29494c0dc8deef75c66c0519b186642c3f532265d2e8f2d491a51c54057d9f513b49c2029ec75a2f66a1e2cf03003b3891775caa2ade6831e2d24e091d7ceec4353e5ef0da7934b529b075c07efd45c89d7314ab48476cf5f86702cf683cf14722c284519feaef5d6bab7a6448f6007d751fb9a26113c859146aaf2b5652fa80e06d2"], 0x24}}, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140), 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
open(&(0x7f0000000480)='./file0\x00', 0x10197f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x4, 0x8, 0x101, 0x0, 0x1}, 0x48)

2.589509534s ago: executing program 1 (id=88):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x66, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty, 0x7}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@remote}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffc}]}, @noop, @noop, @end, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket(0x1e, 0x805, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r3, &(0x7f0000000000)=@id, 0x10)
close(r3)

2.349214797s ago: executing program 1 (id=89):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
dup(0xffffffffffffffff)
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = io_uring_setup(0x30d3, &(0x7f00000000c0))
r4 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xd, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x890f3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1d, &(0x7f0000000080)=""/29, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB='#'], &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r2, 0x64d6c000)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "8826a169"}]}}, 0x0}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)

826.546837ms ago: executing program 0 (id=90):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getmulticast={0x14, 0x3a, 0x320, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x2404c045)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0)

568.290758ms ago: executing program 0 (id=91):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3, &(0x7f0000000740)='|2\n'}}}}], 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b})
socket(0x1e, 0x1, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="10000000000000002900000043000000", 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
mlock(&(0x7f0000fef000/0x2000)=nil, 0x2000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x1001)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1})

293.558689ms ago: executing program 3 (id=92):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18)
sendmmsg$unix(r0, &(0x7f000000a5c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f000000a540)="b4", 0x1}], 0x1}, 0x500}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

0s ago: executing program 3 (id=93):
read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xff, 0x0, r2, 0x8001, '\x00', r4, r5, 0x0, 0x0, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {{0x5, 0x0, 0xb}, {0x15}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
lseek(r6, 0x3, 0x0)
getdents64(r6, 0xffffffffffffffff, 0x43)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
pivot_root(&(0x7f0000000500)='./file0\x00', 0x0)
getdents64(r6, &(0x7f00000002c0)=""/170, 0xaa)
clock_gettime(0x3, &(0x7f0000000080))
clock_settime(0x0, &(0x7f0000000000)={0x77359400})
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x9a, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0x4}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts.
[   56.888652][ T5201] cgroup: Unknown subsys name 'net'
[   57.024703][ T5201] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.435400][ T5201] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.902600][ T5214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.911657][ T5214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.919728][ T5214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.928152][ T5214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.936985][ T5214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   61.944388][ T5214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.945436][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.960590][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.971048][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.981248][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.989020][ T5219] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   61.996484][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.039016][ T5214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.047616][ T5214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.057690][ T5214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.068207][ T5214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.076870][ T5214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   62.084579][ T5214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.134225][ T5214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.142745][ T5214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.151243][ T5214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.167840][ T5214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.175642][ T5214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.183582][ T5214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.216167][ T5214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   62.225557][ T5214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   62.234158][ T5214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   62.246215][ T5214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   62.266962][ T5214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   62.274600][ T5214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   62.325775][ T5211] chnl_net:caif_netlink_parms(): no params data found
[   62.500635][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.508307][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.515751][ T5211] bridge_slave_0: entered allmulticast mode
[   62.524634][ T5211] bridge_slave_0: entered promiscuous mode
[   62.567304][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.576516][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.584153][ T5211] bridge_slave_1: entered allmulticast mode
[   62.591220][ T5211] bridge_slave_1: entered promiscuous mode
[   62.683396][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.696319][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.813070][ T5211] team0: Port device team_slave_0 added
[   62.822707][ T5211] team0: Port device team_slave_1 added
[   62.904510][ T5215] chnl_net:caif_netlink_parms(): no params data found
[   62.930289][ T5225] chnl_net:caif_netlink_parms(): no params data found
[   62.941034][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.948415][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.974548][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.019349][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.026344][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.053136][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.064425][ T5220] chnl_net:caif_netlink_parms(): no params data found
[   63.151729][ T5228] chnl_net:caif_netlink_parms(): no params data found
[   63.163600][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.171370][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.179337][ T5215] bridge_slave_0: entered allmulticast mode
[   63.186007][ T5215] bridge_slave_0: entered promiscuous mode
[   63.225517][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.232949][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.240208][ T5215] bridge_slave_1: entered allmulticast mode
[   63.247323][ T5215] bridge_slave_1: entered promiscuous mode
[   63.303690][ T5211] hsr_slave_0: entered promiscuous mode
[   63.311709][ T5211] hsr_slave_1: entered promiscuous mode
[   63.379289][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.391453][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.410060][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.419011][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.426370][ T5220] bridge_slave_0: entered allmulticast mode
[   63.433459][ T5220] bridge_slave_0: entered promiscuous mode
[   63.489238][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.496461][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.506100][ T5220] bridge_slave_1: entered allmulticast mode
[   63.513551][ T5220] bridge_slave_1: entered promiscuous mode
[   63.520221][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.527664][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.534936][ T5225] bridge_slave_0: entered allmulticast mode
[   63.542104][ T5225] bridge_slave_0: entered promiscuous mode
[   63.556079][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.563329][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.570690][ T5228] bridge_slave_0: entered allmulticast mode
[   63.577695][ T5228] bridge_slave_0: entered promiscuous mode
[   63.585335][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.593372][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.600768][ T5228] bridge_slave_1: entered allmulticast mode
[   63.608173][ T5228] bridge_slave_1: entered promiscuous mode
[   63.631355][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.641522][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.649193][ T5225] bridge_slave_1: entered allmulticast mode
[   63.655917][ T5225] bridge_slave_1: entered promiscuous mode
[   63.694729][ T5215] team0: Port device team_slave_0 added
[   63.703568][ T5215] team0: Port device team_slave_1 added
[   63.772047][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.783583][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.794847][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.811714][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.823544][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.834934][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.845016][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.854019][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.880845][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.926162][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.933198][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.959512][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.977678][ T5219] Bluetooth: hci0: command tx timeout
[   64.012392][ T5228] team0: Port device team_slave_0 added
[   64.030504][ T5220] team0: Port device team_slave_0 added
[   64.041913][ T5225] team0: Port device team_slave_0 added
[   64.050980][ T5225] team0: Port device team_slave_1 added
[   64.057240][ T5219] Bluetooth: hci1: command tx timeout
[   64.074537][ T5228] team0: Port device team_slave_1 added
[   64.082597][ T5220] team0: Port device team_slave_1 added
[   64.136827][ T5219] Bluetooth: hci2: command tx timeout
[   64.179584][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.186586][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.213484][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.217262][ T5219] Bluetooth: hci3: command tx timeout
[   64.226477][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.236564][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.263315][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.275255][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.282742][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.308775][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.321621][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.328725][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.355135][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.380489][ T5219] Bluetooth: hci4: command tx timeout
[   64.393395][ T5215] hsr_slave_0: entered promiscuous mode
[   64.399671][ T5215] hsr_slave_1: entered promiscuous mode
[   64.405688][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.414108][ T5215] Cannot create hsr debugfs directory
[   64.453715][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.460956][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.487293][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.500231][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.507244][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.533227][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.636122][ T5228] hsr_slave_0: entered promiscuous mode
[   64.643637][ T5228] hsr_slave_1: entered promiscuous mode
[   64.652674][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.661054][ T5228] Cannot create hsr debugfs directory
[   64.681501][ T5225] hsr_slave_0: entered promiscuous mode
[   64.688246][ T5225] hsr_slave_1: entered promiscuous mode
[   64.694410][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.702885][ T5225] Cannot create hsr debugfs directory
[   64.785950][ T5220] hsr_slave_0: entered promiscuous mode
[   64.793030][ T5220] hsr_slave_1: entered promiscuous mode
[   64.799664][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.807886][ T5220] Cannot create hsr debugfs directory
[   64.856204][ T5211] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.910757][ T5211] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.929096][ T5211] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.965588][ T5211] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.193091][ T5215] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.202624][ T5215] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.214081][ T5215] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.249837][ T5215] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.293963][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.305655][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.330100][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.342651][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.430461][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.453899][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.483700][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.532600][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.560334][ T5220] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.569973][ T5220] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.598696][ T5220] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.611398][ T5220] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.673037][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.701891][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.785501][ T5215] 8021q: adding VLAN 0 to HW filter on device team0
[   65.795879][ T5211] 8021q: adding VLAN 0 to HW filter on device team0
[   65.843023][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.850299][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.862086][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.869298][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.912563][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.925007][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.932191][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.942674][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.949826][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.035544][ T5225] 8021q: adding VLAN 0 to HW filter on device team0
[   66.060367][ T5219] Bluetooth: hci0: command tx timeout
[   66.066237][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.133929][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.141680][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.149544][ T5219] Bluetooth: hci1: command tx timeout
[   66.160051][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.167211][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.219839][ T5219] Bluetooth: hci2: command tx timeout
[   66.233199][ T5228] 8021q: adding VLAN 0 to HW filter on device team0
[   66.302655][ T5219] Bluetooth: hci3: command tx timeout
[   66.324018][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.351872][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.359082][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.426389][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.433606][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.457124][ T5219] Bluetooth: hci4: command tx timeout
[   66.486519][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.557348][ T5220] 8021q: adding VLAN 0 to HW filter on device team0
[   66.596476][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.611204][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.618393][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.635425][ T5215] veth0_vlan: entered promiscuous mode
[   66.681705][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.688893][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.703397][ T5215] veth1_vlan: entered promiscuous mode
[   66.835697][ T5215] veth0_macvtap: entered promiscuous mode
[   66.859053][ T5215] veth1_macvtap: entered promiscuous mode
[   66.892673][ T5211] veth0_vlan: entered promiscuous mode
[   66.950300][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.996166][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.015699][ T5211] veth1_vlan: entered promiscuous mode
[   67.027866][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.051316][ T5215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.068368][ T5215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.078093][ T5215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.087993][ T5215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.235148][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.254705][ T5225] veth0_vlan: entered promiscuous mode
[   67.273036][ T5211] veth0_macvtap: entered promiscuous mode
[   67.289028][ T5211] veth1_macvtap: entered promiscuous mode
[   67.305902][ T5225] veth1_vlan: entered promiscuous mode
[   67.365522][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.440363][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.454669][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.472039][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.476760][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.495080][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.518155][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.529109][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.542071][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.552321][ T5228] veth0_vlan: entered promiscuous mode
[   67.591676][ T5211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.605063][ T5211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.614509][ T5211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.623868][ T5211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.652062][ T5225] veth0_macvtap: entered promiscuous mode
[   67.669551][ T5228] veth1_vlan: entered promiscuous mode
[   67.685161][ T5225] veth1_macvtap: entered promiscuous mode
[   67.685550][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.706286][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.796012][ T5228] veth0_macvtap: entered promiscuous mode
[   67.814343][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.828652][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.839239][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.850489][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.872485][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.896173][ T5228] veth1_macvtap: entered promiscuous mode
[   67.919030][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.931548][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.942882][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.954432][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.967663][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.996567][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.036259][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.052641][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.065481][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.075424][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.092479][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.105473][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.133621][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.138389][ T5219] Bluetooth: hci0: command tx timeout
[   68.148967][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.149031][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.168703][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.218853][ T5219] Bluetooth: hci1: command tx timeout
[   68.231341][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.242407][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.252837][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.263750][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.275752][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.286509][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.297716][ T5219] Bluetooth: hci2: command tx timeout
[   68.304791][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.336251][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.345376][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.355725][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.364715][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.379853][ T5219] Bluetooth: hci3: command tx timeout
[   68.396836][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.407718][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.449486][ T5220] veth0_vlan: entered promiscuous mode
[   68.499803][ T5220] veth1_vlan: entered promiscuous mode
[   68.536985][ T5219] Bluetooth: hci4: command tx timeout
[   68.552233][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.552816][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.569558][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.584167][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.634539][ T5220] veth0_macvtap: entered promiscuous mode
[   68.664476][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.683302][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.770239][ T5220] veth1_macvtap: entered promiscuous mode
[   68.824735][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.868390][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.933347][ T5299] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.146999][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.345857][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.505644][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.541134][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.562681][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.574012][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.589255][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.672883][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.699241][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.718387][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   69.725268][ T5308] x_tables: duplicate underflow at hook 1
[   69.754304][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.778103][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.791307][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.836710][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.863981][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.882599][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.894364][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.906848][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.939479][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.982920][ T5220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.993960][ T5220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.006535][ T5220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.017451][ T5220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.136798][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.145568][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.231118][ T5318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.267327][ T5219] Bluetooth: hci0: command tx timeout
[   70.297659][ T5219] Bluetooth: hci1: command tx timeout
[   70.385556][ T5219] Bluetooth: hci2: command tx timeout
[   70.456747][ T5219] Bluetooth: hci3: command tx timeout
[   70.618731][ T5219] Bluetooth: hci4: command tx timeout
[   70.917005][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.992553][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.024745][ T5321] xt_ecn: cannot match TCP bits for non-tcp packets
[   71.359570][ T5328] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT	ð#>÷‰r¹[›5´Û­
[   71.742495][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[   71.750503][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[   71.754481][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.823164][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.087359][ T5221] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.106797][ T5258] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.313924][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.336775][ T5221] usb 4-1: Using ep0 maxpacket: 32
[   72.353482][ T5221] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   72.365050][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.375722][ T5221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.394968][ T5344] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.17'.
[   72.395772][ T5258] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63
[   72.423009][ T5344] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   72.426789][ T5221] usb 4-1: Product: syz
[   72.434792][ T5221] usb 4-1: Manufacturer: syz
[   72.449675][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.458986][ T5221] usb 4-1: SerialNumber: syz
[   72.465979][ T5344] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.17'.
[   72.490060][ T5221] usb 4-1: config 0 descriptor??
[   72.515815][ T5258] usb 2-1: config 0 descriptor??
[   72.530787][ T5221] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   73.122722][ T5219] Bluetooth: Frame is too long (len 10, expected len 9)
[   73.133539][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   73.693336][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   73.907665][ T5258] usbhid 2-1:0.0: can't add hid device: -71
[   73.913838][ T5258] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   73.940412][ T5258] usb 2-1: USB disconnect, device number 2
[   74.453641][ T5332] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.536003][ T5325] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   75.017340][ T5221] gspca_ov534_9: reg_r err -71
[   75.073466][ T5369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.078724][ T5325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.125271][ T5325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.135833][ T5325] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63
[   75.147978][ T5325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.155773][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.168232][ T5325] usb 5-1: config 0 descriptor??
[   75.376721][ T5221] gspca_ov534_9: Unknown sensor 0000
[   75.376832][ T5221] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[   75.417219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.431371][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.583326][ T5221] usb 4-1: USB disconnect, device number 2
[   75.740685][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.942535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   76.527593][ T5219] Bluetooth: Frame is too long (len 10, expected len 9)
[   76.590394][ T5219] Bluetooth: hci0: unexpected event for opcode 0x2026
[   76.602848][ T5380] usb usb8: usbfs: process 5380 (syz.0.26) did not claim interface 0 before use
[   76.625536][ T5325] usbhid 5-1:0.0: can't add hid device: -71
[   76.661282][ T5325] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   76.741773][ T5325] usb 5-1: USB disconnect, device number 2
[   77.047579][ T5388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.28'.
[   78.032231][ T5295] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.359621][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   78.491412][   T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.627413][   T25] usb 5-1: Using ep0 maxpacket: 16
[   78.666482][   T25] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97
[   78.778662][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.799481][   T25] usb 5-1: config 0 descriptor??
[   78.829126][   T25] gspca_main: sq905c-2.14.0 probing 2770:9050
[   79.026357][   T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.117587][ T5295] usb 1-1: Using ep0 maxpacket: 16
[   79.132234][ T5295] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.153641][ T5295] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.199487][ T5295] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   79.240735][ T5295] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.264119][ T5295] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[   79.343529][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.355411][   T25] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[   79.368351][   T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.389504][ T5295] usb 1-1: config 0 descriptor??
[   79.407339][   T25] sq905c 5-1:0.0: Get version command failed
[   79.413418][   T25] sq905c 5-1:0.0: probe with driver sq905c failed with error -110
[   79.636579][   T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.950622][   T63] bridge_slave_1: left allmulticast mode
[   79.965902][   T63] bridge_slave_1: left promiscuous mode
[   80.001620][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.039289][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   80.055964][   T63] bridge_slave_0: left allmulticast mode
[   80.090897][   T63] bridge_slave_0: left promiscuous mode
[   80.107680][ T5295] hid-generic 0003:045E:05DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.0-1/input0
[   80.116243][ T5407] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.36'.
[   80.131651][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.169323][ T5407] netlink: 'syz.3.36': attribute type 1 has an invalid length.
[   80.200836][ T5407] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.36'.
[   80.220516][ T5295] usb 1-1: USB disconnect, device number 2
[   80.498131][ T5214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.508531][ T5214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.518589][ T5214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.682599][ T5214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.698555][ T5214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   81.357130][ T5214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.440266][ T5405] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   82.063844][    T8] cfg80211: failed to load regulatory.db
[   82.087072][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   82.096561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.159663][ T5214] Bluetooth: hci0: unexpected event for opcode 0x2026
[   82.184052][ T5420] usb usb8: usbfs: process 5420 (syz.0.39) did not claim interface 0 before use
[   82.496815][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[   82.576756][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.674627][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.714026][   T63] bond0 (unregistering): Released all slaves
[   82.848449][ T5424] Zero length message leads to an empty skb
[   83.420364][ T5214] Bluetooth: hci4: command tx timeout
[   84.188998][ T5436] netlink: 76 bytes leftover after parsing attributes in process `syz.3.44'.
[   84.203562][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.212262][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.238676][ T5447] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   88.249398][ T5214] Bluetooth: hci4: command tx timeout
[   88.412242][   T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   89.661339][ T5214] Bluetooth: hci0: unexpected event for opcode 0x2026
[   89.664442][ T5463] usb usb8: usbfs: process 5463 (syz.0.50) did not claim interface 0 before use
[   89.939488][   T63] hsr_slave_0: left promiscuous mode
[   90.016217][   T63] hsr_slave_1: left promiscuous mode
[   90.035404][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.081795][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.120846][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.132353][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.179881][   T63] veth1_macvtap: left promiscuous mode
[   90.192960][   T63] veth0_macvtap: left promiscuous mode
[   90.206130][   T63] veth1_vlan: left promiscuous mode
[   90.220678][   T63] veth0_vlan: left promiscuous mode
[   90.297831][ T5214] Bluetooth: hci4: command tx timeout
[   90.445837][ T5219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.456430][ T5219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.466375][ T5219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.479701][ T5219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.504766][ T5219] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.512891][ T5219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.349575][   T63] team0 (unregistering): Port device team_slave_1 removed
[   91.417934][   T63] team0 (unregistering): Port device team_slave_0 removed
[   91.425993][ T5482] hub 9-0:1.0: USB hub found
[   91.488373][ T5482] hub 9-0:1.0: 8 ports detected
[   92.111667][ T5409] chnl_net:caif_netlink_parms(): no params data found
[   92.379256][ T5214] Bluetooth: hci4: command tx timeout
[   92.617933][ T5214] Bluetooth: hci5: command tx timeout
[   93.543093][ T5497] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT	ð#>÷‰r¹[›5´Û­
[   93.938315][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.945459][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.980544][ T5295] usb 5-1: USB disconnect, device number 3
[   94.023347][ T5409] bridge_slave_0: entered allmulticast mode
[   94.072760][ T5409] bridge_slave_0: entered promiscuous mode
[   94.130350][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   94.147640][ T5221] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.165491][ T5513] netlink: 'syz.0.60': attribute type 6 has an invalid length.
[   94.186394][ T5513] netlink: 'syz.0.60': attribute type 5 has an invalid length.
[   94.255524][ T5513] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.264847][ T5513] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.274451][ T5513] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.285149][ T5513] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.381882][ T5513] vxlan0: entered promiscuous mode
[   94.396903][ T5221] usb 4-1: Using ep0 maxpacket: 8
[   94.407058][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.427938][ T5221] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   94.443629][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.452188][ T5221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.480975][ T5409] bridge_slave_1: entered allmulticast mode
[   94.492423][ T5221] usb 4-1: Product: syz
[   94.498308][ T5409] bridge_slave_1: entered promiscuous mode
[   94.506364][ T5221] usb 4-1: Manufacturer: syz
[   94.511925][ T5221] usb 4-1: SerialNumber: syz
[   94.701617][ T5214] Bluetooth: hci5: command tx timeout
[   94.718923][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.818008][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.925379][ T5221] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   94.973818][ T5528] mmap: syz.0.62 (5528): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   95.060296][ T5533] =======================================================
[   95.060296][ T5533] WARNING: The mand mount option has been deprecated and
[   95.060296][ T5533]          and is ignored by this kernel. Remove the mand
[   95.060296][ T5533]          option from the mount to silence this warning.
[   95.060296][ T5533] =======================================================
[   95.095203][    C0] vkms_vblank_simulate: vblank timer overrun
[   95.104097][ T5533] tmpfs: Unknown parameter 'quotA'
[   95.131468][ T5533] overlayfs: conflicting lowerdir path
[   95.988579][ T5409] team0: Port device team_slave_0 added
[   98.830152][ T5214] Bluetooth: hci5: command tx timeout
[   98.883195][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.980947][ T5260] usb 4-1: USB disconnect, device number 3
[   99.047339][ T5260] usblp0: removed
[   99.049281][ T5409] team0: Port device team_slave_1 added
[   99.784064][ T5563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  100.073967][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.295204][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.525436][ T5580] ptrace attach of "./syz-executor exec"[5215] was attempted by "./syz-executor exec"[5580]
[  100.634102][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.654345][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.705232][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.755330][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.807231][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.851828][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.887019][ T5214] Bluetooth: hci5: command tx timeout
[  100.917215][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.958929][ T5474] chnl_net:caif_netlink_parms(): no params data found
[  101.009512][ T5409] hsr_slave_0: entered promiscuous mode
[  101.015992][ T5409] hsr_slave_1: entered promiscuous mode
[  101.028036][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.037492][ T5409] Cannot create hsr debugfs directory
[  101.187025][ T5295] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.212936][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.221639][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.229220][ T5474] bridge_slave_0: entered allmulticast mode
[  101.256325][ T5474] bridge_slave_0: entered promiscuous mode
[  101.331248][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.416901][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.424274][ T5474] bridge_slave_1: entered allmulticast mode
[  101.437444][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  101.577555][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  101.579871][ T5603] xt_bpf: check failed: parse error
[  101.589539][ T5474] bridge_slave_1: entered promiscuous mode
[  101.624230][ T5295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  101.929274][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.941989][   T35] bridge_slave_1: left allmulticast mode
[  101.955113][   T35] bridge_slave_1: left promiscuous mode
[  101.955760][ T5295] usb 4-1: config 0 descriptor??
[  101.983064][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.006143][   T35] bridge_slave_0: left allmulticast mode
[  102.017864][   T35] bridge_slave_0: left promiscuous mode
[  102.024923][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.305448][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.316170][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.562853][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.594171][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.615562][   T35] bond0 (unregistering): Released all slaves
[  102.763246][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.933103][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.993835][ T5295] ath6kl: Failed to submit usb control message: -71
[  103.004002][ T5295] ath6kl: unable to send the bmi data to the device: -71
[  103.012053][ T5295] ath6kl: Unable to send get target info: -71
[  103.207475][ T5214] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  103.216398][ T5214] Bluetooth: hci1: Injecting HCI hardware error event
[  103.228223][ T5214] Bluetooth: hci1: hardware error 0x00
[  103.808421][ T5295] ath6kl: Failed to init ath6kl core: -71
[  103.838080][ T5295] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  104.245920][ T5295] usb 4-1: USB disconnect, device number 4
[  104.394317][ T5474] team0: Port device team_slave_0 added
[  104.519224][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.018984][ T5474] team0: Port device team_slave_1 added
[  105.286807][    T8] usb 2-1: Using ep0 maxpacket: 32
[  105.511619][    T8] usb 2-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00
[  105.542033][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.563482][    T8] usb 2-1: Product: syz
[  105.568187][    T8] usb 2-1: Manufacturer: syz
[  105.586565][    T8] usb 2-1: SerialNumber: syz
[  105.612616][    T8] usb 2-1: config 0 descriptor??
[  105.630399][    T8] usb-storage 2-1:0.0: USB Mass Storage device detected
[  105.643063][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.654377][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.692883][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.719403][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.737128][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.800926][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.931460][ T5645] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  106.346998][ T5214] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  106.664605][ T5258] usb 2-1: USB disconnect, device number 3
[  106.808348][ T5653] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET)
[  106.828565][   T35] hsr_slave_0: left promiscuous mode
[  106.855297][   T35] hsr_slave_1: left promiscuous mode
[  106.885572][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.905594][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.921232][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.937288][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.993462][   T35] veth1_macvtap: left promiscuous mode
[  106.999121][   T35] veth0_macvtap: left promiscuous mode
[  107.004939][   T35] veth1_vlan: left promiscuous mode
[  107.010405][   T35] veth0_vlan: left promiscuous mode
[  109.712474][   T35] team0 (unregistering): Port device team_slave_1 removed
[  109.757018][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.794056][   T35] team0 (unregistering): Port device team_slave_0 removed
[  109.960201][    T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  109.976789][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  109.990691][    T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  110.008012][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.038037][    T8] usb 4-1: config 0 descriptor??
[  110.345946][ T5693] kAFS: unparsable volume name
[  110.723408][ T5221] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  110.750913][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.837796][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.990221][ T5221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.022117][ T5221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.036203][ T5221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.077128][ T5221] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  111.086400][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.099598][ T5221] usb 2-1: config 0 descriptor??
[  111.181100][    T8] ath6kl: Failed to submit usb control message: -110
[  111.192619][    T8] ath6kl: unable to send the bmi data to the device: -110
[  111.201693][    T8] ath6kl: Unable to send get target info: -110
[  111.227147][    T8] ath6kl: Failed to init ath6kl core: -110
[  111.238620][    T8] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110
[  111.264381][ T5474] hsr_slave_0: entered promiscuous mode
[  111.282695][ T5474] hsr_slave_1: entered promiscuous mode
[  111.290152][ T5474] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.298524][ T5474] Cannot create hsr debugfs directory
[  111.313595][ T5692] xt_TCPMSS: Only works on TCP SYN packets
[  111.331136][ T5260] usb 4-1: USB disconnect, device number 5
[  111.464331][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[  111.517121][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[  112.009067][ T5409] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.030994][ T5409] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.096798][ T5258] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  112.111055][ T5409] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.122485][ T5409] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  112.299619][ T5258] usb 1-1: config 0 interface 0 has no altsetting 0
[  112.310359][ T5258] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  112.321432][ T5258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.337790][ T5258] usb 1-1: config 0 descriptor??
[  217.306605][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  217.313718][    C0] rcu: 	1-...!: (1 GPs behind) idle=6f34/1/0x4000000000000000 softirq=9915/9919 fqs=3
[  217.324248][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=10877, q=276 ncpus=2)
[  217.332106][    C0] Sending NMI from CPU 0 to CPUs 1:
[  217.337350][    C1] NMI backtrace for cpu 1
[  217.337376][    C1] CPU: 1 UID: 0 PID: 5706 Comm: syz.3.93 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0
[  217.337394][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  217.337404][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70
[  217.337442][    C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 b0 5f 70 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00
[  217.337457][    C1] RSP: 0018:ffffc90000a18c88 EFLAGS: 00000046
[  217.337478][    C1] RAX: ffffffff89b46d1e RBX: 17f1005e74000000 RCX: ffff88802b379e00
[  217.337490][    C1] RDX: 0000000000010404 RSI: 0000000004000000 RDI: 0000000000000000
[  217.337501][    C1] RBP: ffff88807b01d4c8 R08: ffffffff89b46a93 R09: fffff52000143180
[  217.337513][    C1] R10: dffffc0000000000 R11: fffff52000143180 R12: dffffc0000000000
[  217.337525][    C1] R13: ffff88807b01d408 R14: ffff88807b01d400 R15: ffff888023cec340
[  217.337538][    C1] FS:  00007f05d1eb36c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  217.337552][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.337563][    C1] CR2: 0000000020002c40 CR3: 000000005b53a000 CR4: 00000000003526f0
[  217.337577][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  217.337586][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  217.337596][    C1] Call Trace:
[  217.337605][    C1]  <NMI>
[  217.337614][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  217.337637][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  217.337661][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  217.337677][    C1]  ? nmi_handle+0x2a/0x5a0
[  217.337701][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  217.337720][    C1]  ? nmi_handle+0x14f/0x5a0
[  217.337735][    C1]  ? nmi_handle+0x2a/0x5a0
[  217.337751][    C1]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  217.337772][    C1]  ? default_do_nmi+0x63/0x160
[  217.337792][    C1]  ? exc_nmi+0x123/0x1f0
[  217.337809][    C1]  ? end_repeat_nmi+0xf/0x53
[  217.337829][    C1]  ? advance_sched+0x583/0xca0
[  217.337845][    C1]  ? advance_sched+0x80e/0xca0
[  217.337862][    C1]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  217.337884][    C1]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  217.337905][    C1]  ? __sanitizer_cov_trace_pc+0x18/0x70
[  217.337926][    C1]  </NMI>
[  217.337932][    C1]  <IRQ>
[  217.337937][    C1]  advance_sched+0x80e/0xca0
[  217.337962][    C1]  ? __pfx_advance_sched+0x10/0x10
[  217.337978][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  217.337996][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  217.338027][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  217.338044][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  217.338069][    C1]  hrtimer_interrupt+0x396/0x990
[  217.338099][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  217.338125][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  217.338148][    C1]  </IRQ>
[  217.338153][    C1]  <TASK>
[  217.338159][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  217.338177][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[  217.338199][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ce 16 40 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 83 6e ab f5 65 8b 05 f4 55 4c 74 85 c0 74 43 48 c7 04 24 0e 36
[  217.338217][    C1] RSP: 0018:ffffc90003d5e5e0 EFLAGS: 00000206
[  217.338230][    C1] RAX: a8d3fc1bcadd7100 RBX: 1ffff920007abcc0 RCX: ffffffff81702e4a
[  217.338242][    C1] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001
[  217.338253][    C1] RBP: ffffc90003d5e670 R08: ffffffff934ef947 R09: 1ffffffff269df28
[  217.338265][    C1] R10: dffffc0000000000 R11: fffffbfff269df29 R12: dffffc0000000000
[  217.338277][    C1] R13: 1ffff920007abcbc R14: ffffc90003d5e600 R15: 0000000000000246
[  217.338293][    C1]  ? mark_lock+0x9a/0x350
[  217.338319][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.338339][    C1]  ? stack_trace_save+0x118/0x1d0
[  217.338363][    C1]  stack_depot_save_flags+0x6e4/0x830
[  217.338386][    C1]  save_stack+0x109/0x1f0
[  217.338407][    C1]  ? __pfx_save_stack+0x10/0x10
[  217.338425][    C1]  ? post_alloc_hook+0x1f3/0x230
[  217.338439][    C1]  ? get_page_from_freelist+0x2e4c/0x2f10
[  217.338457][    C1]  ? __alloc_pages_noprof+0x256/0x6c0
[  217.338474][    C1]  ? ___kmalloc_large_node+0x8b/0x1d0
[  217.338494][    C1]  ? __kmalloc_large_noprof+0x1f/0x80
[  217.338514][    C1]  ? update_or_create_fnhe+0x1ca/0x16e0
[  217.338536][    C1]  ? __ip_rt_update_pmtu+0x790/0xa50
[  217.338554][    C1]  ? ipv4_sk_update_pmtu+0x1002/0x1d20
[  217.338573][    C1]  ? raw_icmp_error+0x638/0xdc0
[  217.338591][    C1]  ? icmp_socket_deliver+0xee/0x330
[  217.338606][    C1]  ? icmp_unreach+0x5a0/0x9a0
[  217.338621][    C1]  ? icmp_rcv+0xba0/0x1100
[  217.338635][    C1]  ? ip_protocol_deliver_rcu+0x2e6/0x440
[  217.338651][    C1]  ? ip_local_deliver_finish+0x341/0x5f0
[  217.338668][    C1]  ? NF_HOOK+0x3a4/0x450
[  217.338683][    C1]  ? NF_HOOK+0x3a4/0x450
[  217.338704][    C1]  __set_page_owner+0x92/0x800
[  217.338725][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  217.338749][    C1]  ? __pfx_lock_release+0x10/0x10
[  217.338771][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  217.338789][    C1]  ? do_raw_spin_trylock+0xc8/0x1f0
[  217.338812][    C1]  post_alloc_hook+0x1f3/0x230
[  217.338830][    C1]  get_page_from_freelist+0x2e4c/0x2f10
[  217.338852][    C1]  ? lockdep_unlock+0x16a/0x300
[  217.338879][    C1]  ? mark_lock+0x2a4/0x350
[  217.338908][    C1]  ? prepare_alloc_pages+0x369/0x5d0
[  217.338930][    C1]  __alloc_pages_noprof+0x256/0x6c0
[  217.338951][    C1]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  217.338975][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  217.338992][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  217.339016][    C1]  ___kmalloc_large_node+0x8b/0x1d0
[  217.339040][    C1]  __kmalloc_large_noprof+0x1f/0x80
[  217.339062][    C1]  update_or_create_fnhe+0x1ca/0x16e0
[  217.339090][    C1]  ? __pfx_update_or_create_fnhe+0x10/0x10
[  217.339111][    C1]  ? fib_lookup+0x81/0x450
[  217.339131][    C1]  ? fib_select_path+0x1eb/0x440
[  217.339146][    C1]  ? fib_lookup+0x36c/0x450
[  217.339167][    C1]  __ip_rt_update_pmtu+0x790/0xa50
[  217.339186][    C1]  ? __ip_rt_update_pmtu+0x5d7/0xa50
[  217.339216][    C1]  ? __pfx___ip_rt_update_pmtu+0x10/0x10
[  217.339245][    C1]  ipv4_sk_update_pmtu+0x1002/0x1d20
[  217.339267][    C1]  ? ipv4_sk_update_pmtu+0x16e/0x1d20
[  217.339290][    C1]  ? __pfx_ipv4_sk_update_pmtu+0x10/0x10
[  217.339311][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  217.339339][    C1]  ? raw_local_deliver+0x327/0xf20
[  217.339357][    C1]  ? __pfx_lock_release+0x10/0x10
[  217.339382][    C1]  raw_icmp_error+0x638/0xdc0
[  217.339402][    C1]  ? raw_icmp_error+0x187/0xdc0
[  217.339424][    C1]  icmp_socket_deliver+0xee/0x330
[  217.339443][    C1]  icmp_unreach+0x5a0/0x9a0
[  217.339463][    C1]  icmp_rcv+0xba0/0x1100
[  217.339550][    C1]  ? __pfx_icmp_rcv+0x10/0x10
[  217.339566][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  217.339583][    C1]  ip_protocol_deliver_rcu+0x2e6/0x440
[  217.339603][    C1]  ? ip_local_deliver_finish+0x230/0x5f0
[  217.339621][    C1]  ip_local_deliver_finish+0x341/0x5f0
[  217.339642][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  217.339660][    C1]  NF_HOOK+0x3a4/0x450
[  217.339679][    C1]  ? NF_HOOK+0x9a/0x450
[  217.339694][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  217.339712][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  217.339733][    C1]  ? ip_rcv_finish+0x406/0x560
[  217.339752][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  217.339768][    C1]  NF_HOOK+0x3a4/0x450
[  217.339787][    C1]  ? NF_HOOK+0x9a/0x450
[  217.339802][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  217.339817][    C1]  ? ip_rcv_core+0x801/0xd10
[  217.339835][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  217.339856][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  217.339873][    C1]  __netif_receive_skb+0x2bf/0x650
[  217.339897][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  217.339917][    C1]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  217.339938][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  217.339958][    C1]  ? __kasan_slab_alloc+0x66/0x80
[  217.339977][    C1]  ? read_tsc+0x9/0x20
[  217.339996][    C1]  ? timekeeping_get_ns+0x2c0/0x420
[  217.340021][    C1]  ? netif_receive_skb+0x131/0x890
[  217.340041][    C1]  ? netif_receive_skb+0x131/0x890
[  217.340062][    C1]  netif_receive_skb+0x1e8/0x890
[  217.340083][    C1]  ? tun_rx_batched+0x160/0x8f0
[  217.340106][    C1]  ? __pfx_netif_receive_skb+0x10/0x10
[  217.340140][    C1]  ? tun_rx_batched+0x160/0x8f0
[  217.340158][    C1]  tun_rx_batched+0x1b7/0x8f0
[  217.340178][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  217.340202][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  217.340223][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  217.340252][    C1]  tun_get_user+0x2f84/0x4720
[  217.340271][    C1]  ? tun_get_user+0x2a78/0x4720
[  217.340296][    C1]  ? __lock_acquire+0x137a/0x2040
[  217.340322][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  217.340351][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  217.340370][    C1]  ? tun_get+0x1e/0x2f0
[  217.340388][    C1]  ? __pfx_lock_release+0x10/0x10
[  217.340419][    C1]  ? tun_get+0x1e/0x2f0
[  217.340436][    C1]  ? tun_get+0x27d/0x2f0
[  217.340455][    C1]  tun_chr_write_iter+0x113/0x1f0
[  217.340476][    C1]  vfs_write+0xa72/0xc90
[  217.340494][    C1]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  217.340513][    C1]  ? __pfx_vfs_write+0x10/0x10
[  217.340527][    C1]  ? do_futex+0x392/0x560
[  217.340559][    C1]  ksys_write+0x1a0/0x2c0
[  217.340578][    C1]  ? __pfx_ksys_write+0x10/0x10
[  217.340594][    C1]  ? do_syscall_64+0x100/0x230
[  217.340611][    C1]  ? do_syscall_64+0xb6/0x230
[  217.340628][    C1]  do_syscall_64+0xf3/0x230
[  217.340644][    C1]  ? clear_bhb_loop+0x35/0x90
[  217.340664][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.340681][    C1] RIP: 0033:0x7f05d11764df
[  217.340714][    C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48
[  217.340728][    C1] RSP: 002b:00007f05d1eb3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  217.340747][    C1] RAX: ffffffffffffffda RBX: 00007f05d1305f80 RCX: 00007f05d11764df
[  217.340761][    C1] RDX: 000000000000009a RSI: 0000000020000440 RDI: 00000000000000c8
[  217.340772][    C1] RBP: 00007f05d11e58ee R08: 0000000000000000 R09: 0000000000000000
[  217.340782][    C1] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000000
[  217.340792][    C1] R13: 0000000000000000 R14: 00007f05d1305f80 R15: 00007ffe0d1730d8
[  217.340813][    C1]  </TASK>
[  217.341339][    C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g10877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  218.365312][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  218.375308][    C0] rcu: RCU grace-period kthread stack dump:
[  218.381211][    C0] task:rcu_preempt     state:R  running task     stack:25816 pid:17    tgid:17    ppid:2      flags:0x00004000
[  218.393063][    C0] Call Trace:
[  218.396372][    C0]  <TASK>
[  218.399327][    C0]  __schedule+0x17ae/0x4a10
[  218.403882][    C0]  ? __pfx___schedule+0x10/0x10
[  218.408759][    C0]  ? __pfx_lock_release+0x10/0x10
[  218.413799][    C0]  ? __asan_memset+0x23/0x50
[  218.418402][    C0]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  218.424220][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.430594][    C0]  ? schedule+0x90/0x320
[  218.434848][    C0]  schedule+0x14b/0x320
[  218.439028][    C0]  schedule_timeout+0x1be/0x310
[  218.443893][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  218.449280][    C0]  ? __pfx_process_timeout+0x10/0x10
[  218.454840][    C0]  ? prepare_to_swait_event+0x32e/0x350
[  218.460403][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  218.465264][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  218.470485][    C0]  ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10
[  218.476647][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  218.481942][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  218.487854][    C0]  ? finish_swait+0xd4/0x1e0
[  218.492459][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  218.497063][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  218.502264][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  218.508170][    C0]  ? __kthread_parkme+0x169/0x1d0
[  218.513209][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  218.518418][    C0]  kthread+0x2f0/0x390
[  218.522501][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  218.527707][    C0]  ? __pfx_kthread+0x10/0x10
[  218.532312][    C0]  ret_from_fork+0x4b/0x80
[  218.537458][    C0]  ? __pfx_kthread+0x10/0x10
[  218.542085][    C0]  ret_from_fork_asm+0x1a/0x30
[  218.546906][    C0]  </TASK>
[  218.549933][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  218.556359][    C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0
[  218.567074][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  218.577233][    C0] Workqueue: events_unbound toggle_allocation_gate
[  218.583782][    C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0
[  218.590584][    C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 79 14 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 24 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 08 10
[  218.612755][    C0] RSP: 0018:ffffc90000bc7700 EFLAGS: 00000293
[  218.619022][    C0] RAX: ffffffff81876738 RBX: 1ffff110172688f1 RCX: ffff888015fc8000
[  218.627260][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  218.635406][    C0] RBP: ffffc90000bc78e0 R08: ffffffff81876707 R09: 1ffffffff269df00
[  218.643387][    C0] R10: dffffc0000000000 R11: fffffbfff269df01 R12: dffffc0000000000
[  218.651367][    C0] R13: ffff8880b9344788 R14: ffff8880b923fb40 R15: 0000000000000001
[  218.659431][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  218.668374][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.674961][    C0] CR2: 000055557e618808 CR3: 000000000e534000 CR4: 00000000003526f0
[  218.682940][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  218.690912][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  218.699735][    C0] Call Trace:
[  218.703049][    C0]  <IRQ>
[  218.705908][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[  218.712354][    C0]  ? print_other_cpu_stall+0x1470/0x15a0
[  218.718042][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  218.723892][    C0]  ? __pfx_lock_release+0x10/0x10
[  218.728943][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[  218.735283][    C0]  ? rcu_sched_clock_irq+0xa2c/0x10d0
[  218.740691][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  218.746336][    C0]  ? hrtimer_run_queues+0x16c/0x460
[  218.751649][    C0]  ? acct_account_cputime+0x207/0x210
[  218.757034][    C0]  ? update_process_times+0x1ce/0x230
[  218.762423][    C0]  ? tick_nohz_handler+0x37c/0x500
[  218.767716][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  218.773183][    C0]  ? __hrtimer_run_queues+0x551/0xd50
[  218.778567][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  218.784576][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  218.790298][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  218.796383][    C0]  ? hrtimer_interrupt+0x396/0x990
[  218.801519][    C0]  ? __sysvec_apic_timer_interrupt+0x110/0x3f0
[  218.807690][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  218.813507][    C0]  </IRQ>
[  218.816436][    C0]  <TASK>
[  218.819367][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.825533][    C0]  ? smp_call_function_many_cond+0x1847/0x29d0
[  218.831691][    C0]  ? smp_call_function_many_cond+0x1878/0x29d0
[  218.837852][    C0]  ? smp_call_function_many_cond+0x1860/0x29d0
[  218.844385][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x790
[  218.850489][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  218.855546][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x790
[  218.861676][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  218.868032][    C0]  ? __pfx___might_resched+0x10/0x10
[  218.873357][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  218.878965][    C0]  ? __pfx___might_resched+0x10/0x10
[  218.884393][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  218.889555][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  218.894782][    C0]  text_poke_bp_batch+0x352/0xb30
[  218.899917][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  218.905475][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  218.910604][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  218.916952][    C0]  text_poke_finish+0x30/0x50
[  218.921732][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  218.927751][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  218.933663][    C0]  static_key_enable+0x1a/0x20
[  218.938439][    C0]  toggle_allocation_gate+0xb5/0x250
[  218.943740][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  218.949644][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.956089][    C0]  ? process_scheduled_works+0x945/0x1830
[  218.961819][    C0]  process_scheduled_works+0xa2c/0x1830
[  218.967491][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  218.973663][    C0]  ? assign_work+0x364/0x3d0
[  218.978361][    C0]  worker_thread+0x86d/0xd40
[  218.982981][    C0]  ? __kthread_parkme+0x169/0x1d0
[  218.988022][    C0]  ? __pfx_worker_thread+0x10/0x10
[  218.993153][    C0]  kthread+0x2f0/0x390
[  218.997235][    C0]  ? __pfx_worker_thread+0x10/0x10
[  219.002355][    C0]  ? __pfx_kthread+0x10/0x10
[  219.006959][    C0]  ret_from_fork+0x4b/0x80
[  219.011389][    C0]  ? __pfx_kthread+0x10/0x10
[  219.016075][    C0]  ret_from_fork_asm+0x1a/0x30
[  219.020893][    C0]  </TASK>