last executing test programs:

15.833550606s ago: executing program 0 (id=190):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
unshare(0x4020400)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

14.603624629s ago: executing program 0 (id=194):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080)

11.662532836s ago: executing program 1 (id=197):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4})
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa45910476a7aee3f", @ANYRES16=r4], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
pread64(r1, &(0x7f00000005c0)=""/213, 0xd5, 0x5)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

11.155641085s ago: executing program 0 (id=199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f69876", 0x18}], 0x2)

10.860338411s ago: executing program 3 (id=200):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000019340)='net/snmp6\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)

9.843234871s ago: executing program 2 (id=201):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x7)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040847}, 0x240008c4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

9.743091483s ago: executing program 3 (id=202):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2)
creat(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

9.549978726s ago: executing program 1 (id=203):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
unshare(0x4020400)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

8.593521095s ago: executing program 1 (id=204):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000d0000d2b300070012000000050017000000000006", @ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x6c623e, 0xa7f7a8c46d0312a1)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8, 0x8, 0x5, 0xff, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101}}}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0)

7.174068692s ago: executing program 3 (id=205):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

6.123088242s ago: executing program 3 (id=206):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0x0, 0x3, 'rr\x00', 0x11, 0xfffffff8, 0x20}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)

5.297491098s ago: executing program 1 (id=207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x4000080)

5.296712488s ago: executing program 2 (id=208):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = gettid()
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r3, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x40, 0xd0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x50d2, &(0x7f0000000000)={0x0, 0xbc04, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))

5.182770111s ago: executing program 0 (id=209):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

5.044495073s ago: executing program 2 (id=210):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
unshare(0x4020400)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.109506721s ago: executing program 0 (id=211):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4})
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000008adf6045d813bb7bf080a882fd485e68f60a2e767c1d082f673e114d2509ca6682c8c58de23975354d8a77ce9f7640d419f4ff2984c4b785a92aa45910476a7aee3f", @ANYRES16=r4], 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
pread64(r1, &(0x7f00000005c0)=""/213, 0xd5, 0x5)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r6 = socket(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')

3.992175124s ago: executing program 2 (id=212):
socket(0x3, 0xa, 0xfffffffc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_create(0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}}, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800004400000008000000000000000100000d0000000008000000040000000d000000010000930c0000000c00000003000000070000000b00000000000012050000000d0000000000000b020000"], &(0x7f0000000500)=""/177, 0x64, 0xb1, 0x0, 0x6, 0x10000, @value=r2}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x24080000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil)
wait4(0x0, 0x0, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040))

3.420814565s ago: executing program 1 (id=213):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2)
creat(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

3.13637271s ago: executing program 3 (id=214):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

2.692314729s ago: executing program 2 (id=215):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000d0000d2b300070012000000050017000000000006", @ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x6c623e, 0xa7f7a8c46d0312a1)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
bind$can_j1939(r6, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x8, 0x8, 0x5, 0xff, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101}}}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0)

1.366970454s ago: executing program 3 (id=216):
syz_usb_connect(0x3, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0xbe, 0x12, 0xf0, 0x8, 0x424, 0xcf18, 0xb61d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x9, 0xd0, 0x4e, [{{0x9, 0x4, 0xd3, 0xfd, 0x0, 0x4a, 0x66, 0xcc, 0x7}}]}}]}}, 0x0)

871.891904ms ago: executing program 0 (id=217):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f69876", 0x18}], 0x2)

741.167576ms ago: executing program 2 (id=218):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x7)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040847}, 0x240008c4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

0s ago: executing program 1 (id=219):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts.
[   84.921404][ T5776] cgroup: Unknown subsys name 'net'
[   85.088499][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.847475][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.294351][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.327536][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.336985][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.345560][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.353374][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.361439][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.370097][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.383904][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.392666][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.400502][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.410445][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.419050][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.419844][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.427168][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.435598][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.449207][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.457168][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.464846][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.503780][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.519558][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.527849][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.549996][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.560447][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.568509][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.025585][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   90.051541][ T5796] chnl_net:caif_netlink_parms(): no params data found
[   90.221655][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.229026][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.237191][ T5796] bridge_slave_0: entered allmulticast mode
[   90.245232][ T5796] bridge_slave_0: entered promiscuous mode
[   90.253586][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   90.304226][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.311562][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.318948][ T5796] bridge_slave_1: entered allmulticast mode
[   90.327159][ T5796] bridge_slave_1: entered promiscuous mode
[   90.367857][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.375255][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.382588][ T5787] bridge_slave_0: entered allmulticast mode
[   90.390513][ T5787] bridge_slave_0: entered promiscuous mode
[   90.442749][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.453370][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.461603][ T5787] bridge_slave_1: entered allmulticast mode
[   90.469197][ T5787] bridge_slave_1: entered promiscuous mode
[   90.498000][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.537143][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.566269][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.580755][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.603335][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   90.656266][ T5796] team0: Port device team_slave_0 added
[   90.668912][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.676461][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.684056][ T5786] bridge_slave_0: entered allmulticast mode
[   90.691961][ T5786] bridge_slave_0: entered promiscuous mode
[   90.715471][ T5796] team0: Port device team_slave_1 added
[   90.756530][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.764849][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.772782][ T5786] bridge_slave_1: entered allmulticast mode
[   90.781040][ T5786] bridge_slave_1: entered promiscuous mode
[   90.792280][ T5787] team0: Port device team_slave_0 added
[   90.831374][ T5787] team0: Port device team_slave_1 added
[   90.838293][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.846075][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.872598][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.906772][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.929787][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.936863][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.963051][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.988788][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.058897][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.066192][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.093292][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.107052][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.114283][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.140851][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.192157][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.200174][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.207416][ T5795] bridge_slave_0: entered allmulticast mode
[   91.215620][ T5795] bridge_slave_0: entered promiscuous mode
[   91.226559][ T5786] team0: Port device team_slave_0 added
[   91.236586][ T5786] team0: Port device team_slave_1 added
[   91.284001][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.292155][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.299906][ T5795] bridge_slave_1: entered allmulticast mode
[   91.306973][ T5795] bridge_slave_1: entered promiscuous mode
[   91.327869][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.336146][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.363923][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.380686][ T5796] hsr_slave_0: entered promiscuous mode
[   91.387621][ T5796] hsr_slave_1: entered promiscuous mode
[   91.434716][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.442096][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.468848][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.508251][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.522023][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.523759][ T5788] Bluetooth: hci1: command tx timeout
[   91.532390][   T50] Bluetooth: hci0: command tx timeout
[   91.549555][ T5104] Bluetooth: hci2: command tx timeout
[   91.578237][ T5787] hsr_slave_0: entered promiscuous mode
[   91.584932][ T5787] hsr_slave_1: entered promiscuous mode
[   91.593072][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.601361][ T5104] Bluetooth: hci3: command tx timeout
[   91.607497][ T5787] Cannot create hsr debugfs directory
[   91.641180][ T5795] team0: Port device team_slave_0 added
[   91.695708][ T5795] team0: Port device team_slave_1 added
[   91.724486][ T5786] hsr_slave_0: entered promiscuous mode
[   91.732252][ T5786] hsr_slave_1: entered promiscuous mode
[   91.738988][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.746912][ T5786] Cannot create hsr debugfs directory
[   91.847846][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.855006][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.881119][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.927715][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.935476][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.961847][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.168219][ T5795] hsr_slave_0: entered promiscuous mode
[   92.176411][ T5795] hsr_slave_1: entered promiscuous mode
[   92.184091][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.192210][ T5795] Cannot create hsr debugfs directory
[   92.248708][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.263717][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.304672][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.317120][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.327685][   T27] cfg80211: failed to load regulatory.db
[   92.420167][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.465158][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.476999][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.501266][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.626376][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.641236][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.693349][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.731697][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.768544][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.781848][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.814146][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.836833][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.874649][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.922745][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.947866][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   93.008647][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   93.020027][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.027397][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.067655][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.074858][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.106083][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.113409][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.145975][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.153166][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.186988][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.307741][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   93.332446][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.356337][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.363620][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.389024][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.396251][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.446676][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   93.476003][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.483279][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.518247][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.525482][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.608329][ T5104] Bluetooth: hci1: command tx timeout
[   93.614289][   T50] Bluetooth: hci2: command tx timeout
[   93.620539][ T5788] Bluetooth: hci0: command tx timeout
[   93.680476][ T5104] Bluetooth: hci3: command tx timeout
[   93.805610][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.909222][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.973890][ T5796] veth0_vlan: entered promiscuous mode
[   94.023707][ T5796] veth1_vlan: entered promiscuous mode
[   94.095629][ T5787] veth0_vlan: entered promiscuous mode
[   94.152357][ T5787] veth1_vlan: entered promiscuous mode
[   94.173162][ T5796] veth0_macvtap: entered promiscuous mode
[   94.195734][ T5796] veth1_macvtap: entered promiscuous mode
[   94.244400][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.256080][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.273500][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.294368][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.313507][ T5787] veth0_macvtap: entered promiscuous mode
[   94.329079][ T5787] veth1_macvtap: entered promiscuous mode
[   94.346469][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.355766][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.365558][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.375065][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.458519][ T5786] veth0_vlan: entered promiscuous mode
[   94.472310][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.483925][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.496707][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.508248][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.519287][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.533869][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.556374][ T5786] veth1_vlan: entered promiscuous mode
[   94.577208][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.587098][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.596442][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.605948][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.689277][ T5795] veth0_vlan: entered promiscuous mode
[   94.731153][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.747381][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.792836][ T5786] veth0_macvtap: entered promiscuous mode
[   94.814219][ T5795] veth1_vlan: entered promiscuous mode
[   94.846815][ T5786] veth1_macvtap: entered promiscuous mode
[   94.875483][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.896800][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.921060][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.935542][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.946385][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.957367][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.971787][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.993423][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.016907][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.048562][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.063832][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.073839][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.085465][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.097272][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.105808][ T5795] veth0_macvtap: entered promiscuous mode
[   95.148530][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.158371][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.180802][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.203125][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.221013][ T5795] veth1_macvtap: entered promiscuous mode
[   95.246888][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.256272][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.387803][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.401840][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.417994][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.428873][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.453527][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.496079][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.613309][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.690187][ T5104] Bluetooth: hci2: command tx timeout
[   95.698565][ T5104] Bluetooth: hci1: command tx timeout
[   95.699608][ T5788] Bluetooth: hci0: command tx timeout
[   95.760978][ T5104] Bluetooth: hci3: command tx timeout
[   95.809550][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   95.946877][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.963986][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.990142][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.003279][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.017555][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.029866][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.066848][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.132850][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.147365][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.169735][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.178533][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.299291][ T5885] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[   96.329354][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.344196][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.549334][ T5885] syzkaller0: entered promiscuous mode
[   96.555269][ T5885] syzkaller0: entered allmulticast mode
[   96.579687][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.587620][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.163362][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.180966][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.370142][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.387216][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.802174][    T8] IPVS: starting estimator thread 0...
[   99.132951][ T5905] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[   99.149816][ T5903] IPVS: using max 22 ests per chain, 52800 per kthread
[   99.321792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.496542][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  100.110301][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.644508][   T27] IPVS: starting estimator thread 0...
[  100.800828][ T5916] IPVS: using max 16 ests per chain, 38400 per kthread
[  102.276873][ T5928] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  102.447827][ T5928] syzkaller0: entered promiscuous mode
[  102.460402][ T5928] syzkaller0: entered allmulticast mode
[  102.914756][ T5937] overlayfs: missing 'lowerdir'
[  103.012283][ T5939] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  103.382647][ T5942] sctp: [Deprecated]: syz.3.20 (pid 5942) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.382647][ T5942] Use struct sctp_sack_info instead
[  103.388314][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.490413][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  103.499277][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.520490][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  103.627755][ T5946] netlink: set zone limit has 8 unknown bytes
[  103.695030][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  103.704266][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.838154][ T5945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  107.904340][ T5860] IPVS: starting estimator thread 0...
[  107.952343][    T8] IPVS: starting estimator thread 0...
[  108.020194][ T5968] IPVS: using max 18 ests per chain, 43200 per kthread
[  108.049662][ T5970] IPVS: using max 26 ests per chain, 62400 per kthread
[  108.701465][ T5975] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  108.933134][ T5978] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  108.998118][ T5981] netlink: 256 bytes leftover after parsing attributes in process `syz.0.31'.
[  109.040373][ T5981] unsupported nlmsg_type 40
[  109.140878][ T5978] syzkaller0: entered promiscuous mode
[  109.155368][ T5978] syzkaller0: entered allmulticast mode
[  109.404236][ T5987] overlayfs: missing 'lowerdir'
[  114.149645][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[  114.403130][ T6012] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  115.994538][ T6017] block device autoloading is deprecated and will be removed.
[  116.029373][ T6017] syz.3.42[6017]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  117.299823][ T6035] sctp: [Deprecated]: syz.3.47 (pid 6035) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.299823][ T6035] Use struct sctp_sack_info instead
[  117.536632][ T6038] netlink: set zone limit has 8 unknown bytes
[  118.140108][ T6037] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  119.592755][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'.
[  119.938563][ T6062] loop1: detected capacity change from 0 to 1024
[  120.975083][ T6069] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  121.756794][ T6076] fuse: Unknown parameter '0x0000000000000003'
[  121.957104][ T6081] sctp: [Deprecated]: syz.2.59 (pid 6081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.957104][ T6081] Use struct sctp_sack_info instead
[  122.249282][ T6086] netlink: set zone limit has 8 unknown bytes
[  122.744959][ T6085] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  123.550852][ T6092] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  124.299873][ T6092] syzkaller0: entered promiscuous mode
[  124.325778][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'.
[  124.344322][ T6092] syzkaller0: entered allmulticast mode
[  124.677603][ T6107] IPVS: rr: FWM 3 0x00000003 - no destination available
[  126.289926][ T6119] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  129.026302][ T6130] sctp: [Deprecated]: syz.0.71 (pid 6130) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.026302][ T6130] Use struct sctp_sack_info instead
[  129.201400][ T6132] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  129.324030][ T6133] netlink: set zone limit has 8 unknown bytes
[  129.990455][ T6132] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  130.431010][  T967] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  130.452364][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'.
[  130.726964][  T967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  130.817030][  T967] usb 1-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[  130.873181][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.472861][  T967] usb 1-1: config 0 descriptor??
[  131.915494][  T967] usbhid 1-1:0.0: can't add hid device: -71
[  131.924668][  T967] usbhid: probe of 1-1:0.0 failed with error -71
[  132.826920][  T967] usb 1-1: USB disconnect, device number 2
[  133.020554][ T6160] netlink: 'syz.3.79': attribute type 21 has an invalid length.
[  133.029501][ T6160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.79'.
[  133.039385][ T6160] netlink: 'syz.3.79': attribute type 5 has an invalid length.
[  133.047278][ T6160] netlink: 'syz.3.79': attribute type 6 has an invalid length.
[  133.055219][ T6160] netlink: 3 bytes leftover after parsing attributes in process `syz.3.79'.
[  133.286452][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  133.323774][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  134.191714][ T6169] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  134.260590][ T6168] sctp: [Deprecated]: syz.0.82 (pid 6168) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.260590][ T6168] Use struct sctp_sack_info instead
[  134.403534][ T6171] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  134.510240][ T6173] netlink: set zone limit has 8 unknown bytes
[  135.141663][ T6175] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  135.777967][ T6181] loop0: detected capacity change from 0 to 1024
[  136.139388][ T6175] syzkaller0: entered promiscuous mode
[  136.698684][ T6175] syzkaller0: entered allmulticast mode
[  137.095525][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[  138.816051][ T6208] netlink: 256 bytes leftover after parsing attributes in process `syz.1.91'.
[  139.163572][ T6212] IPVS: rr: FWM 3 0x00000003 - no destination available
[  142.497859][ T6224] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  142.928640][ T6207] netlink: 'syz.0.92': attribute type 21 has an invalid length.
[  142.936569][ T6207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.92'.
[  142.946512][ T6207] netlink: 'syz.0.92': attribute type 5 has an invalid length.
[  142.954580][ T6207] netlink: 'syz.0.92': attribute type 6 has an invalid length.
[  142.962524][ T6207] netlink: 3 bytes leftover after parsing attributes in process `syz.0.92'.
[  143.246411][ T6228] loop1: detected capacity change from 0 to 1024
[  143.449656][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  143.756948][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[  143.930138][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.052149][    T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[  144.109801][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.189305][    T9] usb 4-1: config 0 descriptor??
[  144.905998][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  144.939761][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  144.979291][ T6233] lo speed is unknown, defaulting to 1000
[  145.007934][    T9] usb 4-1: USB disconnect, device number 2
[  145.031948][ T6233] lo speed is unknown, defaulting to 1000
[  145.122614][ T6233] lo speed is unknown, defaulting to 1000
[  145.348397][ T6233] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.762520][ T6233] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  145.971042][ T6233] lo speed is unknown, defaulting to 1000
[  146.010089][ T6233] lo speed is unknown, defaulting to 1000
[  146.017902][ T6233] lo speed is unknown, defaulting to 1000
[  146.031141][ T6233] lo speed is unknown, defaulting to 1000
[  148.423846][ T6266] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  148.440395][ T6263] netlink: 'syz.3.107': attribute type 21 has an invalid length.
[  148.449542][ T6263] netlink: 128 bytes leftover after parsing attributes in process `syz.3.107'.
[  148.459326][ T6263] netlink: 'syz.3.107': attribute type 5 has an invalid length.
[  148.467025][ T6263] netlink: 'syz.3.107': attribute type 6 has an invalid length.
[  148.474918][ T6263] netlink: 3 bytes leftover after parsing attributes in process `syz.3.107'.
[  148.751966][ T6270] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  148.872321][ T6266] syzkaller0: entered promiscuous mode
[  148.877886][ T6266] syzkaller0: entered allmulticast mode
[  149.192335][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'.
[  153.350366][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'.
[  156.520584][ T6318] loop3: detected capacity change from 0 to 1024
[  156.809648][ T6309] lo: entered promiscuous mode
[  156.814471][ T6309] lo: entered allmulticast mode
[  156.820116][ T6309] tunl0: entered promiscuous mode
[  156.825578][ T6309] tunl0: entered allmulticast mode
[  156.831753][ T6309] gre0: entered promiscuous mode
[  156.839399][ T6309] gre0: entered allmulticast mode
[  156.847687][ T6309] gretap0: entered promiscuous mode
[  156.853010][ T6309] gretap0: entered allmulticast mode
[  156.860216][ T6309] erspan0: entered promiscuous mode
[  156.865479][ T6309] erspan0: entered allmulticast mode
[  156.871388][ T6309] ip_vti0: entered promiscuous mode
[  156.876636][ T6309] ip_vti0: entered allmulticast mode
[  156.882962][ T6309] ip6_vti0: entered promiscuous mode
[  156.888296][ T6309] ip6_vti0: entered allmulticast mode
[  156.895589][ T6309] sit0: entered promiscuous mode
[  156.900676][ T6309] sit0: entered allmulticast mode
[  156.906912][ T6309] ip6tnl0: entered promiscuous mode
[  156.912207][ T6309] ip6tnl0: entered allmulticast mode
[  156.918530][ T6309] ip6gre0: entered promiscuous mode
[  156.923900][ T6309] ip6gre0: entered allmulticast mode
[  156.930342][ T6309] syz_tun: entered promiscuous mode
[  156.935601][ T6309] syz_tun: entered allmulticast mode
[  156.941641][ T6309] ip6gretap0: entered promiscuous mode
[  156.948362][ T6309] ip6gretap0: entered allmulticast mode
[  156.955424][ T6309] bridge0: entered promiscuous mode
[  156.961057][ T6309] bridge0: entered allmulticast mode
[  156.966948][ T6309] vcan0: entered promiscuous mode
[  156.972113][ T6309] vcan0: entered allmulticast mode
[  156.977802][ T6309] bond0: entered promiscuous mode
[  156.982985][ T6309] bond_slave_0: entered promiscuous mode
[  156.988921][ T6309] bond_slave_1: entered promiscuous mode
[  156.994805][ T6309] bond0: entered allmulticast mode
[  157.000012][ T6309] bond_slave_0: entered allmulticast mode
[  157.005774][ T6309] bond_slave_1: entered allmulticast mode
[  157.012463][ T6309] team0: entered promiscuous mode
[  157.017554][ T6309] team_slave_0: entered promiscuous mode
[  157.023550][ T6309] team_slave_1: entered promiscuous mode
[  157.029541][ T6309] team0: entered allmulticast mode
[  157.034715][ T6309] team_slave_0: entered allmulticast mode
[  157.040768][ T6309] team_slave_1: entered allmulticast mode
[  157.048537][ T6309] dummy0: entered promiscuous mode
[  157.053789][ T6309] dummy0: entered allmulticast mode
[  157.060243][ T6309] nlmon0: entered promiscuous mode
[  157.065426][ T6309] nlmon0: entered allmulticast mode
[  157.076405][ T6309] caif0: entered promiscuous mode
[  157.081659][ T6309] caif0: entered allmulticast mode
[  157.086844][ T6309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.825307][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'.
[  162.111560][ T6358] lo: entered promiscuous mode
[  162.116433][ T6358] lo: entered allmulticast mode
[  162.122404][ T6358] tunl0: entered promiscuous mode
[  162.127837][ T6358] tunl0: entered allmulticast mode
[  162.134263][ T6358] gre0: entered promiscuous mode
[  162.139360][ T6358] gre0: entered allmulticast mode
[  162.146336][ T6358] gretap0: entered promiscuous mode
[  162.151789][ T6358] gretap0: entered allmulticast mode
[  162.158019][ T6358] erspan0: entered promiscuous mode
[  162.163418][ T6358] erspan0: entered allmulticast mode
[  162.179915][ T6358] ip_vti0: entered promiscuous mode
[  162.185538][ T6358] ip_vti0: entered allmulticast mode
[  162.193730][ T6358] ip6_vti0: entered promiscuous mode
[  162.199385][ T6358] ip6_vti0: entered allmulticast mode
[  162.225125][ T6358] sit0: entered promiscuous mode
[  162.230671][ T6358] sit0: entered allmulticast mode
[  162.239413][ T6358] ip6tnl0: entered promiscuous mode
[  162.244886][ T6358] ip6tnl0: entered allmulticast mode
[  162.253682][ T6358] ip6gre0: entered promiscuous mode
[  162.259080][ T6358] ip6gre0: entered allmulticast mode
[  162.271519][ T6358] syz_tun: entered promiscuous mode
[  162.277311][ T6358] syz_tun: entered allmulticast mode
[  162.285665][ T6358] ip6gretap0: entered promiscuous mode
[  162.291571][ T6358] ip6gretap0: entered allmulticast mode
[  162.299058][ T6358] bridge0: entered promiscuous mode
[  162.304613][ T6358] bridge0: entered allmulticast mode
[  162.311981][ T6358] vcan0: entered promiscuous mode
[  162.317229][ T6358] vcan0: entered allmulticast mode
[  162.325544][ T6358] bond0: entered promiscuous mode
[  162.331015][ T6358] bond_slave_0: entered promiscuous mode
[  162.338435][ T6358] bond_slave_1: entered promiscuous mode
[  162.345756][ T6358] bond0: entered allmulticast mode
[  162.351350][ T6358] bond_slave_0: entered allmulticast mode
[  162.357371][ T6358] bond_slave_1: entered allmulticast mode
[  162.366220][ T6358] team0: entered promiscuous mode
[  162.380046][ T6358] team_slave_0: entered promiscuous mode
[  162.386584][ T6358] team_slave_1: entered promiscuous mode
[  162.395057][ T6358] team0: entered allmulticast mode
[  162.400630][ T6358] team_slave_0: entered allmulticast mode
[  162.406545][ T6358] team_slave_1: entered allmulticast mode
[  162.415474][ T6358] dummy0: entered promiscuous mode
[  162.421704][ T6358] dummy0: entered allmulticast mode
[  162.429911][ T6358] nlmon0: entered promiscuous mode
[  162.435185][ T6358] nlmon0: entered allmulticast mode
[  162.856254][ T6358] caif0: entered promiscuous mode
[  162.861454][ T6358] caif0: entered allmulticast mode
[  162.866583][ T6358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.167914][ T6362] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  163.280738][ T6362] syzkaller0: entered promiscuous mode
[  163.286408][ T6362] syzkaller0: entered allmulticast mode
[  164.187214][ T6369] loop3: detected capacity change from 0 to 1024
[  165.614900][ T6383] netlink: 256 bytes leftover after parsing attributes in process `syz.2.142'.
[  166.917134][ T6393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  167.565439][ T6397] siw: device registration error -23
[  168.700032][ T6402] sctp: [Deprecated]: syz.2.148 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.700032][ T6402] Use struct sctp_sack_info instead
[  168.842548][ T6406] netlink: set zone limit has 8 unknown bytes
[  171.090699][ T6418] netlink: 256 bytes leftover after parsing attributes in process `syz.3.152'.
[  171.194359][ T6420] loop3: detected capacity change from 0 to 1024
[  171.451902][ T6405] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  174.373516][ T6451] sctp: [Deprecated]: syz.0.163 (pid 6451) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.373516][ T6451] Use struct sctp_sack_info instead
[  174.542561][ T6456] netlink: set zone limit has 8 unknown bytes
[  174.742438][ T6455] syzkaller0: entered promiscuous mode
[  174.751538][ T6455] syzkaller0: entered allmulticast mode
[  175.278282][ T6460] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  175.380115][ T6463] loop0: detected capacity change from 0 to 1024
[  176.900683][ T6471] siw: device registration error -23
[  180.459198][ T6496] sctp: [Deprecated]: syz.2.174 (pid 6496) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.459198][ T6496] Use struct sctp_sack_info instead
[  181.718223][ T6503] netlink: set zone limit has 8 unknown bytes
[  181.819451][    C0] sched: RT throttling activated
[  182.582622][ T6505] siw: device registration error -23
[  186.346746][ T6535] syzkaller0: entered promiscuous mode
[  186.352614][ T6535] syzkaller0: entered allmulticast mode
[  186.774604][ T6540] sctp: [Deprecated]: syz.1.187 (pid 6540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  186.774604][ T6540] Use struct sctp_sack_info instead
[  187.673192][ T6545] netlink: set zone limit has 8 unknown bytes
[  187.753677][ T6546] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  189.304304][ T6554] cgroup: fork rejected by pids controller in /syz2
[  190.257476][ T6543] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  190.962555][ T6602] loop1: detected capacity change from 0 to 1024
[  194.740724][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  194.747117][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  195.213880][ T6628] siw: device registration error -23
[  196.472204][ T6630] syzkaller0: entered promiscuous mode
[  196.477772][ T6630] syzkaller0: entered allmulticast mode
[  196.550476][ T6639] sctp: [Deprecated]: syz.2.201 (pid 6639) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.550476][ T6639] Use struct sctp_sack_info instead
[  196.684846][ T6645] netlink: set zone limit has 8 unknown bytes
[  196.808797][ T6647] IPVS: rr: FWM 3 0x00000003 - no destination available
[  200.815951][ T6642] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  201.017948][ T6666] fuse: Unknown parameter '0x0000000000000003'
[  203.410125][ T6680] Zero length message leads to an empty skb
[  203.550339][ T6690] siw: device registration error -23
[  205.514971][ T6703] sctp: [Deprecated]: syz.2.218 (pid 6703) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.514971][ T6703] Use struct sctp_sack_info instead
[  205.589782][ T6700] syzkaller0: entered promiscuous mode
[  205.595636][ T6700] syzkaller0: entered allmulticast mode
[  205.695294][ T6705] netlink: set zone limit has 8 unknown bytes
[  205.709794][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  205.899582][ T5846] usb 4-1: Using ep0 maxpacket: 8
[  205.911549][ T5846] usb 4-1: config 9 has an invalid interface number: 211 but max is 0
[  205.920986][ T5846] usb 4-1: config 9 has no interface number 0
[  205.927145][ T5846] usb 4-1: config 9 interface 211 has no altsetting 0
[  205.943372][ T5846] usb 4-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=b6.1d
[  205.953075][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.961206][ T5846] usb 4-1: Product: syz
[  205.965553][ T5846] usb 4-1: Manufacturer: syz
[  205.970274][ T5846] usb 4-1: SerialNumber: syz
[  206.319136][ T5846] usb 4-1: USB disconnect, device number 3
[  206.332460][ T5846] ==================================================================
[  206.340587][ T5846] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0
[  206.348376][ T5846] Read of size 8 at addr ffff8880290a1898 by task kworker/1:4/5846
[  206.356299][ T5846] 
[  206.358669][ T5846] CPU: 1 PID: 5846 Comm: kworker/1:4 Not tainted syzkaller #0
[  206.366205][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  206.376409][ T5846] Workqueue: usb_hub_wq hub_event
[  206.381501][ T5846] Call Trace:
[  206.384817][ T5846]  <TASK>
[  206.387788][ T5846]  dump_stack_lvl+0x16c/0x230
[  206.392510][ T5846]  ? __lock_acquire+0x7c80/0x7c80
[  206.397578][ T5846]  ? show_regs_print_info+0x20/0x20
[  206.402826][ T5846]  ? load_image+0x3b0/0x3b0
[  206.407375][ T5846]  ? __virt_addr_valid+0x469/0x540
[  206.412526][ T5846]  print_report+0xac/0x220
[  206.416983][ T5846]  ? hdm_disconnect+0x10d/0x1c0
[  206.421880][ T5846]  kasan_report+0x117/0x150
[  206.426630][ T5846]  ? hdm_disconnect+0x10d/0x1c0
[  206.431541][ T5846]  hdm_disconnect+0x10d/0x1c0
[  206.436266][ T5846]  usb_unbind_interface+0x1f2/0x870
[  206.441516][ T5846]  ? kernfs_remove_by_name_ns+0x117/0x150
[  206.447288][ T5846]  ? usb_driver_release_interface+0x1c0/0x1c0
[  206.453407][ T5846]  device_release_driver_internal+0x4cb/0x7a0
[  206.459524][ T5846]  bus_remove_device+0x342/0x400
[  206.464598][ T5846]  device_del+0x50b/0x900
[  206.469062][ T5846]  ? mark_lock+0x94/0x320
[  206.473609][ T5846]  ? kill_device+0x160/0x160
[  206.478340][ T5846]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  206.484372][ T5846]  ? usb_disconnect+0x10b/0x8a0
[  206.489267][ T5846]  ? mutex_lock_nested+0x20/0x20
[  206.494255][ T5846]  ? _raw_spin_lock_irq+0xaf/0xe0
[  206.499315][ T5846]  usb_disable_device+0x3e9/0x8a0
[  206.504408][ T5846]  usb_disconnect+0x34c/0x8a0
[  206.509351][ T5846]  hub_event+0x1cef/0x49c0
[  206.513849][ T5846]  ? verify_lock_unused+0x140/0x140
[  206.519133][ T5846]  ? hub_post_resume+0x120/0x120
[  206.524145][ T5846]  ? read_lock_is_recursive+0x20/0x20
[  206.529761][ T5846]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.535006][ T5846]  ? process_scheduled_works+0x957/0x15b0
[  206.540773][ T5846]  ? process_scheduled_works+0x957/0x15b0
[  206.546543][ T5846]  process_scheduled_works+0xa45/0x15b0
[  206.552143][ T5846]  ? assign_work+0x400/0x400
[  206.556788][ T5846]  ? assign_work+0x39e/0x400
[  206.561396][ T5846]  worker_thread+0xa55/0xfc0
[  206.566119][ T5846]  kthread+0x2fa/0x390
[  206.570310][ T5846]  ? pr_cont_work+0x560/0x560
[  206.575112][ T5846]  ? kthread_blkcg+0xd0/0xd0
[  206.579714][ T5846]  ret_from_fork+0x48/0x80
[  206.584148][ T5846]  ? kthread_blkcg+0xd0/0xd0
[  206.588758][ T5846]  ret_from_fork_asm+0x11/0x20
[  206.593561][ T5846]  </TASK>
[  206.596591][ T5846] 
[  206.598929][ T5846] Allocated by task 5846:
[  206.603355][ T5846]  kasan_set_track+0x4e/0x70
[  206.607959][ T5846]  __kasan_kmalloc+0x8f/0xa0
[  206.612679][ T5846]  hdm_probe+0x96/0x13e0
[  206.617099][ T5846]  usb_probe_interface+0x5a4/0xb00
[  206.622235][ T5846]  really_probe+0x25b/0xb40
[  206.626859][ T5846]  __driver_probe_device+0x18c/0x330
[  206.632542][ T5846]  driver_probe_device+0x4f/0x420
[  206.637685][ T5846]  __device_attach_driver+0x2ca/0x520
[  206.643077][ T5846]  bus_for_each_drv+0x24b/0x2d0
[  206.648250][ T5846]  __device_attach+0x2b5/0x400
[  206.653066][ T5846]  bus_probe_device+0x180/0x260
[  206.657930][ T5846]  device_add+0x85b/0xc20
[  206.662278][ T5846]  usb_set_configuration+0x1a79/0x20c0
[  206.667772][ T5846]  usb_generic_driver_probe+0x8d/0x150
[  206.673262][ T5846]  usb_probe_device+0x13d/0x280
[  206.678145][ T5846]  really_probe+0x25b/0xb40
[  206.682672][ T5846]  __driver_probe_device+0x18c/0x330
[  206.687969][ T5846]  driver_probe_device+0x4f/0x420
[  206.693017][ T5846]  __device_attach_driver+0x2ca/0x520
[  206.698406][ T5846]  bus_for_each_drv+0x24b/0x2d0
[  206.703271][ T5846]  __device_attach+0x2b5/0x400
[  206.708048][ T5846]  bus_probe_device+0x180/0x260
[  206.712940][ T5846]  device_add+0x85b/0xc20
[  206.717290][ T5846]  usb_new_device+0xa31/0x1630
[  206.722060][ T5846]  hub_event+0x2962/0x49c0
[  206.726494][ T5846]  process_scheduled_works+0xa45/0x15b0
[  206.732156][ T5846]  worker_thread+0xa55/0xfc0
[  206.736774][ T5846]  kthread+0x2fa/0x390
[  206.740891][ T5846]  ret_from_fork+0x48/0x80
[  206.745349][ T5846]  ret_from_fork_asm+0x11/0x20
[  206.750208][ T5846] 
[  206.752548][ T5846] Freed by task 5846:
[  206.756652][ T5846]  kasan_set_track+0x4e/0x70
[  206.761286][ T5846]  kasan_save_free_info+0x2e/0x50
[  206.766368][ T5846]  ____kasan_slab_free+0x126/0x1e0
[  206.771502][ T5846]  slab_free_freelist_hook+0x130/0x1b0
[  206.776991][ T5846]  __kmem_cache_free+0xba/0x1f0
[  206.782111][ T5846]  device_release+0x96/0x1c0
[  206.786755][ T5846]  kobject_put+0x221/0x470
[  206.791318][ T5846]  hdm_disconnect+0xf3/0x1c0
[  206.796173][ T5846]  usb_unbind_interface+0x1f2/0x870
[  206.801452][ T5846]  device_release_driver_internal+0x4cb/0x7a0
[  206.807580][ T5846]  bus_remove_device+0x342/0x400
[  206.812574][ T5846]  device_del+0x50b/0x900
[  206.817106][ T5846]  usb_disable_device+0x3e9/0x8a0
[  206.822220][ T5846]  usb_disconnect+0x34c/0x8a0
[  206.826909][ T5846]  hub_event+0x1cef/0x49c0
[  206.831344][ T5846]  process_scheduled_works+0xa45/0x15b0
[  206.836927][ T5846]  worker_thread+0xa55/0xfc0
[  206.841561][ T5846]  kthread+0x2fa/0x390
[  206.845645][ T5846]  ret_from_fork+0x48/0x80
[  206.850096][ T5846]  ret_from_fork_asm+0x11/0x20
[  206.854907][ T5846] 
[  206.857260][ T5846] The buggy address belongs to the object at ffff8880290a0000
[  206.857260][ T5846]  which belongs to the cache kmalloc-8k of size 8192
[  206.872035][ T5846] The buggy address is located 6296 bytes inside of
[  206.872035][ T5846]  freed 8192-byte region [ffff8880290a0000, ffff8880290a2000)
[  206.886118][ T5846] 
[  206.888452][ T5846] The buggy address belongs to the physical page:
[  206.894890][ T5846] page:ffffea0000a42800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x290a0
[  206.905076][ T5846] head:ffffea0000a42800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  206.914035][ T5846] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  206.922139][ T5846] page_type: 0xffffffff()
[  206.926580][ T5846] raw: 00fff00000000840 ffff888017842280 ffffea0001f5f000 0000000000000002
[  206.935189][ T5846] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  206.943788][ T5846] page dumped because: kasan: bad access detected
[  206.950217][ T5846] page_owner tracks the page as allocated
[  206.955937][ T5846] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6455, tgid 6452 (syz.3.164), ts 174723155820, free_ts 171156508523
[  206.978614][ T5846]  post_alloc_hook+0x1cd/0x210
[  206.983492][ T5846]  get_page_from_freelist+0x195c/0x19f0
[  206.989064][ T5846]  __alloc_pages+0x1e3/0x460
[  206.993718][ T5846]  alloc_slab_page+0x5d/0x170
[  206.998503][ T5846]  new_slab+0x87/0x2e0
[  207.002589][ T5846]  ___slab_alloc+0xc6d/0x1300
[  207.007391][ T5846]  __kmem_cache_alloc_node+0x1a2/0x260
[  207.012969][ T5846]  __kmalloc_node+0xa4/0x230
[  207.017674][ T5846]  kvmalloc_node+0x70/0x180
[  207.022211][ T5846]  pfifo_fast_init+0x238/0x6a0
[  207.027106][ T5846]  qdisc_create_dflt+0x11e/0x430
[  207.032148][ T5846]  mq_init+0x2e3/0x660
[  207.036237][ T5846]  qdisc_create_dflt+0x11e/0x430
[  207.041230][ T5846]  dev_activate+0x1d0/0x11a0
[  207.046147][ T5846]  __dev_open+0x338/0x430
[  207.050509][ T5846]  __dev_change_flags+0x20e/0x6a0
[  207.055551][ T5846] page last free stack trace:
[  207.060249][ T5846]  free_unref_page_prepare+0x7ce/0x8e0
[  207.065740][ T5846]  free_unref_page+0x32/0x2e0
[  207.070536][ T5846]  __unfreeze_partials+0x1cf/0x210
[  207.075678][ T5846]  put_cpu_partial+0x17c/0x250
[  207.080478][ T5846]  __slab_free+0x31d/0x410
[  207.084922][ T5846]  qlist_free_all+0x75/0xe0
[  207.089453][ T5846]  kasan_quarantine_reduce+0x143/0x160
[  207.095106][ T5846]  __kasan_slab_alloc+0x22/0x80
[  207.099973][ T5846]  slab_post_alloc_hook+0x6e/0x4d0
[  207.105173][ T5846]  kmem_cache_alloc+0x11e/0x2e0
[  207.110140][ T5846]  getname_flags+0xbb/0x500
[  207.114665][ T5846]  do_sys_openat2+0xcb/0x1c0
[  207.119284][ T5846]  __x64_sys_openat+0x139/0x160
[  207.124177][ T5846]  do_syscall_64+0x55/0xb0
[  207.128608][ T5846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.134522][ T5846] 
[  207.136849][ T5846] Memory state around the buggy address:
[  207.142572][ T5846]  ffff8880290a1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.150642][ T5846]  ffff8880290a1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.158711][ T5846] >ffff8880290a1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.166772][ T5846]                             ^
[  207.171624][ T5846]  ffff8880290a1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.179697][ T5846]  ffff8880290a1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  207.187856][ T5846] ==================================================================
[  207.235732][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  207.243134][ T5846] CPU: 1 PID: 5846 Comm: kworker/1:4 Not tainted syzkaller #0
[  207.250648][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  207.260748][ T5846] Workqueue: usb_hub_wq hub_event
[  207.265827][ T5846] Call Trace:
[  207.269305][ T5846]  <TASK>
[  207.272257][ T5846]  dump_stack_lvl+0x16c/0x230
[  207.277032][ T5846]  ? show_regs_print_info+0x20/0x20
[  207.282275][ T5846]  ? load_image+0x3b0/0x3b0
[  207.286836][ T5846]  panic+0x2c0/0x710
[  207.290804][ T5846]  ? bpf_jit_dump+0xd0/0xd0
[  207.295452][ T5846]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  207.301479][ T5846]  ? _raw_spin_unlock+0x40/0x40
[  207.306472][ T5846]  ? print_memory_metadata+0x314/0x400
[  207.312262][ T5846]  ? hdm_disconnect+0x10d/0x1c0
[  207.317437][ T5846]  check_panic_on_warn+0x84/0xa0
[  207.322430][ T5846]  ? hdm_disconnect+0x10d/0x1c0
[  207.327330][ T5846]  end_report+0x6f/0x140
[  207.331621][ T5846]  kasan_report+0x128/0x150
[  207.336146][ T5846]  ? hdm_disconnect+0x10d/0x1c0
[  207.341030][ T5846]  hdm_disconnect+0x10d/0x1c0
[  207.345733][ T5846]  usb_unbind_interface+0x1f2/0x870
[  207.351307][ T5846]  ? kernfs_remove_by_name_ns+0x117/0x150
[  207.357055][ T5846]  ? usb_driver_release_interface+0x1c0/0x1c0
[  207.363149][ T5846]  device_release_driver_internal+0x4cb/0x7a0
[  207.369239][ T5846]  bus_remove_device+0x342/0x400
[  207.374223][ T5846]  device_del+0x50b/0x900
[  207.378584][ T5846]  ? mark_lock+0x94/0x320
[  207.382937][ T5846]  ? kill_device+0x160/0x160
[  207.387551][ T5846]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  207.393853][ T5846]  ? usb_disconnect+0x10b/0x8a0
[  207.398814][ T5846]  ? mutex_lock_nested+0x20/0x20
[  207.403859][ T5846]  ? _raw_spin_lock_irq+0xaf/0xe0
[  207.408931][ T5846]  usb_disable_device+0x3e9/0x8a0
[  207.413985][ T5846]  usb_disconnect+0x34c/0x8a0
[  207.418778][ T5846]  hub_event+0x1cef/0x49c0
[  207.423215][ T5846]  ? verify_lock_unused+0x140/0x140
[  207.428457][ T5846]  ? hub_post_resume+0x120/0x120
[  207.433415][ T5846]  ? read_lock_is_recursive+0x20/0x20
[  207.438805][ T5846]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.444051][ T5846]  ? process_scheduled_works+0x957/0x15b0
[  207.449796][ T5846]  ? process_scheduled_works+0x957/0x15b0
[  207.455541][ T5846]  process_scheduled_works+0xa45/0x15b0
[  207.461119][ T5846]  ? assign_work+0x400/0x400
[  207.465822][ T5846]  ? assign_work+0x39e/0x400
[  207.470428][ T5846]  worker_thread+0xa55/0xfc0
[  207.475055][ T5846]  kthread+0x2fa/0x390
[  207.479137][ T5846]  ? pr_cont_work+0x560/0x560
[  207.483832][ T5846]  ? kthread_blkcg+0xd0/0xd0
[  207.488438][ T5846]  ret_from_fork+0x48/0x80
[  207.492895][ T5846]  ? kthread_blkcg+0xd0/0xd0
[  207.497522][ T5846]  ret_from_fork_asm+0x11/0x20
[  207.502337][ T5846]  </TASK>
[  207.505535][ T5846] Kernel Offset: disabled
[  207.510073][ T5846] Rebooting in 86400 seconds..