last executing test programs:

6m46.103012504s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m16.760369066s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m50.057162467s ago: executing program 3 (id=868):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x2, "a75c72068fcfc78d89497259442423937f15e15af4218098b0f149ca41ab5a1c", 0x1, 0x1000, 0x0, 0x1000, 0x0, 0x4, 0x1ff, 0x7})
setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5m49.722517897s ago: executing program 3 (id=872):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00'], 0x50)
r1 = socket$netlink(0x10, 0x3, 0x6)
socket(0x3, 0x801, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@getroute={0x14, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x34, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}]}]}, 0x34}}, 0x20048000)
timer_delete(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000044040)=""/102384, 0x18ff0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48})
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_GET_SECCOMP(0x15)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0xe, 0x1ff, 0x8}, 0x10)
timer_gettime(0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0)

5m47.911560526s ago: executing program 3 (id=875):
r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000409500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x22, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd0017085080040fee5a990ec48aac525f32bc5f71ebde397cb00", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000008d6c0e6a21f853f90d25e8031bb3e1ce4f117ed7ca3f681bac57d3516f4ecf327d220cec", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000))
syz_open_dev$sndctrl(&(0x7f0000000400), 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000409500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x22, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd0017085080040fee5a990ec48aac525f32bc5f71ebde397cb00", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000008d6c0e6a21f853f90d25e8031bb3e1ce4f117ed7ca3f681bac57d3516f4ecf327d220cec", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
write$cgroup_int(r5, &(0x7f0000000200), 0xf000) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f0000000080)) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)) (async)

5m47.638220039s ago: executing program 3 (id=878):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f0000000180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd26}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x8001, 0x76, &(0x7f0000000300)=""/118, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x6, 0x50d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x505, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000140), &(0x7f00000004c0)=r2}, 0x20)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5m46.063318455s ago: executing program 3 (id=885):
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x8, 0xf7, 0x5, 0x7}, {0x8, 0x5, 0x9, 0x400}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000880)="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", 0x169}, {0x0}, {&(0x7f0000000600)="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", 0x1db}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0xc0)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x48800)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000800000000000000000019a0716be5fb0d8200", @ANYRES32=r2])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r5 = dup(r4)
r6 = fanotify_init(0x0, 0x0)
fanotify_mark(r6, 0x1, 0x40000033, r5, 0x0)
fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000100), 0x0, 0x0, 0x1)

5m46.027347407s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m43.038855543s ago: executing program 3 (id=888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x1)
flistxattr(r8, &(0x7f0000000080)=""/32, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
clock_settime(0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001d0000000000140035007663616e30000000000000000000000024000e00000000000000000000000000000000000000000000000000000000000000000008001c00", @ANYRES32, @ANYBLOB="34002b800800030000000002ad4d0200", @ANYRES32, @ANYBLOB="08000300000000000800030000000000080003000000000008000300000000003c0019801400040028b4002b5663cb76d95bb0caf82ee43d05000600000000000000060000000000000006000000000008001d000000000084001980130002006272696467655f736c6176655f31000014000400f04e63cfbb2bb1639c2154f49454513f1400040014fb27d080933f7b98acf55ef02e230507000200212d0000050006000000000008000200212e2e0055000400c6a170f42b6a7a8592a81160d8ec8232080001000000000005000600000000000800010000000000"], 0x16c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

5m27.792880851s ago: executing program 32 (id=888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x1)
flistxattr(r8, &(0x7f0000000080)=""/32, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
clock_settime(0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001d0000000000140035007663616e30000000000000000000000024000e00000000000000000000000000000000000000000000000000000000000000000008001c00", @ANYRES32, @ANYBLOB="34002b800800030000000002ad4d0200", @ANYRES32, @ANYBLOB="08000300000000000800030000000000080003000000000008000300000000003c0019801400040028b4002b5663cb76d95bb0caf82ee43d05000600000000000000060000000000000006000000000008001d000000000084001980130002006272696467655f736c6176655f31000014000400f04e63cfbb2bb1639c2154f49454513f1400040014fb27d080933f7b98acf55ef02e230507000200212d0000050006000000000008000200212e2e0055000400c6a170f42b6a7a8592a81160d8ec8232080001000000000005000600000000000800010000000000"], 0x16c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

4m17.339749804s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m45.639738919s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m26.539692987s ago: executing program 2 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000009004"])
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040050)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r11, r10, &(0x7f0000002080)=0x64, 0x23b)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$USBDEVFS_CONNECTINFO(r12, 0x80045503, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m13.439396708s ago: executing program 5 (id=1168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0)

3m13.341299411s ago: executing program 5 (id=1171):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, &(0x7f00000007c0), &(0x7f0000000400)='GPL\x00', 0x8, 0xb9, &(0x7f00000004c0)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

3m13.143110499s ago: executing program 5 (id=1174):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3m12.903676193s ago: executing program 5 (id=1177):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

3m12.474810272s ago: executing program 1 (id=1182):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3m12.398646692s ago: executing program 5 (id=1183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

3m12.164972165s ago: executing program 1 (id=1185):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)

3m11.963626892s ago: executing program 1 (id=1187):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
openat$cgroup_freezer_state(r0, &(0x7f0000000840), 0x2, 0x0)
r3 = openat$cgroup_freezer_state(r0, &(0x7f0000002b00), 0x2, 0x0)
close(r3)

3m11.759753252s ago: executing program 4 (id=1190):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={0x0, r0}, 0x18)

3m11.716304328s ago: executing program 4 (id=1191):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)
close(r1)

3m11.575684674s ago: executing program 4 (id=1193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='rss_stat\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m11.507424866s ago: executing program 0 (id=1194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3m11.408689965s ago: executing program 0 (id=1195):
socketpair(0x11, 0x2, 0x2, &(0x7f0000000b00))

3m11.335468698s ago: executing program 4 (id=1196):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2716, 0xfffffffffffffffd, &(0x7f0000000000)=0x47)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r3, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)=""/189, &(0x7f0000000100)=0xbd)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000019000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x4, 0x9a, &(0x7f0000000600)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400e054}, 0x48000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$media(&(0x7f0000000180), 0x2, 0x8000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000240))
r7 = socket(0x400000000010, 0x3, 0x0)
write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000700", 0x20)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x102}], 0x1, 0x3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000003200004801c000180090001006c617374570000000c00028008000140000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

3m11.294626496s ago: executing program 0 (id=1197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r7, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x1)
flistxattr(r8, &(0x7f0000000080)=""/32, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
clock_settime(0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001d0000000000140035007663616e30000000000000000000000024000e00000000000000000000000000000000000000000000000000000000000000000008001c00", @ANYRES32, @ANYBLOB="34002b800800030000000002ad4d0200", @ANYRES32, @ANYBLOB="08000300000000000800030000000000080003000000000008000300000000003c0019801400040028b4002b5663cb76d95bb0caf82ee43d05000600000000000000060000000000000006000000000008001d000000000084001980130002006272696467655f736c6176655f31000014000400f04e63cfbb2bb1639c2154f49454513f1400040014fb27d080933f7b98acf55ef02e230507000200212d0000050006000000000008000200212e2e0055000400c6a170f42b6a7a8592a81160d8ec8232080001000000000005000600000000000800010000000000"], 0x16c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

3m8.644330666s ago: executing program 1 (id=1198):
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="000000c747"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7fff, 0x0, 0x1}, {0x70000, 0x0, 0x1}]}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x38}}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
close(r3)

3m8.541924779s ago: executing program 0 (id=1199):
syz_open_dev$MSR(0x0, 0xea9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x3a, 0x39, 0x0, 0x18)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getxattr(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)

3m8.535152466s ago: executing program 4 (id=1200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x7fffffff)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x5c)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)

3m8.407557604s ago: executing program 5 (id=1201):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="185bb952000ec126a2007019439be3"], 0x8)

3m7.244787241s ago: executing program 0 (id=1202):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9a6e35674a89b740ddc", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

3m7.235303565s ago: executing program 4 (id=1203):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001000)='devices.deny\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)

3m7.151715408s ago: executing program 1 (id=1204):
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000c747"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7fff, 0x0, 0x1}, {0x70000, 0x0, 0x1}]}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x38}}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
close(r3)

3m6.166427201s ago: executing program 0 (id=1205):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x300)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000004"], 0x4c}}, 0x0)

3m6.16468027s ago: executing program 1 (id=1206):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty=0x1000000}, 0x10)

2m16.817393433s ago: executing program 33 (id=1205):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x300)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000004"], 0x4c}}, 0x0)

1m2.401594307s ago: executing program 34 (id=1206):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty=0x1000000}, 0x10)

0s ago: executing program 35 (id=1201):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="185bb952000ec126a2007019439be3"], 0x8)

kernel console output (not intermixed with test programs):

interval 1, probability 0, space 0, times 0
[  368.954754][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.961832][ T9077] CPU: 1 UID: 0 PID: 9077 Comm: syz.4.678 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  368.961871][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  368.961885][ T9077] Call Trace:
[  368.961894][ T9077]  <TASK>
[  368.961903][ T9077]  dump_stack_lvl+0x241/0x360
[  368.961948][ T9077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.962004][ T9077]  should_fail_ex+0x40a/0x550
[  368.962035][ T9077]  _copy_from_user+0x2d/0xb0
[  368.962058][ T9077]  __snd_timer_user_ioctl+0x1780/0x5390
[  368.962107][ T9077]  ? __pfx___snd_timer_user_ioctl+0x10/0x10
[  368.962151][ T9077]  ? __mutex_trylock_common+0x183/0x2e0
[  368.962186][ T9077]  ? __pfx___might_resched+0x10/0x10
[  368.962222][ T9077]  ? rcu_is_watching+0x15/0xb0
[  368.962264][ T9077]  ? __mutex_lock+0x397/0x1010
[  368.962294][ T9077]  ? smk_tskacc+0x300/0x370
[  368.962327][ T9077]  ? snd_timer_user_ioctl+0x4f/0x90
[  368.962360][ T9077]  ? __pfx___mutex_lock+0x10/0x10
[  368.962397][ T9077]  ? __fget_files+0x2a/0x410
[  368.962428][ T9077]  ? __fget_files+0x2a/0x410
[  368.962462][ T9077]  snd_timer_user_ioctl+0x5f/0x90
[  368.962492][ T9077]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  368.962526][ T9077]  __se_sys_ioctl+0xf5/0x170
[  368.962551][ T9077]  do_syscall_64+0xf3/0x230
[  368.962581][ T9077]  ? clear_bhb_loop+0x35/0x90
[  368.962614][ T9077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.962643][ T9077] RIP: 0033:0x7f68e918cde9
[  368.962663][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.962680][ T9077] RSP: 002b:00007f68ea06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  368.962704][ T9077] RAX: ffffffffffffffda RBX: 00007f68e93a5fa0 RCX: 00007f68e918cde9
[  368.962721][ T9077] RDX: 0000200000000240 RSI: 0000000040345410 RDI: 0000000000000003
[  368.962736][ T9077] RBP: 00007f68ea06f090 R08: 0000000000000000 R09: 0000000000000000
[  368.962749][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.962762][ T9077] R13: 0000000000000000 R14: 00007f68e93a5fa0 R15: 00007ffc9a91a738
[  368.962801][ T9077]  </TASK>
[  369.417335][ T5927] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  369.762571][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.782352][ T8812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.819472][ T8812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.831010][ T5927] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  369.840452][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  369.856599][ T5927] usb 4-1: Product: syz
[  369.864396][ T5927] usb 4-1: Manufacturer: syz
[  369.869793][ T8812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.883350][ T5927] usb 4-1: SerialNumber: syz
[  369.906453][ T5927] usb 4-1: config 0 descriptor??
[  369.911579][ T8812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.152642][    T9] usb 4-1: USB disconnect, device number 18
[  370.398247][ T7741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.406117][ T7741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.864023][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.928311][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.327713][ T9126] CUSE: DEVNAME unspecified
[  372.869374][ T7745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.320604][ T7745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.418301][ T7745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.492401][ T7745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.607616][ T7745] bridge_slave_1: left allmulticast mode
[  373.613329][ T7745] bridge_slave_1: left promiscuous mode
[  373.626265][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.636102][ T7745] bridge_slave_0: left allmulticast mode
[  373.642291][ T7745] bridge_slave_0: left promiscuous mode
[  373.650911][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.951640][ T7745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.962471][ T7745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.973401][ T7745] bond0 (unregistering): Released all slaves
[  374.122512][ T9132] FAULT_INJECTION: forcing a failure.
[  374.122512][ T9132] name failslab, interval 1, probability 0, space 0, times 0
[  374.182871][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.1.691 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  374.182902][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  374.182915][ T9132] Call Trace:
[  374.182923][ T9132]  <TASK>
[  374.182932][ T9132]  dump_stack_lvl+0x241/0x360
[  374.182974][ T9132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.183009][ T9132]  ? __pfx__printk+0x10/0x10
[  374.183042][ T9132]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  374.183072][ T9132]  ? __pfx___might_resched+0x10/0x10
[  374.183099][ T9132]  should_fail_ex+0x40a/0x550
[  374.183128][ T9132]  should_failslab+0xac/0x100
[  374.183156][ T9132]  __kmalloc_node_noprof+0xe1/0x4d0
[  374.183183][ T9132]  ? vmemdup_user+0x42/0x1c0
[  374.183219][ T9132]  vmemdup_user+0x42/0x1c0
[  374.183251][ T9132]  map_lookup_elem+0x249/0x780
[  374.183274][ T9132]  ? __might_fault+0xc6/0x120
[  374.183312][ T9132]  __sys_bpf+0x429/0x810
[  374.183337][ T9132]  ? __pfx___sys_bpf+0x10/0x10
[  374.183373][ T9132]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  374.183403][ T9132]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  374.183432][ T9132]  ? do_syscall_64+0x100/0x230
[  374.183466][ T9132]  __x64_sys_bpf+0x7c/0x90
[  374.183488][ T9132]  do_syscall_64+0xf3/0x230
[  374.183515][ T9132]  ? clear_bhb_loop+0x35/0x90
[  374.183548][ T9132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.183585][ T9132] RIP: 0033:0x7f396d58cde9
[  374.183604][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.183622][ T9132] RSP: 002b:00007f396e4b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  374.183644][ T9132] RAX: ffffffffffffffda RBX: 00007f396d7a5fa0 RCX: 00007f396d58cde9
[  374.183660][ T9132] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000001
[  374.183674][ T9132] RBP: 00007f396e4b9090 R08: 0000000000000000 R09: 0000000000000000
[  374.183687][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.183713][ T9132] R13: 0000000000000000 R14: 00007f396d7a5fa0 R15: 00007ffcff476028
[  374.183743][ T9132]  </TASK>
[  374.663071][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.674171][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.682727][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.692481][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.700978][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  374.708930][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.261631][ T9163] FAULT_INJECTION: forcing a failure.
[  376.261631][ T9163] name failslab, interval 1, probability 0, space 0, times 0
[  376.282991][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.3.695 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  376.283023][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  376.283036][ T9163] Call Trace:
[  376.283043][ T9163]  <TASK>
[  376.283053][ T9163]  dump_stack_lvl+0x241/0x360
[  376.283095][ T9163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.283137][ T9163]  ? __pfx__printk+0x10/0x10
[  376.283172][ T9163]  ? kmem_cache_alloc_lru_noprof+0x4d/0x390
[  376.283203][ T9163]  ? __pfx___might_resched+0x10/0x10
[  376.283232][ T9163]  should_fail_ex+0x40a/0x550
[  376.283262][ T9163]  should_failslab+0xac/0x100
[  376.283291][ T9163]  ? sock_alloc_inode+0x28/0xc0
[  376.283317][ T9163]  kmem_cache_alloc_lru_noprof+0x75/0x390
[  376.283353][ T9163]  sock_alloc_inode+0x28/0xc0
[  376.283378][ T9163]  ? __pfx_sock_alloc_inode+0x10/0x10
[  376.283403][ T9163]  alloc_inode+0x65/0x1a0
[  376.283433][ T9163]  do_accept+0x130/0x6d0
[  376.283480][ T9163]  ? __pfx_do_accept+0x10/0x10
[  376.283542][ T9163]  __sys_accept4+0x11f/0x1d0
[  376.283571][ T9163]  ? __pfx___sys_accept4+0x10/0x10
[  376.283598][ T9163]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  376.283625][ T9163]  ? do_syscall_64+0x100/0x230
[  376.283656][ T9163]  __x64_sys_accept4+0x9a/0xb0
[  376.283684][ T9163]  do_syscall_64+0xf3/0x230
[  376.283729][ T9163]  ? clear_bhb_loop+0x35/0x90
[  376.283772][ T9163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.283798][ T9163] RIP: 0033:0x7f924378cde9
[  376.283815][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.283830][ T9163] RSP: 002b:00007f9244605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  376.283849][ T9163] RAX: ffffffffffffffda RBX: 00007f92439a6160 RCX: 00007f924378cde9
[  376.283863][ T9163] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  376.283874][ T9163] RBP: 00007f9244605090 R08: 0000000000000000 R09: 0000000000000000
[  376.283885][ T9163] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001
[  376.283897][ T9163] R13: 0000000000000000 R14: 00007f92439a6160 R15: 00007ffe516e9038
[  376.283925][ T9163]  </TASK>
[  376.691309][ T9167] tmpfs: Unknown parameter 'nr_iž;S`†ãSk~^ïù„ÝnÞ°ÍVµ¬'
[  376.788865][ T5837] Bluetooth: hci4: command tx timeout
[  377.335003][ T9144] vcan0 speed is unknown, defaulting to 1000
[  377.682068][ T9180] FAULT_INJECTION: forcing a failure.
[  377.682068][ T9180] name failslab, interval 1, probability 0, space 0, times 0
[  377.723744][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.0.700 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  377.723775][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  377.723785][ T9180] Call Trace:
[  377.723791][ T9180]  <TASK>
[  377.723797][ T9180]  dump_stack_lvl+0x241/0x360
[  377.723827][ T9180]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.723850][ T9180]  ? __pfx__printk+0x10/0x10
[  377.723874][ T9180]  ? fs_reclaim_acquire+0x93/0x130
[  377.723889][ T9180]  ? __pfx___might_resched+0x10/0x10
[  377.723916][ T9180]  should_fail_ex+0x40a/0x550
[  377.723937][ T9180]  should_failslab+0xac/0x100
[  377.723956][ T9180]  __kmalloc_noprof+0xdd/0x4c0
[  377.723975][ T9180]  ? kstrtouint_from_user+0x128/0x190
[  377.724032][ T9180]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  377.724050][ T9180]  tomoyo_realpath_from_path+0xcf/0x5e0
[  377.724072][ T9180]  tomoyo_path_number_perm+0x236/0x860
[  377.724091][ T9180]  ? __lock_acquire+0x1397/0x2100
[  377.724111][ T9180]  ? tomoyo_path_number_perm+0x206/0x860
[  377.724133][ T9180]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  377.724179][ T9180]  ? __fget_files+0x2a/0x410
[  377.724200][ T9180]  ? __fget_files+0x2a/0x410
[  377.724222][ T9180]  security_file_ioctl+0xc6/0x2a0
[  377.724254][ T9180]  __se_sys_ioctl+0x46/0x170
[  377.724270][ T9180]  do_syscall_64+0xf3/0x230
[  377.724290][ T9180]  ? clear_bhb_loop+0x35/0x90
[  377.724312][ T9180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.724332][ T9180] RIP: 0033:0x7fe791d8c9eb
[  377.724345][ T9180] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  377.724358][ T9180] RSP: 002b:00007fe792bb0490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.724374][ T9180] RAX: ffffffffffffffda RBX: 00007fe792bb0be0 RCX: 00007fe791d8c9eb
[  377.724385][ T9180] RDX: 00007fe792bb0be0 RSI: 000000004020ae46 RDI: 0000000000000004
[  377.724394][ T9180] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000061
[  377.724402][ T9180] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  377.724411][ T9180] R13: 0000200000fe9000 R14: 0000200000fe8000 R15: 00000000fec00000
[  377.724432][ T9180]  </TASK>
[  377.724438][ T9180] ERROR: Out of memory at tomoyo_realpath_from_path.
[  378.425028][ T9144] lo speed is unknown, defaulting to 1000
[  378.777008][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.783618][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.856735][ T5837] Bluetooth: hci4: command tx timeout
[  378.970818][ T7745] hsr_slave_0: left promiscuous mode
[  378.984408][ T7745] hsr_slave_1: left promiscuous mode
[  379.737469][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.776242][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.807506][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.832656][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.251462][ T7745] veth1_macvtap: left promiscuous mode
[  380.266836][ T7745] veth0_macvtap: left promiscuous mode
[  380.778307][ T7745] veth1_vlan: left promiscuous mode
[  380.806779][ T7745] veth0_vlan: left promiscuous mode
[  380.926828][ T5837] Bluetooth: hci4: command tx timeout
[  382.355277][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  382.417204][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'.
[  382.603687][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  382.603801][   T29] audit: type=1326 audit(2000000103.650:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  382.639166][   T29] audit: type=1326 audit(2000000103.650:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  382.663826][   T29] audit: type=1326 audit(2000000103.650:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  382.688501][   T29] audit: type=1326 audit(2000000103.650:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.024114][ T5837] Bluetooth: hci4: command tx timeout
[  383.101134][   T29] audit: type=1326 audit(2000000103.650:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.642128][   T29] audit: type=1326 audit(2000000103.660:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.670826][   T29] audit: type=1326 audit(2000000103.660:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.707849][   T29] audit: type=1326 audit(2000000103.660:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.739908][   T29] audit: type=1326 audit(2000000103.660:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.758132][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'.
[  383.762116][   T29] audit: type=1326 audit(2000000103.660:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9232 comm="syz.1.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396d58cde9 code=0x7ffc0000
[  383.800270][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'.
[  383.924008][ T9243] nbd0: detected capacity change from 0 to 256
[  383.954326][ T5837] block nbd0: Receive control failed (result -32)
[  383.963880][ T7579] block nbd0: Send control failed (result -32)
[  383.981311][ T7579] block nbd0: Request send failed, requeueing
[  383.994079][   T39] block nbd0: Dead connection, failed to find a fallback
[  384.006202][   T39] block nbd0: shutting down sockets
[  384.012165][   T39] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.022917][   T39] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.039424][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.049862][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.059367][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.079188][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.093983][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.107039][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.115203][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.124796][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.134234][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.143982][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.152141][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.161937][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.169953][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.179206][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.179861][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'.
[  384.187177][ T7579] ldm_validate_partition_table(): Disk read failed.
[  384.187412][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.187460][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.187650][ T7579] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  384.229676][ T7579] Buffer I/O error on dev nbd0, logical block 0, async page read
[  384.237869][ T7579] Dev nbd0: unable to read RDB block 0
[  384.249102][ T7579]  nbd0: unable to read partition table
[  384.260708][ T7579] ldm_validate_partition_table(): Disk read failed.
[  384.268213][ T7579] Dev nbd0: unable to read RDB block 0
[  384.274349][ T7579]  nbd0: unable to read partition table
[  384.321201][ T7745] team0 (unregistering): Port device team_slave_1 removed
[  384.363162][ T7745] team0 (unregistering): Port device team_slave_0 removed
[  384.803977][ T9238] wireguard0: entered promiscuous mode
[  384.825272][ T9238] wireguard0: entered allmulticast mode
[  386.599893][ T9272] netlink: 'syz.4.717': attribute type 3 has an invalid length.
[  386.607712][ T9272] netlink: 666 bytes leftover after parsing attributes in process `syz.4.717'.
[  386.622692][ T9144] chnl_net:caif_netlink_parms(): no params data found
[  387.864042][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.884249][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.930322][ T9144] bridge_slave_0: entered allmulticast mode
[  387.944484][ T9144] bridge_slave_0: entered promiscuous mode
[  388.390696][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.412660][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.440126][ T9144] bridge_slave_1: entered allmulticast mode
[  388.467273][ T9144] bridge_slave_1: entered promiscuous mode
[  388.757431][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.838576][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.015396][ T9144] team0: Port device team_slave_0 added
[  389.075021][ T9144] team0: Port device team_slave_1 added
[  389.219114][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.226114][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.355516][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.396190][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.456584][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.556727][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.921543][ T9144] hsr_slave_0: entered promiscuous mode
[  389.957928][ T9144] hsr_slave_1: entered promiscuous mode
[  389.995758][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.019551][ T9144] Cannot create hsr debugfs directory
[  391.402453][ T9339] overlayfs: missing 'lowerdir'
[  392.160465][ T9348] can: request_module (can-proto-4) failed.
[  393.124397][ T9344] ALSA: mixer_oss: invalid OSS volume ''
[  394.527452][ T7351] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  395.059714][ T7351] usb 1-1: device descriptor read/64, error -71
[  395.218616][ T9378] 9pnet_fd: Insufficient options for proto=fd
[  395.326969][ T7351] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  395.478853][ T9144] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  395.536772][ T9144] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  395.543625][ T7351] usb 1-1: device descriptor read/64, error -71
[  395.577859][ T9144] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  395.634655][ T9144] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  395.687024][ T7351] usb usb1-port1: attempt power cycle
[  395.711348][ T9389] overlayfs: missing 'lowerdir'
[  396.133495][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.156734][ T7351] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  396.211502][ T7351] usb 1-1: device descriptor read/8, error -71
[  396.222462][ T9144] 8021q: adding VLAN 0 to HW filter on device team0
[  396.277633][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.284841][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.364584][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.371850][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.487180][ T7351] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  396.527844][ T7351] usb 1-1: device descriptor read/8, error -71
[  396.637442][ T7351] usb usb1-port1: unable to enumerate USB device
[  397.817508][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.940324][ T9144] veth0_vlan: entered promiscuous mode
[  397.989456][ T9144] veth1_vlan: entered promiscuous mode
[  398.062369][ T9144] veth0_macvtap: entered promiscuous mode
[  398.095073][ T9144] veth1_macvtap: entered promiscuous mode
[  398.165382][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.189643][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.202089][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.216242][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.233788][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.245113][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.265095][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.293819][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.315039][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.330614][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.373365][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.418475][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.443206][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.465575][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.542535][ T9144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.552127][ T9144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.570923][ T9144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.588722][ T9144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.454269][ T7745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.465904][ T7745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.690293][ T7741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.529128][ T7741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.140960][ T9442] CUSE: unknown device info "#!"
[  402.146103][ T9442] CUSE: DEVNAME unspecified
[  403.206902][   T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  403.410127][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.442314][ T9460] x_tables: duplicate underflow at hook 1
[  403.479215][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.520078][   T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  403.538630][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.600917][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.643293][ T9462] Invalid ELF header magic: != ELF
[  403.649966][   T46] usb 2-1: config 0 descriptor??
[  403.682063][ T9458] vcan0 speed is unknown, defaulting to 1000
[  403.724322][ T9464] bond0: entered promiscuous mode
[  403.740875][ T9464] bond_slave_0: entered promiscuous mode
[  403.760168][ T9464] bond_slave_1: entered promiscuous mode
[  403.842942][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.983805][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.058177][ T9458] lo speed is unknown, defaulting to 1000
[  404.124750][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.274187][   T46] usb 2-1: string descriptor 0 read error: -22
[  404.346894][   T11] bridge_slave_1: left allmulticast mode
[  404.363843][   T11] bridge_slave_1: left promiscuous mode
[  404.384113][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.394166][   T11] bridge_slave_0: left allmulticast mode
[  404.406463][   T11] bridge_slave_0: left promiscuous mode
[  404.412950][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.475667][   T46] uclogic 0003:256C:006D.0004: interface is invalid, ignoring
[  404.790117][   T46] usb 2-1: USB disconnect, device number 15
[  405.433947][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.457069][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.500153][   T11] bond0 (unregistering): Released all slaves
[  405.523653][ T9477] overlayfs: missing 'lowerdir'
[  407.579542][ T9493] netlink: 'syz.3.770': attribute type 4 has an invalid length.
[  407.587431][ T9493] netlink: 'syz.3.770': attribute type 4 has an invalid length.
[  407.595179][ T9493] netlink: 56 bytes leftover after parsing attributes in process `syz.3.770'.
[  408.393569][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  408.409378][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  408.419588][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  408.506877][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  408.514643][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  408.526293][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  408.577918][ T9494] vcan0 speed is unknown, defaulting to 1000
[  410.606625][ T5832] Bluetooth: hci4: command tx timeout
[  410.685212][ T9494] lo speed is unknown, defaulting to 1000
[  411.052710][   T11] hsr_slave_0: left promiscuous mode
[  411.082516][   T11] hsr_slave_1: left promiscuous mode
[  411.123840][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.152789][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.782541][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.848271][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.387361][ T9523] 9pnet_fd: Insufficient options for proto=fd
[  412.397727][   T11] veth1_macvtap: left promiscuous mode
[  412.413504][   T11] veth0_macvtap: left promiscuous mode
[  412.428222][   T11] veth1_vlan: left promiscuous mode
[  412.437793][   T11] veth0_vlan: left promiscuous mode
[  412.687173][ T5832] Bluetooth: hci4: command tx timeout
[  414.721002][ T9544] netlink: 'syz.0.783': attribute type 4 has an invalid length.
[  414.728964][ T9544] netlink: 'syz.0.783': attribute type 4 has an invalid length.
[  414.736925][ T9544] netlink: 56 bytes leftover after parsing attributes in process `syz.0.783'.
[  415.099726][ T9546] netlink: 'syz.4.784': attribute type 4 has an invalid length.
[  415.107545][ T9546] netlink: 'syz.4.784': attribute type 4 has an invalid length.
[  415.115202][ T9546] netlink: 56 bytes leftover after parsing attributes in process `syz.4.784'.
[  415.190854][ T5832] Bluetooth: hci4: command tx timeout
[  415.735322][   T11] team0 (unregistering): Port device team_slave_1 removed
[  415.787686][   T11] team0 (unregistering): Port device team_slave_0 removed
[  416.308829][ T9514] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.322577][ T9514] bond0: (slave rose0): Enslaving as an active interface with an up link
[  416.598251][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'.
[  416.684441][ T9556] netlink: 'syz.4.787': attribute type 1 has an invalid length.
[  416.692377][ T9556] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  416.709311][ T9556] tmpfs: Unknown parameter '
[  416.709311][ T9556] '
[  416.730076][ T9494] chnl_net:caif_netlink_parms(): no params data found
[  417.277279][ T5832] Bluetooth: hci4: command tx timeout
[  417.520115][ T9570] overlayfs: missing 'lowerdir'
[  417.613118][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.638779][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.666754][ T9494] bridge_slave_0: entered allmulticast mode
[  417.674295][ T9494] bridge_slave_0: entered promiscuous mode
[  417.703232][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.721441][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.743868][ T9494] bridge_slave_1: entered allmulticast mode
[  417.771081][ T9494] bridge_slave_1: entered promiscuous mode
[  417.880300][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.943826][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.588124][ T9494] team0: Port device team_slave_0 added
[  419.640047][ T9494] team0: Port device team_slave_1 added
[  420.270335][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.286806][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  420.286826][   T29] audit: type=1326 audit(2000000141.390:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.296724][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.456708][   T29] audit: type=1326 audit(2000000141.390:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.479575][   T29] audit: type=1326 audit(2000000141.400:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.501312][   T29] audit: type=1326 audit(2000000141.400:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.523253][   T29] audit: type=1326 audit(2000000141.400:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.544999][   T29] audit: type=1326 audit(2000000141.400:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.609429][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.766180][   T29] audit: type=1326 audit(2000000141.400:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.788584][   T29] audit: type=1326 audit(2000000141.400:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  420.818955][   T29] audit: type=1326 audit(2000000141.400:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  421.624380][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.652055][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.688270][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.486755][   T29] audit: type=1326 audit(2000000143.260:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9584 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe791d8cde9 code=0x7ffc0000
[  422.725919][ T9494] hsr_slave_0: entered promiscuous mode
[  422.756936][ T9494] hsr_slave_1: entered promiscuous mode
[  422.763309][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  422.776629][ T9494] Cannot create hsr debugfs directory
[  422.803425][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'.
[  422.935653][ T9604] tmpfs: Unknown parameter '
[  422.935653][ T9604] '
[  422.971840][ T9600] netlink: 'syz.4.799': attribute type 1 has an invalid length.
[  422.992156][ T9600] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  425.418671][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.806'.
[  425.764996][ T9629] mkiss: ax0: crc mode is auto.
[  425.861324][ T9630] can0: slcan on ttyS3.
[  426.868830][ T9494] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  426.891702][ T9494] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  426.898778][ T9603] can0 (unregistered): slcan off ttyS3.
[  426.923151][ T9494] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  426.951684][ T9494] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  427.512020][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.534684][ T9494] 8021q: adding VLAN 0 to HW filter on device team0
[  427.548129][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.555402][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.578003][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.585167][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.987095][ T5950] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  428.117947][ T5950] usb 4-1: device descriptor read/64, error -71
[  428.234396][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.332393][ T9494] veth0_vlan: entered promiscuous mode
[  428.356771][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  428.382153][ T9494] veth1_vlan: entered promiscuous mode
[  428.453702][ T9494] veth0_macvtap: entered promiscuous mode
[  428.486268][ T9494] veth1_macvtap: entered promiscuous mode
[  428.496786][ T5950] usb 4-1: device descriptor read/64, error -71
[  428.545977][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.567251][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.587524][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.617096][ T5950] usb usb4-port1: attempt power cycle
[  428.622666][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.642979][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.663747][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.688352][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.714700][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.732473][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.744235][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.787119][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.806596][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.836885][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.854237][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.032291][ T9494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.054769][ T9494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.102157][ T9494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.122989][ T9494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.362859][ T7741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.396581][ T7741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.443922][ T7745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.469972][ T7745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.890951][ T5967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.966747][ T9690] CUSE: unknown device info "#!"
[  433.972061][ T9690] CUSE: DEVNAME unspecified
[  435.638175][ T5967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.735169][ T5967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.826218][ T5967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.936848][ T5967] bridge_slave_1: left allmulticast mode
[  435.942555][ T5967] bridge_slave_1: left promiscuous mode
[  435.950137][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.961770][ T5967] bridge_slave_0: left allmulticast mode
[  435.969897][ T5967] bridge_slave_0: left promiscuous mode
[  435.975592][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.290999][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.302293][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.313204][ T5967] bond0 (unregistering): Released all slaves
[  437.038096][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'.
[  437.289833][ T9700] netlink: 'syz.0.822': attribute type 1 has an invalid length.
[  437.305030][ T9700] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  437.365825][ T9700] tmpfs: Unknown parameter '
[  437.365825][ T9700] '
[  437.411756][ T5967] hsr_slave_0: left promiscuous mode
[  437.467465][ T5967] hsr_slave_1: left promiscuous mode
[  437.483552][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.501556][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.523497][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.541373][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.641838][ T5967] veth1_macvtap: left promiscuous mode
[  437.650288][ T5967] veth0_macvtap: left promiscuous mode
[  437.656105][ T5967] veth1_vlan: left promiscuous mode
[  437.680687][ T5967] veth0_vlan: left promiscuous mode
[  439.227871][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  439.244646][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  439.350465][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  439.358553][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  439.367795][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  439.376468][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  439.759746][ T9701] slcan: can't register candev
[  440.007711][ T9701] Falling back ldisc for ttyS3.
[  440.309455][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.315939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  441.409347][ T5837] Bluetooth: hci4: command tx timeout
[  443.201149][ T5967] team0 (unregistering): Port device team_slave_1 removed
[  443.301941][ T9755] netlink: 'syz.1.835': attribute type 4 has an invalid length.
[  443.309786][ T9755] netlink: 'syz.1.835': attribute type 4 has an invalid length.
[  443.317564][ T9755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.835'.
[  443.546587][ T5837] Bluetooth: hci4: command tx timeout
[  444.009055][ T5967] team0 (unregistering): Port device team_slave_0 removed
[  444.697356][ T9725] vcan0 speed is unknown, defaulting to 1000
[  444.944820][ T9725] lo speed is unknown, defaulting to 1000
[  445.986758][ T5837] Bluetooth: hci4: command tx timeout
[  446.647124][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[  446.808120][ T9767] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[  446.841683][ T9767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  446.886954][ T9767] tmpfs: Unknown parameter '
[  446.886954][ T9767] '
[  446.922785][ T9725] chnl_net:caif_netlink_parms(): no params data found
[  447.044268][ T9771] netlink: 'syz.3.839': attribute type 3 has an invalid length.
[  447.052063][ T9771] netlink: 666 bytes leftover after parsing attributes in process `syz.3.839'.
[  448.046884][ T5832] Bluetooth: hci4: command tx timeout
[  448.624223][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.657315][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.664587][ T9725] bridge_slave_0: entered allmulticast mode
[  448.680553][ T9725] bridge_slave_0: entered promiscuous mode
[  448.692696][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.732251][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.885483][ T9725] bridge_slave_1: entered allmulticast mode
[  448.997630][ T9796] CUSE: unknown device info "#!"
[  449.002799][ T9796] CUSE: DEVNAME unspecified
[  449.257278][ T9725] bridge_slave_1: entered promiscuous mode
[  450.126713][ T5832] Bluetooth: hci4: command 0x0405 tx timeout
[  450.398518][ T9725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.410678][ T9725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.111930][ T9725] team0: Port device team_slave_0 added
[  451.145077][ T9725] team0: Port device team_slave_1 added
[  451.203985][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.226599][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.291576][ T9725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.308540][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.322559][ T9817] __vm_enough_memory: pid: 9817, comm: syz.1.851, bytes: 4503599627366400 not enough memory for the allocation
[  451.601201][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.629687][ T9725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.644783][ T9818] can0: slcan on ttyS3.
[  451.686426][ T9817] x_tables: duplicate underflow at hook 1
[  451.708461][ T9793] can0 (unregistered): slcan off ttyS3.
[  451.775569][ T9725] hsr_slave_0: entered promiscuous mode
[  452.002735][ T9725] hsr_slave_1: entered promiscuous mode
[  452.009127][ T9725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.018938][ T9725] Cannot create hsr debugfs directory
[  453.494926][ T9834] netlink: 'syz.0.855': attribute type 3 has an invalid length.
[  453.502678][ T9834] netlink: 666 bytes leftover after parsing attributes in process `syz.0.855'.
[  453.680415][ T9846] ALSA: mixer_oss: invalid OSS volume ''
[  454.238805][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  454.238825][   T29] audit: type=1326 audit(2000000175.350:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  454.267652][   T29] audit: type=1326 audit(2000000175.350:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  454.297885][   T29] audit: type=1326 audit(2000000175.410:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  454.398670][ T9859] netlink: 'syz.0.860': attribute type 4 has an invalid length.
[  454.406436][ T9859] netlink: 'syz.0.860': attribute type 4 has an invalid length.
[  454.414331][ T9859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.860'.
[  455.086881][   T29] audit: type=1326 audit(2000000176.180:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.151401][   T29] audit: type=1326 audit(2000000176.180:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.300657][   T29] audit: type=1326 audit(2000000176.410:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.364573][   T29] audit: type=1326 audit(2000000176.470:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.386549][   T29] audit: type=1326 audit(2000000176.470:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.803556][   T29] audit: type=1326 audit(2000000176.470:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  455.856586][   T29] audit: type=1326 audit(2000000176.470:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924378cde9 code=0x7ffc0000
[  456.036900][    T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  456.264550][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  456.368461][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  456.454332][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  456.500846][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  456.568855][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.608633][    T9] usb 4-1: config 0 descriptor??
[  456.635058][ T9855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.769100][ T9725] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  456.815917][ T9725] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  456.866701][ T9725] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  456.949850][ T9725] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  457.309484][    T9] wacom 0003:056A:0063.0005: Unknown device_type for 'HID 056a:0063'. Assuming pen.
[  458.036605][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.053861][ T9725] 8021q: adding VLAN 0 to HW filter on device team0
[  458.080730][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.087919][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.127265][    T9] wacom 0003:056A:0063.0005: hidraw0: USB HID v0.00 Device [HID 056a:0063] on usb-dummy_hcd.3-1/input0
[  458.131558][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.145668][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.206309][    T9] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0063.0005/input/input21
[  459.650741][ T5950] usb 4-1: USB disconnect, device number 22
[  459.883792][ T9890] ALSA: mixer_oss: invalid OSS volume ''
[  460.044882][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.465486][ T9901] netlink: 'syz.1.871': attribute type 4 has an invalid length.
[  460.473398][ T9901] netlink: 'syz.1.871': attribute type 4 has an invalid length.
[  460.481174][ T9901] netlink: 56 bytes leftover after parsing attributes in process `syz.1.871'.
[  461.438404][ T9725] veth0_vlan: entered promiscuous mode
[  461.541803][ T9725] veth1_vlan: entered promiscuous mode
[  461.550085][ T9895] netlink: 'syz.0.870': attribute type 3 has an invalid length.
[  461.557993][ T9895] netlink: 666 bytes leftover after parsing attributes in process `syz.0.870'.
[  461.589472][ T9725] veth0_macvtap: entered promiscuous mode
[  461.598956][ T9725] veth1_macvtap: entered promiscuous mode
[  461.721375][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.742084][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.752769][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.790255][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.838980][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.859231][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.875410][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.887021][ T7351] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  461.930755][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.004771][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.025820][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.040691][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.102080][ T9725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.113471][ T7351] usb 5-1: Using ep0 maxpacket: 32
[  462.125687][ T9725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.147027][ T7351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.175391][ T9725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.203383][ T7351] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  462.221981][ T9725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.241544][ T7351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.260897][ T7351] usb 5-1: Product: syz
[  462.261710][ T9725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.271811][ T7351] usb 5-1: Manufacturer: syz
[  462.274996][ T9725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.290692][ T9725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.316550][ T7351] usb 5-1: SerialNumber: syz
[  462.422836][ T7351] usb 5-1: config 0 descriptor??
[  462.485470][ T7351] cdc_ether 5-1:0.0: skipping garbage
[  462.602247][ T7351] usb 5-1: bad CDC descriptors
[  462.850913][ T7351] usb 5-1: unsupported MDLM descriptors
[  462.943830][ T7351] usb 5-1: USB disconnect, device number 6
[  463.030895][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.080216][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.116918][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.124887][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.505272][ T9936] netlink: 'syz.1.882': attribute type 1 has an invalid length.
[  463.810422][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'.
[  465.076131][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.549122][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.700861][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.775759][ T9950] program syz.0.881 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  465.803031][ T9950] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  465.969844][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.229030][   T62] bridge_slave_1: left allmulticast mode
[  466.238271][   T62] bridge_slave_1: left promiscuous mode
[  466.244046][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.298706][   T62] bridge_slave_0: left allmulticast mode
[  466.304480][   T62] bridge_slave_0: left promiscuous mode
[  466.322205][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.362100][ T9959] netlink: 'syz.3.888': attribute type 4 has an invalid length.
[  467.369881][ T9959] netlink: 'syz.3.888': attribute type 4 has an invalid length.
[  467.377657][ T9959] netlink: 56 bytes leftover after parsing attributes in process `syz.3.888'.
[  470.716487][    C0] sched: DL replenish lagged too much
[  474.382939][ T9972] FAULT_INJECTION: forcing a failure.
[  474.382939][ T9972] name failslab, interval 1, probability 0, space 0, times 0
[  474.426754][ T9972] CPU: 1 UID: 0 PID: 9972 Comm: syz.0.892 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  474.426786][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  474.426800][ T9972] Call Trace:
[  474.426808][ T9972]  <TASK>
[  474.426817][ T9972]  dump_stack_lvl+0x241/0x360
[  474.426861][ T9972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.426896][ T9972]  ? __pfx__printk+0x10/0x10
[  474.426930][ T9972]  ? fs_reclaim_acquire+0x93/0x130
[  474.426951][ T9972]  ? __pfx___might_resched+0x10/0x10
[  474.426973][ T9972]  ? dynamic_dname+0x141/0x1b0
[  474.427007][ T9972]  should_fail_ex+0x40a/0x550
[  474.427037][ T9972]  should_failslab+0xac/0x100
[  474.427066][ T9972]  __kmalloc_noprof+0xdd/0x4c0
[  474.427094][ T9972]  ? tomoyo_encode+0x26f/0x540
[  474.427118][ T9972]  tomoyo_encode+0x26f/0x540
[  474.427139][ T9972]  ? __pfx_sockfs_dname+0x10/0x10
[  474.427169][ T9972]  tomoyo_realpath_from_path+0x59e/0x5e0
[  474.427203][ T9972]  tomoyo_path_number_perm+0x236/0x860
[  474.427232][ T9972]  ? __lock_acquire+0x1397/0x2100
[  474.427261][ T9972]  ? tomoyo_path_number_perm+0x206/0x860
[  474.427293][ T9972]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  474.427365][ T9972]  ? __fget_files+0x2a/0x410
[  474.427397][ T9972]  ? __fget_files+0x2a/0x410
[  474.427430][ T9972]  security_file_ioctl+0xc6/0x2a0
[  474.427463][ T9972]  __se_sys_ioctl+0x46/0x170
[  474.427495][ T9972]  do_syscall_64+0xf3/0x230
[  474.427525][ T9972]  ? clear_bhb_loop+0x35/0x90
[  474.427558][ T9972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.427586][ T9972] RIP: 0033:0x7fe791d8cde9
[  474.427606][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.427624][ T9972] RSP: 002b:00007fe792bb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  474.427647][ T9972] RAX: ffffffffffffffda RBX: 00007fe791fa5fa0 RCX: 00007fe791d8cde9
[  474.427663][ T9972] RDX: 0000200000000040 RSI: 00000000000089e8 RDI: 0000000000000004
[  474.427676][ T9972] RBP: 00007fe792bb2090 R08: 0000000000000000 R09: 0000000000000000
[  474.427689][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.427702][ T9972] R13: 0000000000000000 R14: 00007fe791fa5fa0 R15: 00007fff75da8328
[  474.427734][ T9972]  </TASK>
[  474.427754][ T9972] ERROR: Out of memory at tomoyo_realpath_from_path.
[  474.842246][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'.
[  474.954019][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  475.001548][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  475.025795][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  475.056160][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  475.085343][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  475.094792][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  475.451690][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.486114][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  475.505784][   T62] bond0 (unregistering): Released all slaves
[  475.853726][ T9956] netlink: 'syz.1.887': attribute type 3 has an invalid length.
[  475.861513][ T9956] netlink: 666 bytes leftover after parsing attributes in process `syz.1.887'.
[  475.873279][ T9963] @: renamed from vlan0 (while UP)
[  477.166606][ T5832] Bluetooth: hci4: command tx timeout
[  479.246616][ T5832] Bluetooth: hci4: command tx timeout
[  481.326636][ T5832] Bluetooth: hci4: command tx timeout
[  482.476686][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  482.488246][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  482.497735][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  482.505669][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  482.516280][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  482.523719][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  483.406557][ T5837] Bluetooth: hci4: command tx timeout
[  484.616904][ T5837] Bluetooth: hci5: command tx timeout
[  486.686667][ T5837] Bluetooth: hci5: command tx timeout
[  487.696935][ T9976] vcan0 speed is unknown, defaulting to 1000
[  488.281052][ T9999] vcan0 speed is unknown, defaulting to 1000
[  488.776521][ T5837] Bluetooth: hci5: command tx timeout
[  488.905817][ T9976] lo speed is unknown, defaulting to 1000
[  489.761366][ T9999] lo speed is unknown, defaulting to 1000
[  489.783897][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'.
[  490.831936][T10029] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  490.856750][ T5837] Bluetooth: hci5: command tx timeout
[  492.446784][   T62] hsr_slave_0: left promiscuous mode
[  492.867816][T10045] netlink: 'syz.0.910': attribute type 4 has an invalid length.
[  492.875543][T10045] netlink: 'syz.0.910': attribute type 4 has an invalid length.
[  492.883285][T10045] netlink: 56 bytes leftover after parsing attributes in process `syz.0.910'.
[  493.587642][   T62] hsr_slave_1: left promiscuous mode
[  493.631995][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  493.649936][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.711778][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  493.782302][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.535897][   T62] veth1_macvtap: left promiscuous mode
[  494.551553][   T62] veth0_macvtap: left promiscuous mode
[  494.562023][   T62] veth1_vlan: left promiscuous mode
[  494.578415][   T62] veth0_vlan: left promiscuous mode
[  498.690392][T10067] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  498.915746][   T62] team0 (unregistering): Port device team_slave_1 removed
[  498.948282][ T7351] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  499.037782][   T62] team0 (unregistering): Port device team_slave_0 removed
[  499.128625][ T7351] usb 2-1: Using ep0 maxpacket: 32
[  499.145635][ T7351] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  499.175354][ T7351] usb 2-1: config 0 has no interface number 0
[  499.191082][ T7351] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  499.208765][ T7351] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  499.241503][ T7351] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  499.279965][ T7351] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  499.294404][ T7351] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  499.343906][ T7351] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  499.358768][ T7351] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  499.384663][ T7351] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  499.434792][ T7351] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  499.451205][ T7351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.481940][ T7351] usb 2-1: Product: syz
[  499.495453][ T7351] usb 2-1: Manufacturer: syz
[  499.510011][ T7351] usb 2-1: SerialNumber: syz
[  499.535893][ T7351] usb 2-1: config 0 descriptor??
[  499.558804][T10067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  499.571790][ T7351] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  499.605793][ T7351] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out.
[  501.709057][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.715511][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  502.640597][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'.
[  503.398651][T10074] wireguard0: entered promiscuous mode
[  503.404220][T10074] wireguard0: entered allmulticast mode
[  504.065840][ T5900] usb 2-1: USB disconnect, device number 16
[  507.346875][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'.
[  507.355821][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'.
[  507.396803][T10089] netlink: 'syz.1.922': attribute type 6 has an invalid length.
[  507.472535][ T9976] chnl_net:caif_netlink_parms(): no params data found
[  508.692080][ T9999] chnl_net:caif_netlink_parms(): no params data found
[  509.044005][T10089] tipc: Started in network mode
[  509.049108][T10089] tipc: Node identity , cluster identity 4711
[  509.065400][T10089] tipc: Failed to set node id, please configure manually
[  509.113950][T10089] tipc: Enabling of bearer <udp:s > rejected, failed to enable media
[  510.036367][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.063994][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.368468][ T9976] bridge_slave_0: entered allmulticast mode
[  511.267743][ T9976] bridge_slave_0: entered promiscuous mode
[  511.901383][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.914211][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.948087][ T9976] bridge_slave_1: entered allmulticast mode
[  512.102384][ T9976] bridge_slave_1: entered promiscuous mode
[  512.320640][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.336653][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.343936][ T9999] bridge_slave_0: entered allmulticast mode
[  512.387858][ T9999] bridge_slave_0: entered promiscuous mode
[  512.756292][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.867878][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.940195][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.947555][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.954766][ T9999] bridge_slave_1: entered allmulticast mode
[  512.997980][ T9999] bridge_slave_1: entered promiscuous mode
[  513.018568][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.147041][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.385980][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.599265][T10136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.932'.
[  513.733972][T10138] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  514.139487][ T9976] team0: Port device team_slave_0 added
[  514.233042][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.326317][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'.
[  514.814208][ T9976] team0: Port device team_slave_1 added
[  514.863712][T10141] wireguard0: entered promiscuous mode
[  514.870550][T10141] wireguard0: entered allmulticast mode
[  514.952786][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.046749][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.228566][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.276152][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.678067][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.223631][ T9999] team0: Port device team_slave_0 added
[  516.235626][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.244969][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.271786][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.295685][ T9999] team0: Port device team_slave_1 added
[  516.405057][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.412384][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.444818][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.462435][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.479545][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.506400][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.709198][ T9976] hsr_slave_0: entered promiscuous mode
[  517.892158][ T9976] hsr_slave_1: entered promiscuous mode
[  517.913064][ T9976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.926773][ T9976] Cannot create hsr debugfs directory
[  518.012642][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  518.012696][   T29] audit: type=1326 audit(2000000239.120:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  518.806630][   T29] audit: type=1326 audit(2000000239.120:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  518.868500][   T29] audit: type=1326 audit(2000000239.120:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  518.911544][   T29] audit: type=1326 audit(2000000239.120:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  518.966551][   T29] audit: type=1326 audit(2000000239.120:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  519.008549][T10175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.942'.
[  519.244946][T10177] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  519.534131][   T29] audit: type=1326 audit(2000000239.120:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  519.692390][   T29] audit: type=1326 audit(2000000239.120:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  519.814836][   T29] audit: type=1326 audit(2000000239.120:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e918cde9 code=0x7ffc0000
[  519.941996][T10163] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  519.949505][T10163] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  520.019820][T10163] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  520.080297][T10163] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  520.094801][T10163] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  520.138105][T10163] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  520.886869][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  521.205743][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.223539][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.255537][   T62] bond0 (unregistering): Released all slaves
[  521.346006][ T9999] hsr_slave_0: entered promiscuous mode
[  521.363687][ T9999] hsr_slave_1: entered promiscuous mode
[  521.379845][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  521.398498][ T9999] Cannot create hsr debugfs directory
[  522.126743][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout
[  522.198276][T10196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.949'.
[  522.311569][T10196] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.320795][T10196] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.495904][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  523.631787][ T9999] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  523.731359][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'.
[  523.754291][T10210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.952'.
[  523.755766][ T9999] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  523.940065][T10211] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  524.206612][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  524.267911][ T9999] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  524.302717][ T9999] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  524.358974][   T62] hsr_slave_0: left promiscuous mode
[  524.386691][   T62] hsr_slave_1: left promiscuous mode
[  524.397181][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.425047][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.447460][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.472996][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  524.734679][   T62] veth1_macvtap: left promiscuous mode
[  524.762510][   T62] veth0_macvtap: left promiscuous mode
[  525.578965][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[  526.214984][   T62] team0 (unregistering): Port device team_slave_1 removed
[  526.273933][   T62] team0 (unregistering): Port device C removed
[  526.300467][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  527.099120][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.143141][ T9999] 8021q: adding VLAN 0 to HW filter on device team0
[  527.188737][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.195854][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.245728][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.252943][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.294473][   T62] IPVS: stop unused estimator thread 0...
[  527.469691][ T3552] bridge_slave_1: left allmulticast mode
[  527.475413][ T3552] bridge_slave_1: left promiscuous mode
[  527.485476][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.497268][ T3552] bridge_slave_0: left allmulticast mode
[  527.502974][ T3552] bridge_slave_0: left promiscuous mode
[  527.509553][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.614459][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.630384][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.641080][ T3552] bond0 (unregistering): Released all slaves
[  527.666168][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.895604][ T3552] hsr_slave_0: left promiscuous mode
[  527.913666][ T3552] hsr_slave_1: left promiscuous mode
[  527.925942][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.934222][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.107158][ T3552] team0 (unregistering): Port device team_slave_1 removed
[  528.423685][ T3552] team0 (unregistering): Port device team_slave_0 removed
[  530.107297][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  530.116669][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  530.134567][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  530.169444][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  530.199093][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  530.209385][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  530.382534][T10274] vcan0 speed is unknown, defaulting to 1000
[  530.389798][ T9999] veth0_vlan: entered promiscuous mode
[  530.404458][ T9999] veth1_vlan: entered promiscuous mode
[  531.014393][ T9999] veth0_macvtap: entered promiscuous mode
[  531.023946][ T9999] veth1_macvtap: entered promiscuous mode
[  531.049297][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.066164][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.136494][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.176510][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.198570][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.265095][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.311240][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.398334][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  531.410850][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.422894][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.443259][T10274] lo speed is unknown, defaulting to 1000
[  531.445904][ T9999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.468355][ T9999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.507662][ T9999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.532920][ T9999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.286673][ T5837] Bluetooth: hci3: command tx timeout
[  532.444324][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.489101][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.746600][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.797312][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.882171][T10274] chnl_net:caif_netlink_parms(): no params data found
[  533.147515][T10274] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.181215][T10274] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.197762][T10274] bridge_slave_0: entered allmulticast mode
[  533.204746][T10274] bridge_slave_0: entered promiscuous mode
[  533.232973][T10274] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.241957][T10274] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.252037][T10274] bridge_slave_1: entered allmulticast mode
[  534.158065][T10274] bridge_slave_1: entered promiscuous mode
[  534.166875][ T5900] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  534.371754][ T5837] Bluetooth: hci3: command tx timeout
[  534.380852][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  534.398454][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.420098][T10274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.483924][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 30768, setting to 64
[  534.504252][T10274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.538975][ T5900] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  534.559931][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.911517][T10274] team0: Port device team_slave_0 added
[  534.960661][ T5900] usb 2-1: Product: syz
[  534.965012][ T5900] usb 2-1: Manufacturer: syz
[  534.969754][ T5900] usb 2-1: SerialNumber: syz
[  534.983997][ T5900] usb 2-1: config 0 descriptor??
[  535.003325][T10274] team0: Port device team_slave_1 added
[  535.114765][T10274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.157334][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.191156][T10274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.036583][ T5900] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  536.049239][ T5900] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25
[  536.066647][T10274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.080582][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.089984][    C0] powermate: config urb returned -71
[  536.112858][    C0] powermate: config urb returned -71
[  536.118778][    C0] powermate: config urb returned -71
[  536.124203][    C0] powermate: config urb returned -71
[  536.163781][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  536.173214][ T5900] usb 2-1: USB disconnect, device number 17
[  536.202754][T10274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.491124][ T5837] Bluetooth: hci3: command tx timeout
[  537.014502][T10274] hsr_slave_0: entered promiscuous mode
[  537.023125][T10274] hsr_slave_1: entered promiscuous mode
[  537.043971][T10274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.070893][T10274] Cannot create hsr debugfs directory
[  537.770933][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.981'.
[  538.473333][T10274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  538.504568][T10274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  538.530303][ T5837] Bluetooth: hci3: command tx timeout
[  538.927199][T10274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  538.951153][T10274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  539.201728][T10274] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.258735][T10274] 8021q: adding VLAN 0 to HW filter on device team0
[  539.301127][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.308323][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.370159][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.377393][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.832051][T10274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.239860][T10274] veth0_vlan: entered promiscuous mode
[  543.256099][T10388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.992'.
[  543.416718][T10389] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  543.756466][T10274] veth1_vlan: entered promiscuous mode
[  544.068484][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.993'.
[  544.752860][T10274] veth0_macvtap: entered promiscuous mode
[  544.811482][T10274] veth1_macvtap: entered promiscuous mode
[  546.311860][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.362038][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.540445][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.554131][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.681818][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.782501][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.923067][T10274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.434738][T10417] netlink: 'syz.5.997': attribute type 4 has an invalid length.
[  547.442595][T10417] netlink: 'syz.5.997': attribute type 4 has an invalid length.
[  547.450469][T10417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.997'.
[  547.872391][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.186974][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.198339][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.216960][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.228739][T10274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.242494][T10274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.290384][T10274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.520233][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  549.019457][T10427] wireguard0: entered promiscuous mode
[  549.025196][T10427] wireguard0: entered allmulticast mode
[  549.575494][T10274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.596357][T10274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.622019][T10274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.641149][T10274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.659991][    C1] Unknown status report in ack skb
[  550.003957][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.008222][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.034560][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.044082][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.342438][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1005'.
[  553.727562][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.027112][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.228997][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.329331][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.486809][   T62] bridge_slave_1: left allmulticast mode
[  554.492660][   T62] bridge_slave_1: left promiscuous mode
[  554.499756][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.522587][   T62] bridge_slave_0: left allmulticast mode
[  554.531907][   T62] bridge_slave_0: left promiscuous mode
[  554.545427][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.951487][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.964523][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.976033][   T62] bond0 (unregistering): Released all slaves
[  555.555890][T10474] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  555.563893][T10474] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  555.572095][T10474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1010'.
[  557.051818][T10483] can: request_module (can-proto-0) failed.
[  557.290290][   T62] hsr_slave_0: left promiscuous mode
[  557.309359][   T62] hsr_slave_1: left promiscuous mode
[  557.317065][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.324522][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.457378][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.473094][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.540009][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  557.553572][   T62] veth1_macvtap: left promiscuous mode
[  557.559379][   T62] veth0_macvtap: left promiscuous mode
[  557.559465][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.564982][   T62] veth1_vlan: left promiscuous mode
[  557.578583][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  557.585638][   T62] veth0_vlan: left promiscuous mode
[  557.666195][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'.
[  557.791345][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  557.803303][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  557.811935][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  559.538074][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'.
[  559.899192][ T5832] Bluetooth: hci3: command tx timeout
[  561.966582][ T5832] Bluetooth: hci3: command tx timeout
[  562.701609][   T62] team0 (unregistering): Port device team_slave_1 removed
[  562.871236][   T62] team0 (unregistering): Port device team_slave_0 removed
[  563.088690][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  563.102008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  563.554131][T10530] netlink: 'syz.1.1025': attribute type 4 has an invalid length.
[  563.562414][T10530] netlink: 'syz.1.1025': attribute type 4 has an invalid length.
[  563.570774][T10530] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1025'.
[  564.053278][ T5832] Bluetooth: hci3: command tx timeout
[  564.937570][T10509] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  565.085154][T10490] vcan0 speed is unknown, defaulting to 1000
[  566.389980][ T5832] Bluetooth: hci3: command tx timeout
[  566.790144][T10490] lo speed is unknown, defaulting to 1000
[  569.271144][T10490] chnl_net:caif_netlink_parms(): no params data found
[  569.430787][ T5922] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  569.726461][ T5922] usb 6-1: config index 0 descriptor too short (expected 65535, got 146)
[  570.105068][T10490] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.112994][T10490] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.121190][T10490] bridge_slave_0: entered allmulticast mode
[  570.128754][T10490] bridge_slave_0: entered promiscuous mode
[  570.147294][T10490] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.156056][T10490] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.184437][ T5922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  570.205218][T10490] bridge_slave_1: entered allmulticast mode
[  570.228299][T10490] bridge_slave_1: entered promiscuous mode
[  570.281257][ T5922] usb 6-1: config 0 has no interfaces?
[  570.297789][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.302270][ T5922] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  570.349251][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  570.359987][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  570.431043][ T5922] usb 6-1: SerialNumber: syz
[  570.444095][T10490] team0: Port device team_slave_0 added
[  570.472643][T10490] team0: Port device team_slave_1 added
[  570.489856][ T5922] usb 6-1: config 0 descriptor??
[  570.565990][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.573028][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.604867][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.622626][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.630431][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.657889][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.734548][T10490] hsr_slave_0: entered promiscuous mode
[  570.741697][T10490] hsr_slave_1: entered promiscuous mode
[  570.749623][T10490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.758207][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'.
[  570.773456][    T9] usb 6-1: USB disconnect, device number 2
[  570.784916][T10490] Cannot create hsr debugfs directory
[  570.794397][T10582] netlink: 'syz.4.1037': attribute type 1 has an invalid length.
[  570.803727][T10582] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  570.834531][T10582] tmpfs: Unknown parameter '
[  570.834531][T10582] '
[  572.244396][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'.
[  572.331091][T10592] netlink: 'syz.4.1039': attribute type 4 has an invalid length.
[  572.339395][T10592] netlink: 'syz.4.1039': attribute type 4 has an invalid length.
[  572.347308][T10592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1039'.
[  572.429190][T10589] delete_channel: no stack
[  573.755745][T10490] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  573.798345][T10490] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  573.825307][T10490] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  573.885367][T10490] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  574.590926][T10490] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.649395][T10490] 8021q: adding VLAN 0 to HW filter on device team0
[  574.745001][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.752224][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.779572][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.786775][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  575.966757][T10490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  575.992212][T10490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  576.039077][T10618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1048'.
[  576.972110][T10623] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  578.478905][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  578.970525][T10635] veth0_to_team: entered promiscuous mode
[  578.976472][T10635] veth0_to_team: entered allmulticast mode
[  579.062005][T10639] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  579.263414][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.298310][T10649] FAULT_INJECTION: forcing a failure.
[  579.298310][T10649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  579.314295][T10649] CPU: 0 UID: 0 PID: 10649 Comm: syz.0.1053 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  579.314322][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  579.314335][T10649] Call Trace:
[  579.314342][T10649]  <TASK>
[  579.314349][T10649]  dump_stack_lvl+0x241/0x360
[  579.314389][T10649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  579.314428][T10649]  ? _printk+0x108/0x120
[  579.314459][T10649]  should_fail_ex+0x40a/0x550
[  579.314486][T10649]  _copy_from_iter+0x1e9/0x1c20
[  579.314515][T10649]  ? __virt_addr_valid+0x183/0x530
[  579.314577][T10649]  ? __alloc_skb+0x28f/0x440
[  579.314607][T10649]  ? __pfx__copy_from_iter+0x10/0x10
[  579.314639][T10649]  ? __virt_addr_valid+0x183/0x530
[  579.314666][T10649]  ? __virt_addr_valid+0x183/0x530
[  579.314692][T10649]  ? __virt_addr_valid+0x45f/0x530
[  579.314727][T10649]  ? __phys_addr_symbol+0x2f/0x70
[  579.314754][T10649]  ? __check_object_size+0x47a/0x730
[  579.314784][T10649]  netlink_sendmsg+0x73d/0xcb0
[  579.314816][T10649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.314849][T10649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.314867][T10649]  __sock_sendmsg+0x221/0x270
[  579.314896][T10649]  ____sys_sendmsg+0x52a/0x7e0
[  579.314925][T10649]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.314943][T10649]  ? __fget_files+0x2a/0x410
[  579.314972][T10649]  ? __fget_files+0x2a/0x410
[  579.315007][T10649]  __sys_sendmsg+0x269/0x350
[  579.315032][T10649]  ? __pfx___sys_sendmsg+0x10/0x10
[  579.315095][T10649]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  579.315122][T10649]  ? do_syscall_64+0x100/0x230
[  579.315154][T10649]  ? do_syscall_64+0xb6/0x230
[  579.315184][T10649]  do_syscall_64+0xf3/0x230
[  579.315211][T10649]  ? clear_bhb_loop+0x35/0x90
[  579.315242][T10649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.315269][T10649] RIP: 0033:0x7fe791d8cde9
[  579.315287][T10649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.315305][T10649] RSP: 002b:00007fe792b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.315328][T10649] RAX: ffffffffffffffda RBX: 00007fe791fa6080 RCX: 00007fe791d8cde9
[  579.315343][T10649] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  579.315356][T10649] RBP: 00007fe792b91090 R08: 0000000000000000 R09: 0000000000000000
[  579.315369][T10649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.315400][T10649] R13: 0000000000000000 R14: 00007fe791fa6080 R15: 00007fff75da8328
[  579.315431][T10649]  </TASK>
[  579.885273][T10490] veth0_vlan: entered promiscuous mode
[  579.904420][T10490] veth1_vlan: entered promiscuous mode
[  580.163092][T10490] veth0_macvtap: entered promiscuous mode
[  580.235563][T10490] veth1_macvtap: entered promiscuous mode
[  580.721743][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.814940][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.861309][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.913271][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.952111][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.135112][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.147040][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.157389][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.168547][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.178488][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.191930][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.201999][T10490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.212574][T10490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.227348][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.911303][T10490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.929112][T10490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.941129][T10490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.950971][T10490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.442501][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.286997][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.400975][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'.
[  583.446685][T10692] wireguard0: entered promiscuous mode
[  583.452203][T10692] wireguard0: entered allmulticast mode
[  583.491113][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.507243][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.666505][ T5900] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  583.846567][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  583.873771][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  583.951361][ T5900] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  583.962552][ T5900] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  583.979401][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  583.994185][ T5900] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75
[  584.009169][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5
[  584.019484][ T5900] usb 5-1: SerialNumber: syz
[  584.034835][ T5900] usb-storage 5-1:1.0: USB Mass Storage device detected
[  584.081466][ T5900] usb-storage 5-1:1.0: Quirks match for vid 04e6 pid 0007: 1
[  584.173536][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.251752][ T5900] usb 5-1: USB disconnect, device number 7
[  584.434923][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.621103][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.738124][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.919786][   T11] bridge_slave_1: left allmulticast mode
[  584.925499][   T11] bridge_slave_1: left promiscuous mode
[  584.942906][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.963588][   T11] bridge_slave_0: left allmulticast mode
[  584.974891][   T11] bridge_slave_0: left promiscuous mode
[  584.985060][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.492304][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  585.520632][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  585.530787][   T11] bond0 (unregistering): Released all slaves
[  585.873135][   T11] hsr_slave_0: left promiscuous mode
[  585.931688][   T11] hsr_slave_1: left promiscuous mode
[  585.947294][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.980385][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.005398][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.028089][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.315202][   T11] veth1_macvtap: left promiscuous mode
[  586.372788][   T11] veth0_macvtap: left promiscuous mode
[  586.376680][ T9663] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  586.424291][T10715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'.
[  586.434092][   T11] veth1_vlan: left promiscuous mode
[  586.463442][   T11] veth0_vlan: left promiscuous mode
[  586.689853][ T9663] usb 6-1: Using ep0 maxpacket: 16
[  586.723592][ T9663] usb 6-1: too many configurations: 63, using maximum allowed: 8
[  586.748329][ T9663] usb 6-1: unable to read config index 0 descriptor/start: -61
[  586.756205][ T9663] usb 6-1: can't read configurations, error -61
[  586.929158][ T9663] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  587.068790][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  587.089966][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  587.103255][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  587.113753][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  587.116648][ T9663] usb 6-1: Using ep0 maxpacket: 16
[  587.127461][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  587.133481][ T9663] usb 6-1: too many configurations: 63, using maximum allowed: 8
[  587.146828][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  587.280715][ T9663] usb 6-1: unable to read config index 0 descriptor/start: -61
[  587.288820][ T9663] usb 6-1: can't read configurations, error -61
[  587.295468][ T9663] usb usb6-port1: attempt power cycle
[  587.590191][   T11] team0 (unregistering): Port device team_slave_1 removed
[  587.643630][ T9663] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  587.667313][ T9663] usb 6-1: Using ep0 maxpacket: 16
[  587.675028][ T9663] usb 6-1: too many configurations: 63, using maximum allowed: 8
[  587.693199][ T9663] usb 6-1: unable to read config index 0 descriptor/start: -61
[  587.693684][   T11] team0 (unregistering): Port device team_slave_0 removed
[  587.708586][ T9663] usb 6-1: can't read configurations, error -61
[  587.836706][ T9663] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  587.883972][ T9663] usb 6-1: Using ep0 maxpacket: 16
[  587.894984][ T9663] usb 6-1: too many configurations: 63, using maximum allowed: 8
[  587.905225][ T9663] usb 6-1: unable to read config index 0 descriptor/start: -61
[  587.913603][ T9663] usb 6-1: can't read configurations, error -61
[  587.927282][ T9663] usb usb6-port1: unable to enumerate USB device
[  588.238607][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1072'.
[  588.327444][T10722] vcan0 speed is unknown, defaulting to 1000
[  588.797806][T10722] lo speed is unknown, defaulting to 1000
[  589.248341][ T5837] Bluetooth: hci3: command tx timeout
[  590.834002][T10722] chnl_net:caif_netlink_parms(): no params data found
[  591.012829][T10722] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.032637][T10722] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.040324][T10722] bridge_slave_0: entered allmulticast mode
[  591.047708][T10722] bridge_slave_0: entered promiscuous mode
[  591.055929][T10722] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.063333][T10722] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.070778][T10722] bridge_slave_1: entered allmulticast mode
[  591.078432][T10722] bridge_slave_1: entered promiscuous mode
[  591.314609][T10753] netlink: 'syz.5.1077': attribute type 4 has an invalid length.
[  591.322562][T10753] netlink: 'syz.5.1077': attribute type 4 has an invalid length.
[  591.330519][T10753] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1077'.
[  591.396722][ T5837] Bluetooth: hci3: command tx timeout
[  592.004994][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.123196][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.154173][T10722] team0: Port device team_slave_0 added
[  592.164853][T10722] team0: Port device team_slave_1 added
[  592.234742][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1080'.
[  592.245227][T10755] netlink: 'syz.0.1080': attribute type 3 has an invalid length.
[  592.253236][T10755] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  592.266251][T10722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.301704][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.373997][T10722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.437319][T10722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.444363][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.617547][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1082'.
[  592.941929][T10722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.198381][T10761] wireguard0: entered promiscuous mode
[  593.203977][T10761] wireguard0: entered allmulticast mode
[  593.358849][T10722] hsr_slave_0: entered promiscuous mode
[  593.405678][T10722] hsr_slave_1: entered promiscuous mode
[  593.412346][ T5837] Bluetooth: hci3: command tx timeout
[  593.431109][T10722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  593.460120][T10722] Cannot create hsr debugfs directory
[  595.796829][ T5837] Bluetooth: hci3: command tx timeout
[  595.877311][    T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  596.092815][    T9] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  596.113064][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD
[  596.145317][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64
[  596.264698][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  596.688087][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  596.697818][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  596.706807][    T9] usb 2-1: Manufacturer: syz
[  596.710478][T10722] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  596.713787][    T9] usb 2-1: config 0 descriptor??
[  596.724928][T10778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  596.736285][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  596.819438][T10722] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  596.857593][T10722] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  596.879025][T10722] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  596.937382][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.960427][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.970218][    T9] usb 2-1: USB disconnect, device number 18
[  597.084216][T10722] 8021q: adding VLAN 0 to HW filter on device bond0
[  597.141910][T10722] 8021q: adding VLAN 0 to HW filter on device team0
[  597.181216][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.188387][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.208857][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.215981][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.353884][T10794] kvm: MONITOR instruction emulated as NOP!
[  597.730494][T10722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.921955][T10722] veth0_vlan: entered promiscuous mode
[  597.995801][T10722] veth1_vlan: entered promiscuous mode
[  598.385700][T10722] veth0_macvtap: entered promiscuous mode
[  598.492656][T10816] Smack: duplicate mount options
[  598.780130][T10817] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  598.789283][T10817] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  598.797985][T10817] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  599.371786][T10722] veth1_macvtap: entered promiscuous mode
[  599.492388][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  599.556872][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.567372][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  599.816575][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.931483][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1099'.
[  599.983123][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  600.300722][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.312556][T10722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.324969][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  600.335978][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.358526][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  600.381002][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.391356][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  600.402230][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.420569][T10722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  600.467777][T10825] wireguard0: entered promiscuous mode
[  600.473371][T10825] wireguard0: entered allmulticast mode
[  600.588478][T10722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.631761][T10722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.706675][T10722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.715519][T10722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.820022][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.845736][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.913714][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  601.927008][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.962351][T10859] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  603.006605][T10859] UDF-fs: Scanning with blocksize 512 failed
[  603.014212][T10859] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  603.027972][T10859] UDF-fs: Scanning with blocksize 1024 failed
[  603.034618][T10859] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  603.094849][T10859] UDF-fs: Scanning with blocksize 2048 failed
[  603.122964][T10859] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  603.134313][T10859] UDF-fs: Scanning with blocksize 4096 failed
[  603.326292][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.564544][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.657285][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.737936][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.854943][   T62] bridge_slave_1: left allmulticast mode
[  603.862389][   T62] bridge_slave_1: left promiscuous mode
[  603.869306][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.885145][   T62] bridge_slave_0: left allmulticast mode
[  603.894179][   T62] bridge_slave_0: left promiscuous mode
[  603.905696][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.250393][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.261599][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.273348][   T62] bond0 (unregistering): Released all slaves
[  604.566584][   T62] hsr_slave_0: left promiscuous mode
[  604.572628][   T62] hsr_slave_1: left promiscuous mode
[  604.583180][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.594062][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.605509][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.613153][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.636039][   T62] veth1_macvtap: left promiscuous mode
[  604.641709][   T62] veth0_macvtap: left promiscuous mode
[  604.647517][   T62] veth1_vlan: left promiscuous mode
[  604.652802][   T62] veth0_vlan: left promiscuous mode
[  605.070344][T10878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1116'.
[  606.219919][   T62] team0 (unregistering): Port device team_slave_1 removed
[  606.266363][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  606.278804][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  606.287025][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  606.297623][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  606.305211][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  606.314095][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  606.381531][   T62] team0 (unregistering): Port device team_slave_0 removed
[  606.737308][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  606.917729][ T5900] usb 6-1: Using ep0 maxpacket: 16
[  606.970142][ T5900] usb 6-1: config 0 interface 0 has no altsetting 0
[  607.003222][ T5900] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00
[  607.055322][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.122996][ T5900] usb 6-1: config 0 descriptor??
[  607.420892][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.441023][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.531430][T10897] vcan0 speed is unknown, defaulting to 1000
[  608.561214][ T5900] usbhid 6-1:0.0: can't add hid device: -71
[  608.587259][ T5900] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  608.608977][ T5837] Bluetooth: hci3: command tx timeout
[  608.609018][ T5900] usb 6-1: USB disconnect, device number 7
[  610.613050][T10897] lo speed is unknown, defaulting to 1000
[  610.692388][ T5837] Bluetooth: hci3: command tx timeout
[  611.035861][T10897] chnl_net:caif_netlink_parms(): no params data found
[  611.152641][T10948] veth1_macvtap: left promiscuous mode
[  611.179011][T10948] macsec0: entered promiscuous mode
[  611.327705][T10950] vcan0 speed is unknown, defaulting to 1000
[  611.470559][T10897] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.486331][T10897] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.505674][T10897] bridge_slave_0: entered allmulticast mode
[  611.551595][T10897] bridge_slave_0: entered promiscuous mode
[  611.582868][T10897] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.603411][T10897] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.626917][T10897] bridge_slave_1: entered allmulticast mode
[  611.649123][T10897] bridge_slave_1: entered promiscuous mode
[  611.699741][T10950] lo speed is unknown, defaulting to 1000
[  611.732581][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.745999][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.815380][T10897] team0: Port device team_slave_0 added
[  611.822211][T10969] vcan0 speed is unknown, defaulting to 1000
[  611.835700][T10897] team0: Port device team_slave_1 added
[  611.911338][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.928523][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.016660][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  612.043559][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.066520][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.131917][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.148086][T10978] pim6reg1: entered promiscuous mode
[  612.153459][T10978] pim6reg1: entered allmulticast mode
[  612.188274][T10969] lo speed is unknown, defaulting to 1000
[  612.358410][T10897] hsr_slave_0: entered promiscuous mode
[  612.365373][T10897] hsr_slave_1: entered promiscuous mode
[  612.381750][T10897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  612.406487][T10897] Cannot create hsr debugfs directory
[  612.766653][ T5837] Bluetooth: hci3: command tx timeout
[  614.849357][ T5837] Bluetooth: hci3: command tx timeout
[  616.009064][T11021] pim6reg1: entered promiscuous mode
[  616.022571][T11021] pim6reg1: entered allmulticast mode
[  616.456049][T10897] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  616.476130][T10897] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  616.511952][T10897] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  616.565141][T10897] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  616.762967][T10897] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.817956][T10897] 8021q: adding VLAN 0 to HW filter on device team0
[  616.852525][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.859791][ T7745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.930571][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.937777][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.050247][T11049] vcan0 speed is unknown, defaulting to 1000
[  617.054873][T10897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  617.161087][T11049] lo speed is unknown, defaulting to 1000
[  617.575609][T10897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.796544][T11105] netlink: 'syz.0.1197': attribute type 4 has an invalid length.
[  618.804400][T11105] netlink: 'syz.0.1197': attribute type 4 has an invalid length.
[  618.812360][T11105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1197'.
[  621.205663][T10897] veth0_vlan: entered promiscuous mode
[  621.275236][T10897] veth1_vlan: entered promiscuous mode
[  622.387756][T10897] veth0_macvtap: entered promiscuous mode
[  622.421729][T10897] veth1_macvtap: entered promiscuous mode
[  622.495797][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.591513][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.616824][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  622.631242][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.852638][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  623.149983][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.178942][T10897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.287013][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.297988][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.310237][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.322736][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.334321][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.349688][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.370521][T10897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.389396][T10897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.482363][T10897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.550049][T10897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.593304][T10897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.502893][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  634.546678][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  691.173916][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  691.188427][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  736.228846][T11141] Bluetooth: hci3: command tx timeout
[  747.750848][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  747.989995][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  810.480228][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  810.503455][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  870.949518][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  870.964367][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  878.634269][   T30] INFO: task kworker/1:4:5873 blocked for more than 143 seconds.
[  878.650288][   T30]       Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  880.105334][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  880.123249][   T30] task:kworker/1:4     state:D stack:21584 pid:5873  tgid:5873  ppid:2      task_flags:0x4208060 flags:0x00004000
[  882.905374][   T30] Workqueue: events_power_efficient reg_check_chans_work
[  883.776470][   T30] Call Trace:
[  883.779830][   T30]  <TASK>
[  883.782807][   T30]  __schedule+0x18bc/0x4c40
[  883.866520][   T30]  ? __pfx___schedule+0x10/0x10
[  883.871473][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  883.980668][   T30]  ? __pfx_lock_release+0x10/0x10
[  883.996507][   T30]  ? kick_pool+0x45c/0x620
[  884.001036][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  884.066547][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  884.072275][   T30]  ? schedule+0x90/0x320
[  884.136672][   T30]  schedule+0x14b/0x320
[  884.140928][   T30]  schedule_preempt_disabled+0x13/0x30
[  884.243296][   T30]  __mutex_lock+0x817/0x1010
[  884.272763][   T30]  ? __mutex_lock+0x602/0x1010
[  884.296461][   T30]  ? reg_check_chans_work+0x164/0xfb0
[  884.301922][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  884.366496][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  884.371783][   T30]  ? process_scheduled_works+0x976/0x1840
[  884.466525][   T30]  reg_check_chans_work+0x164/0xfb0
[  884.472060][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  884.556572][   T30]  ? __pfx_reg_check_chans_work+0x10/0x10
[  884.592491][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  884.656535][   T30]  ? __schedule+0x18bc/0x4c40
[  884.661339][   T30]  ? __pfx___schedule+0x10/0x10
[  884.666246][   T30]  ? __pfx_lock_release+0x10/0x10
[  884.763009][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  884.802514][   T30]  ? schedule+0x90/0x320
[  884.836572][   T30]  ? wq_worker_sleeping+0x66/0x240
[  884.841773][   T30]  ? schedule+0x90/0x320
[  884.846066][   T30]  ? schedule+0x14b/0x320
[  884.921140][   T30]  ? worker_thread+0xa30/0xd30
[  884.926014][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  884.976609][   T30]  ? __kthread_parkme+0x169/0x1d0
[  884.981750][   T30]  ? __pfx_worker_thread+0x10/0x10
[  885.030383][   T30]  ? kthread+0x7a9/0x920
[  885.034711][   T30]  ? __pfx_kthread+0x10/0x10
[  885.096467][   T30]  ? __pfx_worker_thread+0x10/0x10
[  885.101684][   T30]  ? __pfx_kthread+0x10/0x10
[  885.146610][   T30]  ? __pfx_kthread+0x10/0x10
[  885.151341][   T30]  ? __pfx_kthread+0x10/0x10
[  885.156073][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  885.232016][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  885.256335][   T30]  ? __pfx_kthread+0x10/0x10
[  885.261190][   T30]  ? ret_from_fork+0x4b/0x80
[  885.265831][   T30]  ? __pfx_kthread+0x10/0x10
[  885.346599][   T30]  ? ret_from_fork_asm+0x1a/0x30
[  885.351668][   T30]  </TASK>
[  885.354835][   T30] 
[  885.354835][   T30] Showing all locks held in the system:
[  885.869779][   T30] 1 lock held by khungtaskd/30:
[  885.874708][   T30]  #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  887.789534][   T30] 3 locks held by kworker/1:1/46:
[  887.794678][   T30]  #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  888.214839][   T30]  #1: ffffc90000b67c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  888.298743][   T30]  #2: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  888.369726][   T30] 3 locks held by kworker/u8:6/1010:
[  888.375110][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  888.490649][   T30]  #1: ffffc90003e6fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  888.596406][   T30]  #2: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60