last executing test programs:

1m50.293252289s ago: executing program 3 (id=26):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080), 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0), 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x20e7, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x20e7, @loopback}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendto(r2, &(0x7f0000000500)='hello world', 0xb, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1}, 0x0)

1m49.806763116s ago: executing program 3 (id=29):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000208))
close(r0)

1m49.247694844s ago: executing program 3 (id=33):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf1, 0xff}, {0x0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}}}]}]}}]}, 0x6c}}, 0x0)

1m48.719832052s ago: executing program 3 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000740)='1\n\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10)
write(r4, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c)
nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0)

1m47.54916607s ago: executing program 3 (id=40):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50)
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, &(0x7f0000000040), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
listen(0xffffffffffffffff, 0x5)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42814}, 0x4000014)

1m40.594893228s ago: executing program 3 (id=70):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001})
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip_vti0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'tunl0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @empty, @empty}}}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'sit0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1010101}})
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500001c00000000400474d902020202010101010000000000000000"], 0x1c)

1m38.691387194s ago: executing program 32 (id=70):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001})
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip_vti0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'tunl0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @empty, @empty}}}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'sit0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1010101}})
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500001c00000000400474d902020202010101010000000000000000"], 0x1c)

13.697616316s ago: executing program 6 (id=461):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0), 0x10}}, 0x0)

13.030532932s ago: executing program 6 (id=464):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0)

11.656857291s ago: executing program 6 (id=468):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)

11.342530508s ago: executing program 6 (id=471):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000080002000a000000"], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d000100000000000100000005000100010000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0)

10.326417303s ago: executing program 6 (id=475):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010100}]}, 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x8, 0x6, @ip4=@private=0xa010101}]}, 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x30}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x18, &(0x7f0000000700)=@raw=[@generic={0xbf, 0x2, 0x1}, @generic={0xb7, 0x3}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0x7b, 0xa, 0x3, 0xffd0}, @generic={0x7b, 0xa, 0x3, 0xffd8}, @generic={0x7b, 0xa, 0x3, 0xffe0}, @generic={0x7b, 0xa, 0x3, 0xffe8}, @generic={0x7b, 0xa, 0x3, 0xfff0}, @generic={0x7b, 0xa, 0x3, 0xfff8}, @generic={0xb7, 0x3, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x3, 0xffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1}, @generic={0x7b, 0xa, 0x3, 0xffc8}, @generic={0xb7, 0x3, 0x0, 0x0, 0xa010100}, @generic={0x7b, 0xa, 0x3, 0xffd4}, @generic={0xbf, 0x1, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x10, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789abcdef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.336377143s ago: executing program 6 (id=482):
unshare(0x40000000)
unshare(0x40000000)
unshare(0x40000000)
unshare(0x40000000)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)

6.231273263s ago: executing program 1 (id=496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'\x00', 0x1002})
write$tun(r2, &(0x7f0000000400)={@val, @val={0x1, 0x3, 0x2a, 0x64, 0x22, 0x6}, @eth={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1234, 0x28, 0x0, @opaque="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"}}}}}}, 0x58)

5.184256487s ago: executing program 5 (id=500):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0)

4.931546559s ago: executing program 1 (id=503):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

4.857247464s ago: executing program 5 (id=504):
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1})
syz_emit_ethernet(0x3e, &(0x7f0000000600)={@empty, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x40, 0x11, 0x0, @remote, @local}, {0x0, 0x0, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0)

3.875959954s ago: executing program 0 (id=507):
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/default/forwarding\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/inet_peer_threshold\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1', 0x1)
close(r3)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010101, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010103, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010104, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010105, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010106, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010107, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010108, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010109, @private=0xa010102}, @echo={0x8, 0x0, 0x0, 0x1, 0x1}}}}}, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

3.507547657s ago: executing program 2 (id=510):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r0 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.718198709s ago: executing program 0 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x601, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3e8, 0x64, 0x1f4}}, @TCA_RED_STAB={0x104}]}}]}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@getqdisc={0x14, 0x26, 0x301, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x14}}, 0x0)

2.474788147s ago: executing program 5 (id=512):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000500)={'syz_tun\x00', 0x41})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e60030000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677"], 0x64)
recvfrom$inet6(r1, &(0x7f0000000700)=""/100, 0x64, 0x0, 0x0, 0x0)

2.474584927s ago: executing program 0 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, 0x10, 0x1, 0x0, 0x0, {0xa, 0x1}, [@typed={0x25, 0x1, 0x0, 0x0, @str='SYZ01234567890123456789012345678\x00'}]}, 0x3c}}, 0x0)

2.440289406s ago: executing program 2 (id=514):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x2094, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x8cf}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x1e54, 0x1, [@m_nat={0xa4, 0x1a, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x1, 0xc3, 0x7a4}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xaa, 0x5}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x8, 0x2d, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x9e4, 0xe, 0x0, 0x0, {{0x7}, {0x994, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x93a, 0x6, {0x93, 'nat\x00', 0x2b, 0x1, "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"}}, @TCA_IPT_TARG={0x4a, 0x6, {0x0, 'filter\x00', 0x6, 0x76b2, "09be888352e1636a6f02d65ff730c94cb88e52c5c37e0cf00fa6f57dbfd25d4c"}}, @TCA_IPT_HOOK={0x8}]}, {0x2a, 0x6, "54efc6bede17512378a571f7be540951ec9929be6a33e95c9a6b2eece042d6d557d3b835f81c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xa28, 0x1f, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x9, 0x80000001}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x5, 0x9, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x9a3, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x68, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x3, 0x8}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x1, 0x0, 0x3}, 0x27}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2632767e6fcd1fa4}}}}, @m_ctinfo={0xb8, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "85145f3341ee7c816801a1ba58fb564ac84eb6a369ea4768af78c0c3555cc658d4caaa1365752191bf99dbe3d7b93894888c672d180f90b855f546adedf949d51d5a3ea04a1ee2d44bd2bf156a5935fa05b313b1e3b15d7e9f1ec5b660db769b836a7a3134f815d271426f240804a87f718fa9ecc8298486ee5cc85e3989415e16d791f304"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x880, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffffffff, 0x5, 0xc3b9, 0x101}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0xffffffffffffffff, 0xfffffffa, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x9c9, 0x5}, 0x3}}]}, {0x7f3, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x164, 0x1, [@m_connmark={0xc0, 0x8, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x40, 0x0, 0x4, 0xfff}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x3, 0x10000000, 0x3, 0x8}, 0xe7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1000, 0x6, 0x2, 0xf86}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xb0a7, 0x20000000, 0x4, 0x2}, 0x941c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xffffffffffffffff, 0x8001, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x94c3, 0x4, 0x4, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x49, 0x6, "e2fdde4de934f1ebe259883ded80a7adb789f83eb880596203503e0f3933ad3c1650e42b53eed97ec49290e32c8f16b47d77da843def1935facbdba0916e0fc78e53900869"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x78, 0x1, [@m_gact={0x3c, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xebc, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x38, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2094}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

2.408589771s ago: executing program 4 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50)
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, &(0x7f0000000040), &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
listen(0xffffffffffffffff, 0x5)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/46, 0x2e)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42814}, 0x4000014)

2.276973339s ago: executing program 1 (id=516):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x5, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x128)

1.972124304s ago: executing program 0 (id=517):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000240000000040847c"], 0x0)

1.867993729s ago: executing program 4 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0)

1.425024169s ago: executing program 1 (id=519):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newsa={0x104, 0x10, 0x601, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c}, {@in6=@loopback, 0x0, 0x3c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0x9, @in6=@loopback}]}, 0x104}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@dstopts={0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, 0x18)
sendto$inet6(r1, &(0x7f0000000300)="1122334455667788", 0x8, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback, 0x1}, 0x1c)

1.416868305s ago: executing program 5 (id=520):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='a', 0x1}], 0x1}, {&(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)='b', 0x1}], 0x1}], 0x2, 0x0)
shutdown(r0, 0x0)
shutdown(r2, 0x0)

1.39045136s ago: executing program 0 (id=521):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x2c0)

1.259297316s ago: executing program 2 (id=522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x2}}]}, 0x28}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2c0)
sendto$inet(r1, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10)

1.138237122s ago: executing program 4 (id=523):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.138014206s ago: executing program 1 (id=524):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @local}, 0x10)
connect$llc(r0, &(0x7f0000000010)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @remote}, 0x10)
syz_emit_ethernet(0x1b, &(0x7f0000000020)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x3, 'c'}}}}}, 0x0)
syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @remote, @void, {@llc={0x4, {@llc={0x2, 0x2, "0002"}}}}}, 0x0)

1.032832718s ago: executing program 5 (id=525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68)
write(r0, &(0x7f0000000000)="740000001800050603000000000000000a400000fe040001000000001400010020010db800b0000000000000000000011400050020010db80000000000000000000000fe08000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x74)
write(r0, &(0x7f0000000000)="6c0000001800050604000000000000000a400000fe040001000000001400010020010db800c0000000000000000000010c00080008000200dc05000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x6c)
write(r0, &(0x7f0000000000)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x7c)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800010000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800030000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800040000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800050000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800060000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800070000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800080000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800090000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800100000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800110000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800130000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800140000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800160000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800170000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800180000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800190000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0)

1.007174181s ago: executing program 0 (id=526):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r1}, 0x14)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e", 0xbb}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0)

915.053717ms ago: executing program 2 (id=527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x10000004, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000d7c280dde384589840d6d1598d70f4202611602adb887321134f94b34364ffa021e89eed89db1d7917680230cddc901b15e0454550522204e26e729991fc7206ac5359e69c7d0448c2d776eec5cd4526bf7e5d35250902c7300a8c8bf2a24e4da8aabb58d6baaa12415960a650fc46bb0d04b32ef01679eb1ae860573992b131cec132eb0e9f18f89f0a1e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000040)=0x5)
setresuid(0x0, r5, 0xee00)
fchown(r4, r5, r6)
quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, r5, &(0x7f0000000080))
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3bff, @mcast1}, 0x1c)
r7 = syz_open_dev$MSR(&(0x7f00000003c0), 0xa, 0x0)
recvfrom$inet6(r1, &(0x7f0000000180)=""/84, 0x54, 0x40000021, &(0x7f0000001400)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
preadv(r7, 0x0, 0x0, 0x402, 0xd)
r8 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_STAT(r8, 0x2, &(0x7f0000000200)=""/159)
shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000340)=""/4096)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x20040801)

914.781911ms ago: executing program 4 (id=528):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='120\n', 0x4)

570.948453ms ago: executing program 5 (id=529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14)
write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)

400.45017ms ago: executing program 4 (id=530):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10)
listen(r1, 0x5)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84)

389.663322ms ago: executing program 2 (id=531):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='1\n', 0x2)

106.944545ms ago: executing program 4 (id=532):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r3, &(0x7f0000000500)='3\n', 0x2)

336.965µs ago: executing program 1 (id=533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_newroute={0x1c, 0x18, 0x405, 0x1, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}}, 0x1c}}, 0x0)

0s ago: executing program 2 (id=534):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="1a", 0x100, 0x0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)

kernel console output (not intermixed with test programs):

[   61.398820][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.424502][ T5282] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
[   61.948320][ T5362] ssh-keygen (5362) used greatest stack depth: 19240 bytes left
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
syzkaller login: [   85.959308][ T5606] cgroup: Unknown subsys name 'net'
[   86.071915][ T5606] cgroup: Unknown subsys name 'cpuset'
[   86.081425][ T5606] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.876130][ T5606] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.598456][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.601759][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.608033][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.622279][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.623059][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.636001][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.639160][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.645785][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.653836][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.660837][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.668380][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.673737][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.684176][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.690266][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.697678][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.702729][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.709379][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.716098][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.724468][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.731843][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.737207][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.748432][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.759480][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.767094][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.779456][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.788418][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.796130][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.804930][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.808463][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.813901][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.307496][   T30] cfg80211: failed to load regulatory.db
[   92.818145][   T51] Bluetooth: hci4: command tx timeout
[   92.818149][ T5626] Bluetooth: hci1: command tx timeout
[   92.886804][ T5626] Bluetooth: hci5: command tx timeout
[   92.886854][ T4937] Bluetooth: hci2: command tx timeout
[   92.893460][ T5638] Bluetooth: hci3: command tx timeout
[   92.898679][   T51] Bluetooth: hci0: command tx timeout
[   93.234464][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.243435][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.250990][ T5621] bridge_slave_0: entered allmulticast mode
[   93.260267][ T5621] bridge_slave_0: entered promiscuous mode
[   93.308927][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.316165][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.323433][ T5621] bridge_slave_1: entered allmulticast mode
[   93.331011][ T5621] bridge_slave_1: entered promiscuous mode
[   93.531824][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.598432][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.647689][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.654963][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.662233][ T5625] bridge_slave_0: entered allmulticast mode
[   93.670498][ T5625] bridge_slave_0: entered promiscuous mode
[   93.705914][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.713207][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.721296][ T5622] bridge_slave_0: entered allmulticast mode
[   93.729244][ T5622] bridge_slave_0: entered promiscuous mode
[   93.752036][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.759295][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.766660][ T5625] bridge_slave_1: entered allmulticast mode
[   93.774469][ T5625] bridge_slave_1: entered promiscuous mode
[   93.805380][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.812652][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.820231][ T5622] bridge_slave_1: entered allmulticast mode
[   93.828199][ T5622] bridge_slave_1: entered promiscuous mode
[   93.878077][ T5621] team0: Port device team_slave_0 added
[   93.956410][ T5621] team0: Port device team_slave_1 added
[   93.962197][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.969632][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.978570][ T5624] bridge_slave_0: entered allmulticast mode
[   93.986537][ T5624] bridge_slave_0: entered promiscuous mode
[   94.005906][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.013159][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.020426][ T5620] bridge_slave_0: entered allmulticast mode
[   94.028137][ T5620] bridge_slave_0: entered promiscuous mode
[   94.050987][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.074052][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.081323][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.089018][ T5624] bridge_slave_1: entered allmulticast mode
[   94.096808][ T5624] bridge_slave_1: entered promiscuous mode
[   94.107006][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.116266][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.123504][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.130930][ T5620] bridge_slave_1: entered allmulticast mode
[   94.138639][ T5620] bridge_slave_1: entered promiscuous mode
[   94.147108][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.154306][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.161662][ T5623] bridge_slave_0: entered allmulticast mode
[   94.169480][ T5623] bridge_slave_0: entered promiscuous mode
[   94.180007][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.218202][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.240325][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.248629][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.255883][ T5623] bridge_slave_1: entered allmulticast mode
[   94.263895][ T5623] bridge_slave_1: entered promiscuous mode
[   94.285201][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.292352][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.318433][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.395674][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.402807][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.429179][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.455630][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.480459][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.507022][ T5625] team0: Port device team_slave_0 added
[   94.516129][ T5625] team0: Port device team_slave_1 added
[   94.525510][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.537532][ T5622] team0: Port device team_slave_0 added
[   94.546619][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.572121][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.623554][ T5622] team0: Port device team_slave_1 added
[   94.645038][ T5620] team0: Port device team_slave_0 added
[   94.653820][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.676623][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.683684][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.709786][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.769650][ T5620] team0: Port device team_slave_1 added
[   94.816623][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.823629][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.849884][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.883236][ T5624] team0: Port device team_slave_0 added
[   94.888898][ T5638] Bluetooth: hci4: command tx timeout
[   94.895911][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.903540][ T5638] Bluetooth: hci1: command tx timeout
[   94.906157][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.939162][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.966602][ T5638] Bluetooth: hci5: command tx timeout
[   94.968493][ T5626] Bluetooth: hci2: command tx timeout
[   94.972212][ T5638] Bluetooth: hci0: command tx timeout
[   94.977468][ T4937] Bluetooth: hci3: command tx timeout
[   95.002781][ T5621] hsr_slave_0: entered promiscuous mode
[   95.010688][ T5621] hsr_slave_1: entered promiscuous mode
[   95.027636][ T5624] team0: Port device team_slave_1 added
[   95.034025][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.041312][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.067350][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.089145][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.096177][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.122172][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.135848][ T5623] team0: Port device team_slave_0 added
[   95.145052][ T5623] team0: Port device team_slave_1 added
[   95.205606][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.212730][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.239859][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.262652][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.269793][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.296179][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.309624][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.316638][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.342889][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.354985][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.362077][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.388571][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.455796][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.463290][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.489393][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.560016][ T5622] hsr_slave_0: entered promiscuous mode
[   95.566804][ T5622] hsr_slave_1: entered promiscuous mode
[   95.573558][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   95.579754][ T5622] Cannot create hsr debugfs directory
[   95.624718][ T5625] hsr_slave_0: entered promiscuous mode
[   95.631249][ T5625] hsr_slave_1: entered promiscuous mode
[   95.637680][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   95.643420][ T5625] Cannot create hsr debugfs directory
[   95.672714][ T5620] hsr_slave_0: entered promiscuous mode
[   95.679244][ T5620] hsr_slave_1: entered promiscuous mode
[   95.685573][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   95.691845][ T5620] Cannot create hsr debugfs directory
[   95.802247][ T5623] hsr_slave_0: entered promiscuous mode
[   95.809166][ T5623] hsr_slave_1: entered promiscuous mode
[   95.815356][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   95.821140][ T5623] Cannot create hsr debugfs directory
[   95.918036][ T5624] hsr_slave_0: entered promiscuous mode
[   95.924525][ T5624] hsr_slave_1: entered promiscuous mode
[   95.931168][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   95.936954][ T5624] Cannot create hsr debugfs directory
[   96.564134][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.579377][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.588568][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.599981][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.608348][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.619392][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.637180][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.647803][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.732875][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.744549][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.759357][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.771411][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.780794][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.791634][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.805604][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.816850][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.935957][ T5622] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   96.950969][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.960969][ T5622] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   96.968210][ T5638] Bluetooth: hci1: command tx timeout
[   96.968228][ T5626] Bluetooth: hci4: command tx timeout
[   96.983046][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.991511][ T5622] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.002179][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.028083][ T5622] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.040229][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.047895][ T5626] Bluetooth: hci2: command tx timeout
[   97.047935][ T5638] Bluetooth: hci3: command tx timeout
[   97.053327][   T51] Bluetooth: hci5: command tx timeout
[   97.059281][ T5626] Bluetooth: hci0: command tx timeout
[   97.109559][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.181456][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.192836][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.202002][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.214206][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.237381][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.249017][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.257495][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.268672][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.285403][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   97.348546][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.355861][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.368329][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.376312][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.463746][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.484273][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.495146][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.503886][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.515042][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.535205][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.547497][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.584058][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.597136][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.674152][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   97.739734][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.747122][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.771326][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.785558][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.794658][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.809208][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.832367][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.850930][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.862019][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.874491][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.884610][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.891874][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.069595][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.139133][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.212119][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   98.267624][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.274832][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.343795][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   98.359100][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.366566][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.423889][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.431112][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.472980][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.480206][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.505882][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.642958][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   98.691249][  T307] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.698400][  T307] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.725641][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.748726][  T307] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.755913][  T307] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.814087][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.947499][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   99.022561][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.029804][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.048801][ T5626] Bluetooth: hci1: command tx timeout
[   99.048873][ T5638] Bluetooth: hci4: command tx timeout
[   99.127095][ T5638] Bluetooth: hci0: command tx timeout
[   99.132925][ T5638] Bluetooth: hci2: command tx timeout
[   99.136433][ T5626] Bluetooth: hci5: command tx timeout
[   99.142340][ T5638] Bluetooth: hci3: command tx timeout
[   99.145386][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.157071][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.245691][ T5621] veth0_vlan: entered promiscuous mode
[   99.371110][ T5621] veth1_vlan: entered promiscuous mode
[   99.452290][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.622512][ T5621] veth0_macvtap: entered promiscuous mode
[   99.679943][ T5621] veth1_macvtap: entered promiscuous mode
[   99.822285][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.848215][ T5625] veth0_vlan: entered promiscuous mode
[   99.885796][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.931593][ T5625] veth1_vlan: entered promiscuous mode
[   99.979965][ T3355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.020883][ T3355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.047783][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.080139][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.331558][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.354291][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.379374][ T5625] veth0_macvtap: entered promiscuous mode
[  100.474379][ T5625] veth1_macvtap: entered promiscuous mode
[  100.575608][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.619185][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.681337][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.803202][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.838293][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.854392][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.856328][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.894231][ T3355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.943818][ T3355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.957822][ T3355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.997687][ T3324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.173976][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.194150][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.400232][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.413262][ T5623] veth0_vlan: entered promiscuous mode
[  101.420141][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.503583][ T5623] veth1_vlan: entered promiscuous mode
[  101.510566][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.517014][ T5622] veth0_vlan: entered promiscuous mode
[  101.523089][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.573008][ T5620] veth0_vlan: entered promiscuous mode
[  101.602045][ T5622] veth1_vlan: entered promiscuous mode
[  101.643614][ T5620] veth1_vlan: entered promiscuous mode
[  101.710848][ T5624] veth0_vlan: entered promiscuous mode
[  101.747164][ T5623] veth0_macvtap: entered promiscuous mode
[  101.779644][ T5623] veth1_macvtap: entered promiscuous mode
[  101.811650][ T5624] veth1_vlan: entered promiscuous mode
[  101.921112][ T5622] veth0_macvtap: entered promiscuous mode
[  101.944794][ T5622] veth1_macvtap: entered promiscuous mode
[  101.956951][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.978936][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.003406][ T5620] veth0_macvtap: entered promiscuous mode
[  102.050275][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.061805][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.076864][ T5620] veth1_macvtap: entered promiscuous mode
[  102.085009][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.099464][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.110939][ T5624] veth0_macvtap: entered promiscuous mode
[  102.131034][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.143813][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.157542][ T5624] veth1_macvtap: entered promiscuous mode
[  102.168242][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.212352][ T3324] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.223754][ T3324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.267807][ T3324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.295145][ T3324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.316094][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.368731][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.378271][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00
[  102.388109][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.397654][    T9] usb 3-1: Product: syz
[  102.405850][    T9] usb 3-1: Manufacturer: syz
[  102.408685][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.411794][    T9] usb 3-1: SerialNumber: syz
[  102.478375][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.492289][ T5868] Zero length message leads to an empty skb
[  102.515865][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.525269][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.551815][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.565036][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.593711][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.639968][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.653254][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.701196][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.710834][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.781948][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.913418][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.934441][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.088887][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.097378][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.281355][  T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.306656][  T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.562427][  T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.587323][  T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.671503][    T9] smsc95xx 3-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  103.688193][    T9] smsc95xx 3-1:1.0: probe with driver smsc95xx failed with error -71
[  103.714070][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.747634][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.793389][    T9] usb 3-1: USB disconnect, device number 2
[  103.841382][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.893647][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.063269][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.082987][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.651285][ T5900] netlink: 'syz.1.11': attribute type 2 has an invalid length.
[  104.850051][ T5900] : entered promiscuous mode
[  105.038179][ T5908] rdma_rxe: rxe_newlink: failed to add veth0
[  105.229113][  T932] IPVS: starting estimator thread 0...
[  105.336868][ T5918] IPVS: using max 26 ests per chain, 62400 per kthread
[  105.358537][ T5908] lo speed is unknown, defaulting to 1000
[  105.451841][ T5908] lo speed is unknown, defaulting to 1000
[  105.566136][ T5908] lo speed is unknown, defaulting to 1000
[  105.965065][ T5928] bridge0: port 3(syz_tun) entered blocking state
[  106.002744][ T5928] bridge0: port 3(syz_tun) entered disabled state
[  106.036121][ T5928] syz_tun: entered allmulticast mode
[  106.136743][ T5928] syz_tun: entered promiscuous mode
[  106.150719][ T5891] infiniband syz0: set active
[  106.180913][ T5891] infiniband syz0: added veth0
[  106.211244][ T5928] bridge0: port 3(syz_tun) entered blocking state
[  106.218671][ T5928] bridge0: port 3(syz_tun) entered forwarding state
[  106.248083][ T3355] rpcbind: server 127.0.0.1 not responding, timed out
[  106.310977][ T5891] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  106.329102][ T5891] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  106.346560][ T5891] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  106.429690][ T5928] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  106.457933][ T5937] smc: net device dummy0 applied user defined pnetid SYZ0
[  106.462986][ T5891] RDS/IB: syz0: added
[  106.488777][ T5891] smc: adding ib device syz0 with port count 1
[  106.511403][ T5937] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  106.517878][ T5891] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  108.001195][ T5980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.33'.
[  108.235871][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.5.35'.
[  108.299114][ T5986] tipc: Started in network mode
[  108.336794][ T5986] tipc: Node identity aaaaaaaaaa18, cluster identity 4711
[  108.396212][ T5986] tipc: Enabled bearer <eth:veth0>, priority 10
[  108.778689][ T5992] svc: failed to register lockdv1 RPC service (errno 111).
[  108.800252][ T5992] lockd_up: makesock failed, error=-111
[  108.848468][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.016372][ T5776] usb 3-1: Using ep0 maxpacket: 32
[  109.035220][ T5776] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  109.058480][ T5776] usb 3-1: config 0 has no interface number 0
[  109.065997][ T5992] svc: failed to register nfsdv3 RPC service (errno 111).
[  109.078802][ T5776] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.101227][ T5992] svc: failed to register nfsaclv3 RPC service (errno 111).
[  109.116567][ T5776] usb 3-1: config 0 interface 85 has no altsetting 0
[  109.124834][ T5992] failed to unregister tcp with rpcbind
[  109.139595][ T5992] svc: failed to register nfsdv3 RPC service (errno 97).
[  109.161029][ T5776] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  109.170387][ T5992] svc: failed to register nfsaclv3 RPC service (errno 97).
[  109.186602][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.220087][ T5776] usb 3-1: Product: syz
[  109.227987][ T5992] failed to unregister tcp with rpcbind
[  109.237868][ T5776] usb 3-1: Manufacturer: syz
[  109.250165][ T5776] usb 3-1: SerialNumber: syz
[  109.282636][ T5776] usb 3-1: config 0 descriptor??
[  109.526998][ T5631] tipc: Node number set to 11709098
[  109.536757][ T6001] NFSD: Failed to start, no listeners configured.
[  109.538274][ T5776] appletouch 3-1:0.85: Failed to read mode from device.
[  109.573815][ T5776] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  109.781278][ T5776] usb 3-1: USB disconnect, device number 3
[  109.788229][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.42'.
[  109.813773][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.42'.
[  109.823851][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.42'.
[  109.835289][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.42'.
[  109.852289][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.42'.
[  110.138209][ T6024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  111.310154][ T6037] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  111.481698][ T5908] infiniband syz1: set active
[  111.493408][ T5776] lo speed is unknown, defaulting to 1000
[  111.496454][ T5908] infiniband syz1: added lo
[  111.559921][ T5908] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  111.589821][ T5908] infiniband syz1: Couldn't open port 1
[  111.608844][ T5908] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  111.617790][ T6041] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  111.624594][ T5908] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  111.656152][ T5908] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  111.781255][ T6044] tipc: Started in network mode
[  111.791857][ T6044] tipc: Node identity 7f000001, cluster identity 4711
[  111.804574][ T5908] RDS/IB: syz1: added
[  111.811872][ T5908] smc: adding ib device syz1 with port count 1
[  111.815723][ T6044] tipc: New replicast peer: 127.0.0.1
[  111.820494][ T5908] smc:    ib device syz1 port 1 has no pnetid
[  111.843227][ T6044] tipc: Enabled bearer <udp:syz0>, priority 10
[  111.876094][    T9] lo speed is unknown, defaulting to 1000
[  111.902546][ T5908] lo speed is unknown, defaulting to 1000
[  112.015280][ T6051] syz0: rxe_newlink: already configured on veth0
[  112.053093][    T9] syz0: Port: 1 Link DOWN
[  112.156168][    T9] syz0: Port: 1 Link ACTIVE
[  112.630325][ T5908] lo speed is unknown, defaulting to 1000
[  112.681414][ T6063] bridge0: port 3(syz_tun) entered blocking state
[  112.690724][ T6063] bridge0: port 3(syz_tun) entered disabled state
[  112.697884][ T6063] syz_tun: entered allmulticast mode
[  112.705822][ T6063] syz_tun: entered promiscuous mode
[  112.712329][ T6063] bridge0: port 3(syz_tun) entered blocking state
[  112.718917][ T6063] bridge0: port 3(syz_tun) entered forwarding state
[  112.750081][ T6063] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  112.969302][ T5631] tipc: Node number set to 2130706433
[  112.995008][ T5908] lo speed is unknown, defaulting to 1000
[  113.116425][ T5754] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.312139][ T5754] usb 5-1: Using ep0 maxpacket: 32
[  113.538564][ T5754] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  113.588017][ T5754] usb 5-1: config 0 has no interface number 0
[  113.669553][ T5754] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  113.718271][ T5754] usb 5-1: config 0 interface 85 has no altsetting 0
[  113.749632][ T5754] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  113.789476][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.885611][ T6069] =======================================================
[  113.885611][ T6069] WARNING: The mand mount option has been deprecated and
[  113.885611][ T6069]          and is ignored by this kernel. Remove the mand
[  113.885611][ T6069]          option from the mount to silence this warning.
[  113.885611][ T6069] =======================================================
[  113.937618][ T5754] usb 5-1: Product: syz
[  114.036701][ T5754] usb 5-1: Manufacturer: syz
[  114.074853][ T5908] lo speed is unknown, defaulting to 1000
[  114.082340][ T5754] usb 5-1: SerialNumber: syz
[  114.111253][ T5754] usb 5-1: config 0 descriptor??
[  114.338242][ T5754] appletouch 5-1:0.85: Failed to read mode from device.
[  114.348294][ T5754] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  114.444188][ T5908] lo speed is unknown, defaulting to 1000
[  114.557369][ T5754] usb 5-1: USB disconnect, device number 2
[  115.101302][ T5908] lo speed is unknown, defaulting to 1000
[  115.458076][ T6084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  115.920891][ T6089] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  116.243423][ T6025] siw: device registration error -23
[  116.333886][ T6096] tipc: Started in network mode
[  116.376011][ T6096] tipc: Node identity 7f000001, cluster identity 4711
[  116.394563][ T6096] tipc: New replicast peer: 127.0.0.1
[  116.423995][ T6096] tipc: Enabled bearer <udp:syz0>, priority 10
[  117.411899][ T1346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.725899][ T6116] overlayfs: failed to resolve './file1/file0': -2
[  117.897814][ T6105] tipc: New replicast peer: 172.30.0.5
[  117.917910][ T6105] tipc: Enabled bearer <udp:syz2>, priority 10
[  117.944548][ T6106] bridge0: port 3(syz_tun) entered blocking state
[  117.974530][ T6106] bridge0: port 3(syz_tun) entered disabled state
[  118.013911][ T6106] syz_tun: entered allmulticast mode
[  118.059896][ T6106] syz_tun: entered promiscuous mode
[  118.087802][ T6106] bridge0: port 3(syz_tun) entered blocking state
[  118.094460][ T6106] bridge0: port 3(syz_tun) entered forwarding state
[  118.161404][ T5608] tipc: Node number set to 2130706433
[  118.398051][ T1346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.573488][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[  118.611846][ T1346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.645531][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[  118.673127][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[  118.730989][ T6137] rdma_rxe: rxe_newlink: failed to add veth0
[  118.763936][ T6137] rdma_rxe: rxe_newlink: failed to add veth1
[  119.090581][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.105177][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.116820][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.134499][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.142487][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.411772][ T1346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.479397][ T6150] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  120.096502][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  120.787537][ T6172] rdma_rxe: rxe_newlink: failed to add lo
[  120.880753][ T6172] smc: net device lo applied user defined pnetid SYZ0
[  121.299436][ T5626] Bluetooth: hci5: command tx timeout
[  121.896038][ T1346] bridge_slave_1: left allmulticast mode
[  121.922509][ T6194] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  121.968293][ T1346] bridge_slave_1: left promiscuous mode
[  122.073931][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.227606][ T1346] bridge_slave_0: left allmulticast mode
[  122.327352][ T1346] bridge_slave_0: left promiscuous mode
[  122.342529][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.929365][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.942001][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.953464][ T1346] bond0 (unregistering): Released all slaves
[  122.975310][ T6185] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.367236][ T5626] Bluetooth: hci5: command tx timeout
[  123.433208][ T6225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  124.856617][ T6230] NFSD: Unable to initialize client recovery tracking! (-110)
[  124.946528][ T6230] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  125.069360][ T6230] NFSD: starting 90-second grace period (net f0000456)
[  125.456522][ T5626] Bluetooth: hci5: command tx timeout
[  126.036463][   T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  126.198077][   T30] usb 6-1: Using ep0 maxpacket: 32
[  126.208990][   T30] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  126.220015][   T30] usb 6-1: config 0 has no interface number 0
[  126.248033][   T30] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.314287][   T30] usb 6-1: config 0 interface 85 has no altsetting 0
[  126.345992][   T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  126.378267][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.406199][   T30] usb 6-1: Product: syz
[  126.427772][   T30] usb 6-1: Manufacturer: syz
[  126.484797][   T30] usb 6-1: SerialNumber: syz
[  126.746622][   T30] usb 6-1: config 0 descriptor??
[  126.748598][ T6249] NFSD: Failed to start, no listeners configured.
[  126.768633][ T6266] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  127.167164][   T30] appletouch 6-1:0.85: Failed to read mode from device.
[  127.191759][   T30] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  127.369981][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  127.406197][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  127.416614][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  127.427740][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  127.435216][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  127.435706][ T6273] tipc: New replicast peer: 172.30.0.2
[  127.457210][ T6273] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.590871][ T5626] Bluetooth: hci5: command tx timeout
[  127.902289][   T30] usb 6-1: USB disconnect, device number 2
[  128.191680][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[  128.230376][ T6282] netlink: 52 bytes leftover after parsing attributes in process `syz.2.108'.
[  128.265973][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'.
[  128.759174][ T6145] lo speed is unknown, defaulting to 1000
[  128.798428][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'.
[  128.904827][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'.
[  129.931755][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'.
[  129.941071][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'.
[  130.228300][ T6328] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  131.746592][ T6327] NFSD: Unable to initialize client recovery tracking! (-110)
[  131.756468][ T6327] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  131.768984][ T6327] NFSD: starting 90-second grace period (net f00003cb)
[  132.248727][ T6349] tipc: Started in network mode
[  132.253716][ T6349] tipc: Node identity ac14140f, cluster identity 4711
[  132.277550][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  132.288718][ T6349] tipc: New replicast peer: 172.30.0.3
[  132.306699][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  132.320215][ T6349] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.245793][ T6366] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  133.416416][ T5754] tipc: Node number set to 2886997007
[  133.966445][ T5608] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  134.006179][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  134.138198][ T5608] usb 2-1: Using ep0 maxpacket: 32
[  134.157749][ T5608] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  134.188103][ T5608] usb 2-1: config 0 has no interface number 0
[  134.197876][ T5608] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.212414][ T5608] usb 2-1: config 0 interface 85 has no altsetting 0
[  134.222753][ T5608] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  134.241183][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.263852][ T5608] usb 2-1: Product: syz
[  134.273125][ T5608] usb 2-1: Manufacturer: syz
[  134.285887][ T5608] usb 2-1: SerialNumber: syz
[  134.327335][ T5608] usb 2-1: config 0 descriptor??
[  134.486643][ T6356] NFSD: Unable to initialize client recovery tracking! (-110)
[  134.512454][ T6356] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  134.526045][ T6356] NFSD: starting 90-second grace period (net f000051a)
[  134.570375][ T5608] appletouch 2-1:0.85: Failed to read mode from device.
[  134.595042][ T5608] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  134.792466][ T5608] usb 2-1: USB disconnect, device number 2
[  136.169394][ T1346] hsr_slave_0: left promiscuous mode
[  136.196547][ T1346] hsr_slave_1: left promiscuous mode
[  136.220783][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.249387][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.317274][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.352502][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.443045][ T1346] veth1_macvtap: left promiscuous mode
[  136.459451][ T1346] veth0_macvtap: left promiscuous mode
[  136.471827][ T1346] veth1_vlan: left promiscuous mode
[  136.491761][ T1346] veth0_vlan: left promiscuous mode
[  138.264528][ T6446] NFSD: Failed to start, no listeners configured.
[  138.478739][ T1346] team0 (unregistering): Port device team_slave_1 removed
[  138.540610][ T1346] team0 (unregistering): Port device team_slave_0 removed
[  139.531228][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  139.543698][ T6469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.153'.
[  140.118813][ T6458] ceph: No mds server is up or the cluster is laggy
[  140.126558][ T5787] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  141.441338][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.592893][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.652306][ T6145] bridge_slave_0: entered allmulticast mode
[  141.681614][ T6145] bridge_slave_0: entered promiscuous mode
[  141.734948][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.762360][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.781876][ T6145] bridge_slave_1: entered allmulticast mode
[  141.809658][ T6145] bridge_slave_1: entered promiscuous mode
[  142.291999][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.352388][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.556402][ T5787] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.116445][ T5787] usb 3-1: Using ep0 maxpacket: 32
[  143.157640][ T6537] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  143.183822][ T5787] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  143.238601][ T5787] usb 3-1: config 0 has no interface number 0
[  143.263975][ T5787] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.287521][ T5787] usb 3-1: config 0 interface 85 has no altsetting 0
[  143.320247][ T5787] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  143.331959][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.353188][ T5787] usb 3-1: Product: syz
[  143.362749][ T5787] usb 3-1: Manufacturer: syz
[  143.374894][ T5787] usb 3-1: SerialNumber: syz
[  143.401592][ T6145] team0: Port device team_slave_0 added
[  143.445386][ T5787] usb 3-1: config 0 descriptor??
[  143.484888][ T6145] team0: Port device team_slave_1 added
[  143.520601][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  143.663869][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.672628][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.709765][ T5787] appletouch 3-1:0.85: Failed to read mode from device.
[  143.717784][ T5787] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  143.731993][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.801941][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.831542][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.888243][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.921181][ T6548] NFSD: Failed to start, no listeners configured.
[  144.114889][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  144.133816][ T5787] usb 3-1: USB disconnect, device number 4
[  144.303287][ T6556] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  144.422971][ T6145] hsr_slave_0: entered promiscuous mode
[  144.474542][ T6145] hsr_slave_1: entered promiscuous mode
[  144.508183][ T6145] debugfs: 'hsr0' already exists in 'hsr'
[  144.538557][ T6145] Cannot create hsr debugfs directory
[  146.302192][ T6602] netlink: 108 bytes leftover after parsing attributes in process `syz.1.186'.
[  146.308221][ T6600] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  147.030387][ T6145] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.114837][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  147.169179][ T6145] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.223768][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  147.249558][ T6145] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.332636][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  147.348540][ T6145] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  147.367649][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  147.410574][ T6621] bridge0: port 4(dummy0) entered blocking state
[  147.425051][ T6623] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  147.438679][ T6621] bridge0: port 4(dummy0) entered disabled state
[  147.454557][ T6621] dummy0: entered allmulticast mode
[  147.473215][ T6621] dummy0: entered promiscuous mode
[  147.526429][ T6621] bridge0: port 4(dummy0) entered blocking state
[  147.532984][ T6621] bridge0: port 4(dummy0) entered forwarding state
[  147.556124][ T6616] bridge0: port 4(dummy0) entered blocking state
[  147.580001][ T6616] bridge0: port 4(dummy0) entered disabled state
[  147.593822][ T6616] dummy0: entered allmulticast mode
[  147.616853][ T6616] dummy0: entered promiscuous mode
[  147.666037][ T6616] bridge0: port 4(dummy0) entered blocking state
[  147.672532][ T6616] bridge0: port 4(dummy0) entered forwarding state
[  147.729567][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  148.229724][ T6612] NFSD: Unable to initialize client recovery tracking! (-110)
[  148.276149][ T6612] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  148.635440][ T6612] NFSD: starting 90-second grace period (net f000051f)
[  148.809675][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.893385][ T6145] 8021q: adding VLAN 0 to HW filter on device team0
[  148.953004][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.960265][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.049711][ T5787] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  149.068348][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.075557][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.236521][ T5787] usb 5-1: Using ep0 maxpacket: 32
[  149.266125][ T5787] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  149.280646][ T5787] usb 5-1: config 0 has no interface number 0
[  149.306190][ T5787] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  149.349700][ T5787] usb 5-1: config 0 interface 85 has no altsetting 0
[  149.373487][ T5787] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  149.393437][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.435777][ T5787] usb 5-1: Product: syz
[  149.454001][ T5787] usb 5-1: Manufacturer: syz
[  149.480563][ T5787] usb 5-1: SerialNumber: syz
[  149.518533][ T5787] usb 5-1: config 0 descriptor??
[  149.545203][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'.
[  149.993821][ T5787] appletouch 5-1:0.85: Failed to read mode from device.
[  150.025245][ T5787] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  150.823790][ T5787] usb 5-1: USB disconnect, device number 3
[  151.063458][ T6685] rdma_rxe: rxe_newlink: failed to add lo
[  152.874212][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.089234][ T5776] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  153.319705][ T5776] usb 6-1: Using ep0 maxpacket: 32
[  153.348538][ T5776] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  153.392885][ T5776] usb 6-1: config 0 has no interface number 0
[  153.428337][ T5776] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.457642][ T5776] usb 6-1: config 0 interface 85 has no altsetting 0
[  153.479212][ T5776] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  153.496605][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.509734][ T5776] usb 6-1: Product: syz
[  153.518146][ T5776] usb 6-1: Manufacturer: syz
[  153.522787][ T5776] usb 6-1: SerialNumber: syz
[  153.554876][ T5776] usb 6-1: config 0 descriptor??
[  153.801454][ T6718] NFSD: Unable to initialize client recovery tracking! (-110)
[  153.888148][ T6718] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  153.998524][ T6718] NFSD: starting 90-second grace period (net f00003cb)
[  154.548827][ T5776] appletouch 6-1:0.85: Failed to read mode from device.
[  154.556189][ T5776] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  154.739315][ T6145] veth0_vlan: entered promiscuous mode
[  154.794858][ T6145] veth1_vlan: entered promiscuous mode
[  154.823050][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  154.831764][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  154.841039][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  154.849093][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  154.856857][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  154.871760][ T5776] usb 6-1: USB disconnect, device number 3
[  155.507637][ T6145] veth0_macvtap: entered promiscuous mode
[  155.565234][ T6145] veth1_macvtap: entered promiscuous mode
[  155.641847][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.679338][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.739394][ T3355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.768827][ T3355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.786197][ T3355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.891931][ T6764] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  155.915370][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[  155.957903][ T3355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.958563][ T6765] netlink: 92 bytes leftover after parsing attributes in process `syz.0.232'.
[  156.124419][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.234'.
[  156.368654][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.387891][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.451409][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.514779][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.590956][ T6779] atomic_op ffff88805033a198 conn xmit_atomic 0000000000000000
[  156.851187][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[  157.219389][ T6792] tipc: Started in network mode
[  157.320638][ T6792] tipc: Node identity ac14140f, cluster identity 4711
[  157.580917][ T6792] tipc: New replicast peer: 172.30.0.1
[  157.652683][ T6792] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.720978][ T6797] syz.6.243 uses obsolete (PF_INET,SOCK_PACKET)
[  157.763039][ T1346] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.981931][ T6807] netlink: 260 bytes leftover after parsing attributes in process `syz.4.246'.
[  158.188294][ T5754] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  158.226170][ T5754] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  158.496898][ T5754] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  158.776446][   T24] tipc: Node number set to 2886997007
[  158.975209][ T6811] ceph: No mds server is up or the cluster is laggy
[  159.297304][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  159.634499][    T9] usb 3-1: Using ep0 maxpacket: 32
[  159.702304][    T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  159.765732][    T9] usb 3-1: config 0 has no interface number 0
[  159.821939][    T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  159.942087][    T9] usb 3-1: config 0 interface 85 has no altsetting 0
[  160.195725][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  160.252781][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.278283][    T9] usb 3-1: Product: syz
[  160.289027][    T9] usb 3-1: Manufacturer: syz
[  160.304993][    T9] usb 3-1: SerialNumber: syz
[  160.337256][    T9] usb 3-1: config 0 descriptor??
[  160.550624][    T9] appletouch 3-1:0.85: Failed to read mode from device.
[  160.568184][    T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  160.892603][ T6855] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  160.976991][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  161.134920][    T9] usb 3-1: USB disconnect, device number 5
[  161.266796][ T6858] tipc: Started in network mode
[  161.273088][ T6858] tipc: Node identity ac14140f, cluster identity 4711
[  161.289107][ T6858] tipc: New replicast peer: 172.30.0.7
[  161.309019][ T6858] tipc: Enabled bearer <udp:syz2>, priority 10
[  161.675095][ T6863] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  162.416657][    T9] tipc: Node number set to 2886997007
[  164.886927][    C0] tipc: RX(7f000001): key[1] is activated
[  164.902432][ T6931] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  165.336897][ T6933] netlink: 'syz.2.277': attribute type 13 has an invalid length.
[  165.548281][ T6802] NFSD: Unable to initialize client recovery tracking! (-110)
[  165.562651][ T6802] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  165.593601][ T6802] NFSD: starting 90-second grace period (net f000051a)
[  165.626376][ T5761] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  165.788618][ T5761] usb 7-1: Using ep0 maxpacket: 32
[  165.807702][ T5761] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  165.843018][ T5761] usb 7-1: config 0 has no interface number 0
[  165.871762][ T5761] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.907442][ T5761] usb 7-1: config 0 interface 85 has no altsetting 0
[  165.922426][ T6951] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  165.962912][ T5761] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  165.981803][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.987219][ T6949] netlink: 'syz.4.281': attribute type 37 has an invalid length.
[  166.001768][ T5761] usb 7-1: Product: syz
[  166.015326][ T6954] tipc: New replicast peer: 127.0.0.1
[  166.015494][ T5761] usb 7-1: Manufacturer: syz
[  166.024516][ T6954] tipc: Enabled bearer <udp:syz0>, priority 10
[  166.045895][ T5761] usb 7-1: SerialNumber: syz
[  166.075835][ T5761] usb 7-1: config 0 descriptor??
[  166.718830][ T5761] appletouch 7-1:0.85: Failed to read mode from device.
[  167.225594][ T5761] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  167.251425][ T5761] usb 7-1: USB disconnect, device number 2
[  167.700403][ T6975] overlayfs: failed to resolve './file1/file0': -2
[  168.344022][ T6989] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  168.588350][ T6994] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  169.256591][ T6968] NFSD: Unable to initialize client recovery tracking! (-110)
[  169.282435][ T6968] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  169.349278][ T6968] NFSD: starting 90-second grace period (net f000051a)
[  169.379975][ T7004] FAULT_INJECTION: forcing a failure.
[  169.379975][ T7004] name failslab, interval 1, probability 100, space 0, times 1
[  169.394305][   T65] FAULT_INJECTION: forcing a failure.
[  169.394305][   T65] name failslab, interval 1, probability 100, space 0, times 1
[  169.398078][   T37] FAULT_INJECTION: forcing a failure.
[  169.398078][   T37] name failslab, interval 1, probability 100, space 0, times 1
[  169.407475][    C1] FAULT_INJECTION: forcing a failure.
[  169.407475][    C1] name failslab, interval 1, probability 100, space 0, times 1
[  169.407486][    C0] FAULT_INJECTION: forcing a failure.
[  169.407486][    C0] name failslab, interval 1, probability 100, space 0, times 1
[  169.407525][    C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  169.407566][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  169.407589][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  169.407644][    C1] Call Trace:
[  169.407655][    C1]  <IRQ>
[  169.407668][    C1]  dump_stack_lvl+0x100/0x190
[  169.407712][    C1]  should_fail_ex.cold+0x5/0xa
[  169.407753][    C1]  should_failslab+0xc2/0x120
[  169.407792][    C1]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.407853][    C1]  ? __alloc_skb+0x140/0x710
[  169.407908][    C1]  __alloc_skb+0x140/0x710
[  169.407951][    C1]  ? __alloc_skb+0x5b7/0x710
[  169.407997][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  169.408044][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.408088][    C1]  ? lock_acquire+0x1b9/0x370
[  169.408136][    C1]  __netdev_alloc_skb+0x7a/0x960
[  169.408190][    C1]  __ieee80211_beacon_get+0xba1/0x1ee0
[  169.408245][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.408289][    C1]  ? __lock_acquire+0x49f/0x1a40
[  169.408335][    C1]  ieee80211_beacon_get_tim+0xa6/0x280
[  169.408388][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  169.408448][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.408499][    C1]  mac80211_hwsim_beacon_tx+0x4c7/0xa00
[  169.408558][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.408607][    C1]  __iterate_interfaces+0x2e6/0x650
[  169.408654][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.408710][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.408763][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  169.408819][    C1]  mac80211_hwsim_beacon+0xe5/0x2a0
[  169.408860][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.408900][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  169.408974][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  169.409035][    C1]  handle_softirqs+0x1ea/0x9b0
[  169.409087][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  169.409131][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.409174][    C1]  ? _raw_spin_unlock+0x28/0x50
[  169.409210][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.409254][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  169.409317][    C1]  __irq_exit_rcu+0x162/0x210
[  169.409360][    C1]  irq_exit_rcu+0x9/0x30
[  169.409402][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  169.409449][    C1]  </IRQ>
[  169.409461][    C1]  <TASK>
[  169.409473][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.409514][    C1] RIP: 0010:vprintk_emit+0x553/0x6b0
[  169.409571][    C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 18 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 a6 a8 21 00 48 85 ed 0f 85 27 01 00 00 <e8> f8 ad 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
[  169.409605][    C1] RSP: 0018:ffffc90000ad7890 EFLAGS: 00000293
[  169.409631][    C1] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e8923a
[  169.409654][    C1] RDX: ffff888021693e00 RSI: ffffffff81e89244 RDI: ffff888021693e00
[  169.409677][    C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  169.409698][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200015af14
[  169.409720][    C1] R13: 0000000000000200 R14: ffff88801dfc5d00 R15: ffffc90000ad7958
[  169.409754][    C1]  ? vprintk_emit+0x66a/0x6b0
[  169.409807][    C1]  ? vprintk_emit+0x674/0x6b0
[  169.409868][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  169.409934][    C1]  _printk+0xcf/0x110
[  169.409970][    C1]  ? __pfx__printk+0x10/0x10
[  169.410003][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.410056][    C1]  ? __pfx____ratelimit+0x10/0x10
[  169.410097][    C1]  ? wakeup_preempt_fair+0xcf/0x1060
[  169.410151][    C1]  should_fail_ex+0x4e4/0x640
[  169.410212][    C1]  should_failslab+0xc2/0x120
[  169.410249][    C1]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.410311][    C1]  ? __alloc_skb+0x140/0x710
[  169.410364][    C1]  __alloc_skb+0x140/0x710
[  169.410408][    C1]  ? __alloc_skb+0x5b7/0x710
[  169.410457][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  169.410502][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  169.410551][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  169.410609][    C1]  nsim_dev_trap_report_work+0x2af/0xd20
[  169.410680][    C1]  process_one_work+0xa23/0x1940
[  169.410733][    C1]  ? __pfx_process_one_work+0x10/0x10
[  169.410767][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.410824][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.410874][    C1]  worker_thread+0x5ef/0xe50
[  169.410920][    C1]  ? __pfx_worker_thread+0x10/0x10
[  169.410958][    C1]  ? kthread+0x13a/0x450
[  169.411012][    C1]  ? __pfx_worker_thread+0x10/0x10
[  169.411045][    C1]  kthread+0x370/0x450
[  169.411100][    C1]  ? __pfx_kthread+0x10/0x10
[  169.411160][    C1]  ret_from_fork+0x72b/0xd50
[  169.411210][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  169.411260][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.411304][    C1]  ? __switch_to+0x800/0x10f0
[  169.411361][    C1]  ? __switch_to_asm+0x39/0x70
[  169.411411][    C1]  ? __pfx_kthread+0x10/0x10
[  169.411475][    C1]  ret_from_fork_asm+0x1a/0x30
[  169.411546][    C1]  </TASK>
[  169.411564][    C0] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  169.411606][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  169.411630][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  169.411679][    C0] Call Trace:
[  169.411690][    C0]  <IRQ>
[  169.411703][    C0]  dump_stack_lvl+0x100/0x190
[  169.411745][    C0]  should_fail_ex.cold+0x5/0xa
[  169.411788][    C0]  should_failslab+0xc2/0x120
[  169.411827][    C0]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.411892][    C0]  ? __alloc_skb+0x140/0x710
[  169.411954][    C0]  __alloc_skb+0x140/0x710
[  169.412001][    C0]  ? __alloc_skb+0x5b7/0x710
[  169.412049][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  169.412099][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.412145][    C0]  ? lock_acquire+0x1b9/0x370
[  169.412195][    C0]  __netdev_alloc_skb+0x7a/0x960
[  169.412252][    C0]  __ieee80211_beacon_get+0xba1/0x1ee0
[  169.412310][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.412356][    C0]  ? __lock_acquire+0x49f/0x1a40
[  169.412405][    C0]  ieee80211_beacon_get_tim+0xa6/0x280
[  169.412461][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  169.412521][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.412575][    C0]  mac80211_hwsim_beacon_tx+0x4c7/0xa00
[  169.412636][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.412684][    C0]  __iterate_interfaces+0x2e6/0x650
[  169.412731][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.412791][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.412846][    C0]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  169.412904][    C0]  mac80211_hwsim_beacon+0xe5/0x2a0
[  169.412952][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.412994][    C0]  __hrtimer_run_queues+0x462/0x9c0
[  169.413066][    C0]  hrtimer_run_softirq+0x17d/0x2c0
[  169.413127][    C0]  handle_softirqs+0x1ea/0x9b0
[  169.413180][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  169.413226][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.413271][    C0]  ? _raw_spin_unlock+0x28/0x50
[  169.413308][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.413353][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  169.413418][    C0]  __irq_exit_rcu+0x162/0x210
[  169.413464][    C0]  irq_exit_rcu+0x9/0x30
[  169.413508][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  169.413554][    C0]  </IRQ>
[  169.413565][    C0]  <TASK>
[  169.413579][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.413622][    C0] RIP: 0010:console_flush_one_record+0xac3/0xe50
[  169.413679][    C0] Code: 00 e8 71 23 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf cf 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
[  169.413715][    C0] RSP: 0018:ffffc9000202f698 EFLAGS: 00000293
[  169.413743][    C0] RAX: ffffffff8f9af418 RBX: ffffffff8f9af3c0 RCX: ffffffff81e86a01
[  169.413768][    C0] RDX: ffff88801dfc5d00 RSI: ffffffff81e86a0f RDI: ffff88801dfc5d00
[  169.413793][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  169.413815][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000bbd
[  169.413838][    C0] R13: ffffffff8f9af418 R14: ffffc9000202f718 R15: dffffc0000000000
[  169.413875][    C0]  ? console_flush_one_record+0xab1/0xe50
[  169.413931][    C0]  ? console_flush_one_record+0xabf/0xe50
[  169.413996][    C0]  ? console_flush_one_record+0xabf/0xe50
[  169.414060][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  169.414115][    C0]  ? __lock_acquire+0xd5b/0x1a40
[  169.414168][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.414214][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  169.414281][    C0]  console_unlock+0x103/0x260
[  169.414336][    C0]  ? __pfx_console_unlock+0x10/0x10
[  169.414391][    C0]  ? __entry_text_end+0x1020b6/0x1020b9
[  169.414441][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.414488][    C0]  ? _printk+0xcf/0x110
[  169.414532][    C0]  vprintk_emit+0x407/0x6b0
[  169.414589][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  169.414645][    C0]  ? __pfx_call_function_single_prep_ipi+0x10/0x10
[  169.414714][    C0]  ? generic_exec_single+0xb4/0x460
[  169.414764][    C0]  _printk+0xcf/0x110
[  169.414800][    C0]  ? __pfx__printk+0x10/0x10
[  169.414835][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.414890][    C0]  ? __pfx____ratelimit+0x10/0x10
[  169.414934][    C0]  ? wakeup_preempt_fair+0xcf/0x1060
[  169.414995][    C0]  should_fail_ex+0x4e4/0x640
[  169.415059][    C0]  should_failslab+0xc2/0x120
[  169.415097][    C0]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.415161][    C0]  ? __alloc_skb+0x140/0x710
[  169.415217][    C0]  __alloc_skb+0x140/0x710
[  169.415262][    C0]  ? __alloc_skb+0x5b7/0x710
[  169.415309][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  169.415355][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  169.415407][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[  169.415467][    C0]  nsim_dev_trap_report_work+0x2af/0xd20
[  169.415542][    C0]  process_one_work+0xa23/0x1940
[  169.415598][    C0]  ? __pfx_process_one_work+0x10/0x10
[  169.415634][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.415693][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.415746][    C0]  worker_thread+0x5ef/0xe50
[  169.415795][    C0]  ? __pfx_worker_thread+0x10/0x10
[  169.415834][    C0]  ? kthread+0x13a/0x450
[  169.415891][    C0]  ? __pfx_worker_thread+0x10/0x10
[  169.415926][    C0]  kthread+0x370/0x450
[  169.415987][    C0]  ? __pfx_kthread+0x10/0x10
[  169.416049][    C0]  ret_from_fork+0x72b/0xd50
[  169.416101][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  169.416153][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.416198][    C0]  ? __switch_to+0x800/0x10f0
[  169.416258][    C0]  ? __switch_to_asm+0x39/0x70
[  169.416313][    C0]  ? __pfx_kthread+0x10/0x10
[  169.416375][    C0]  ret_from_fork_asm+0x1a/0x30
[  169.416450][    C0]  </TASK>
[  169.417220][   T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  169.417262][   T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  169.417284][   T65] Workqueue: events_unbound nsim_dev_trap_report_work
[  169.417332][   T65] Call Trace:
[  169.417343][   T65]  <TASK>
[  169.417355][   T65]  dump_stack_lvl+0x100/0x190
[  169.417397][   T65]  should_fail_ex.cold+0x5/0xa
[  169.417437][   T65]  should_failslab+0xc2/0x120
[  169.417474][   T65]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.417534][   T65]  ? __alloc_skb+0x140/0x710
[  169.417587][   T65]  __alloc_skb+0x140/0x710
[  169.417630][   T65]  ? __alloc_skb+0x5b7/0x710
[  169.417674][   T65]  ? __pfx___alloc_skb+0x10/0x10
[  169.417717][   T65]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  169.417765][   T65]  ? do_raw_spin_unlock+0x145/0x1e0
[  169.417823][   T65]  nsim_dev_trap_report_work+0x2af/0xd20
[  169.417893][   T65]  process_one_work+0xa23/0x1940
[  169.417950][   T65]  ? __pfx_process_one_work+0x10/0x10
[  169.417984][   T65]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.418041][   T65]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.418090][   T65]  worker_thread+0x5ef/0xe50
[  169.418137][   T65]  ? __pfx_worker_thread+0x10/0x10
[  169.418174][   T65]  ? kthread+0x13a/0x450
[  169.418227][   T65]  ? __pfx_worker_thread+0x10/0x10
[  169.418262][   T65]  kthread+0x370/0x450
[  169.418316][   T65]  ? __pfx_kthread+0x10/0x10
[  169.418374][   T65]  ret_from_fork+0x72b/0xd50
[  169.418423][   T65]  ? __pfx_ret_from_fork+0x10/0x10
[  169.418472][   T65]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.418514][   T65]  ? __switch_to+0x800/0x10f0
[  169.418569][   T65]  ? __switch_to_asm+0x39/0x70
[  169.418618][   T65]  ? __pfx_kthread+0x10/0x10
[  169.418676][   T65]  ret_from_fork_asm+0x1a/0x30
[  169.418747][   T65]  </TASK>
[  169.494047][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(full) 
[  169.494093][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  169.494114][ T7004] Call Trace:
[  169.494126][ T7004]  <TASK>
[  169.494139][ T7004]  dump_stack_lvl+0x100/0x190
[  169.494187][ T7004]  should_fail_ex.cold+0x5/0xa
[  169.494223][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.494277][ T7004]  should_failslab+0xc2/0x120
[  169.494315][ T7004]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  169.494374][ T7004]  ? __alloc_skb+0x5b7/0x710
[  169.494420][ T7004]  ? __alloc_skb+0x140/0x710
[  169.494473][ T7004]  __alloc_skb+0x140/0x710
[  169.494516][ T7004]  ? __alloc_skb+0x5b7/0x710
[  169.494561][ T7004]  ? __pfx___alloc_skb+0x10/0x10
[  169.494610][ T7004]  ? __pfx_widen_string+0x10/0x10
[  169.494652][ T7004]  alloc_skb_with_frags+0xdd/0x760
[  169.494705][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.494748][ T7004]  ? widen_string+0xdb/0x2f0
[  169.494781][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.494826][ T7004]  ? __pfx_widen_string+0x10/0x10
[  169.494865][ T7004]  sock_alloc_send_pskb+0x801/0x980
[  169.494917][ T7004]  ? format_decode+0x1ad/0xdd0
[  169.494962][ T7004]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  169.495007][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.495050][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.495092][ T7004]  ? put_dec_trunc8+0x28b/0x370
[  169.495148][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.495197][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.495240][ T7004]  ? __lock_acquire+0x49f/0x1a40
[  169.495289][ T7004]  __ip_append_data+0x20d3/0x44d0
[  169.495343][ T7004]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  169.495383][ T7004]  ? find_held_lock+0x2b/0x80
[  169.495448][ T7004]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[  169.495504][ T7004]  ? __pfx___ip_append_data+0x10/0x10
[  169.495544][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.495590][ T7004]  ? ip_route_output_key_hash_rcu+0x1f8e/0x2870
[  169.495657][ T7004]  ip_make_skb+0x28b/0x310
[  169.495707][ T7004]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  169.495754][ T7004]  ? __pfx_ip_make_skb+0x10/0x10
[  169.495797][ T7004]  ? ip_route_output_key_hash+0x14c/0x2b0
[  169.495878][ T7004]  ? udp_sendmsg+0x171c/0x2720
[  169.495917][ T7004]  udp_sendmsg+0x171c/0x2720
[  169.495979][ T7004]  ? __pfx_udp_sendmsg+0x10/0x10
[  169.496023][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496073][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496119][ T7004]  ? __pfx___might_resched+0x10/0x10
[  169.496169][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496212][ T7004]  ? aa_sk_perm+0x309/0xaa0
[  169.496266][ T7004]  ? __pfx_aa_sk_perm+0x10/0x10
[  169.496324][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496367][ T7004]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  169.496407][ T7004]  ? __pfx_udp_sendmsg+0x10/0x10
[  169.496450][ T7004]  inet_sendmsg+0x105/0x140
[  169.496503][ T7004]  __sys_sendto+0x453/0x4e0
[  169.496547][ T7004]  ? __pfx_inet_sendmsg+0x10/0x10
[  169.496599][ T7004]  ? __pfx___sys_sendto+0x10/0x10
[  169.496658][ T7004]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  169.496723][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496766][ T7004]  ? xfd_validate_state+0x129/0x190
[  169.496822][ T7004]  __x64_sys_sendto+0xe0/0x1c0
[  169.496866][ T7004]  ? do_syscall_64+0x90/0x870
[  169.496910][ T7004]  ? srso_alias_return_thunk+0x5/0xfbef5
[  169.496960][ T7004]  ? lockdep_hardirqs_on+0x78/0x100
[  169.497005][ T7004]  do_syscall_64+0x115/0x870
[  169.497055][ T7004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.497093][ T7004] RIP: 0033:0x7f810a39de99
[  169.497122][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.497156][ T7004] RSP: 002b:00007f810b1ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  169.497190][ T7004] RAX: ffffffffffffffda RBX: 00007f810a625fa0 RCX: 00007f810a39de99
[  169.497213][ T7004] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005
[  169.497236][ T7004] RBP: 00007f810a433eaf R08: 0000200000000300 R09: 0000000000000010
[  169.497259][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.497280][ T7004] R13: 00007f810a626038 R14: 00007f810a625fa0 R15: 00007ffcf0c1eba8
[  169.497327][ T7004]  </TASK>
[  170.460688][ T7012] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  170.462012][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  170.462053][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  170.462076][   T37] Workqueue: events_unbound nsim_dev_trap_report_work
[  170.462130][   T37] Call Trace:
[  170.462142][   T37]  <TASK>
[  170.462155][   T37]  dump_stack_lvl+0x100/0x190
[  170.462197][   T37]  should_fail_ex.cold+0x5/0xa
[  170.462238][   T37]  should_failslab+0xc2/0x120
[  170.462277][   T37]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  170.462345][   T37]  ? __alloc_skb+0x140/0x710
[  170.462400][   T37]  __alloc_skb+0x140/0x710
[  170.462444][   T37]  ? __alloc_skb+0x5b7/0x710
[  170.462488][   T37]  ? __pfx___alloc_skb+0x10/0x10
[  170.462531][   T37]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  170.462581][   T37]  ? do_raw_spin_unlock+0x145/0x1e0
[  170.462638][   T37]  nsim_dev_trap_report_work+0x2af/0xd20
[  170.462709][   T37]  process_one_work+0xa23/0x1940
[  170.462764][   T37]  ? __pfx_process_one_work+0x10/0x10
[  170.462798][   T37]  ? srso_alias_return_thunk+0x5/0xfbef5
[  170.462855][   T37]  ? srso_alias_return_thunk+0x5/0xfbef5
[  170.462905][   T37]  worker_thread+0x5ef/0xe50
[  170.462952][   T37]  ? __pfx_worker_thread+0x10/0x10
[  170.462989][   T37]  ? kthread+0x13a/0x450
[  170.463042][   T37]  ? __pfx_worker_thread+0x10/0x10
[  170.463075][   T37]  kthread+0x370/0x450
[  170.463129][   T37]  ? __pfx_kthread+0x10/0x10
[  170.463187][   T37]  ret_from_fork+0x72b/0xd50
[  170.463237][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  170.463286][   T37]  ? srso_alias_return_thunk+0x5/0xfbef5
[  170.463328][   T37]  ? __switch_to+0x800/0x10f0
[  170.463389][   T37]  ? __switch_to_asm+0x39/0x70
[  170.463438][   T37]  ? __pfx_kthread+0x10/0x10
[  170.463496][   T37]  ret_from_fork_asm+0x1a/0x30
[  170.463568][   T37]  </TASK>
[  173.567776][ T5776] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  173.776830][ T5776] usb 7-1: Using ep0 maxpacket: 32
[  173.816054][ T5776] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  173.833057][ T5776] usb 7-1: config 0 has no interface number 0
[  173.844887][ T5776] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  173.861593][ T7045] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  173.873695][ T5776] usb 7-1: config 0 interface 85 has no altsetting 0
[  174.048629][ T5776] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  174.172627][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.290363][ T5776] usb 7-1: Product: syz
[  174.326778][ T5776] usb 7-1: Manufacturer: syz
[  174.346380][ T5776] usb 7-1: SerialNumber: syz
[  174.383439][ T5776] usb 7-1: config 0 descriptor??
[  174.632303][ T5776] appletouch 7-1:0.85: Failed to read mode from device.
[  174.655754][ T5776] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  174.669591][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  175.050393][ T5776] usb 7-1: USB disconnect, device number 3
[  176.727556][ T7079] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  177.122206][ T7094] rdma_rxe: rxe_newlink: failed to add lo
[  177.183778][ T7101] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  177.199644][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'.
[  177.215060][ T7096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.248021][ T7100] netlink: 268 bytes leftover after parsing attributes in process `syz.0.331'.
[  177.466902][ T7107] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  177.677361][ T7095] tipc: Disabling bearer <eth:syzkaller0>
[  178.223725][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.336'.
[  178.583237][ T7129] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  178.641584][ T6145] svc: failed to register nfsdv3 RPC service (errno 111).
[  178.655171][ T6145] svc: failed to register nfsaclv3 RPC service (errno 111).
[  178.664123][ T6145] failed to unregister tcp with rpcbind
[  178.673065][ T6145] svc: failed to register nfsdv3 RPC service (errno 97).
[  178.696012][ T6145] svc: failed to register nfsaclv3 RPC service (errno 97).
[  178.710520][ T6145] failed to unregister tcp with rpcbind
[  178.772040][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.997856][   T10] usb 3-1: Using ep0 maxpacket: 32
[  179.313261][   T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  180.029807][   T10] usb 3-1: config 0 has no interface number 0
[  180.046426][   T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  180.075527][   T10] usb 3-1: config 0 interface 85 has no altsetting 0
[  180.085978][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  180.096702][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.313717][   T10] usb 3-1: Product: syz
[  180.334814][   T10] usb 3-1: Manufacturer: syz
[  180.345602][   T10] usb 3-1: SerialNumber: syz
[  180.372005][   T10] usb 3-1: config 0 descriptor??
[  180.593277][   T10] appletouch 3-1:0.85: Failed to read mode from device.
[  180.635276][   T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  180.844787][ T7156] tipc: New replicast peer: 172.30.0.6
[  180.858902][ T7156] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.240839][   T10] usb 3-1: USB disconnect, device number 6
[  181.307777][ T7144] NFSD: Unable to initialize client recovery tracking! (-110)
[  181.356487][ T7144] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  181.377766][ T7144] NFSD: starting 90-second grace period (net f0000705)
[  184.384657][ T7205] svc: failed to register lockdv1 RPC service (errno 111).
[  184.412611][ T7212] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  184.576599][ T5787] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  184.881385][ T7205] svc: failed to register nfsdv3 RPC service (errno 512).
[  184.903196][ T5787] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.904342][ T7205] svc: failed to register nfsaclv3 RPC service (errno 111).
[  184.988205][ T7205] failed to unregister udp with rpcbind
[  184.993051][ T5787] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.008552][ T7205] svc: failed to register nfsdv3 RPC service (errno 97).
[  185.029928][ T7205] svc: failed to register nfsaclv3 RPC service (errno 97).
[  185.033342][ T5787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  185.044645][ T7205] failed to unregister udp with rpcbind
[  185.087636][ T5787] usb 7-1: SerialNumber: syz
[  185.726894][   T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  185.937164][   T30] usb 5-1: Using ep0 maxpacket: 32
[  186.211918][   T30] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  186.261487][   T30] usb 5-1: config 0 has no interface number 0
[  186.289573][   T30] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.344814][   T30] usb 5-1: config 0 interface 85 has no altsetting 0
[  186.379821][   T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  186.421869][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.444709][ T5787] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  186.447706][   T30] usb 5-1: Product: syz
[  186.470259][   T30] usb 5-1: Manufacturer: syz
[  186.483119][   T30] usb 5-1: SerialNumber: syz
[  186.547033][ T5787] usb 7-1: USB disconnect, device number 4
[  186.553371][   T30] usb 5-1: config 0 descriptor??
[  186.683015][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  186.693480][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  186.703449][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  186.716720][ T7250] rdma_rxe: rxe_newlink: failed to add veth0
[  186.723724][ T7250] rdma_rxe: rxe_newlink: failed to add veth1
[  186.780440][   T30] appletouch 5-1:0.85: Failed to read mode from device.
[  186.787880][   T30] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  187.255165][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  187.278108][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  187.309833][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  187.340632][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  187.391454][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  187.962583][   T30] usb 5-1: USB disconnect, device number 4
[  188.563365][ T7267] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  189.249180][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.390'.
[  189.297484][ T7276] openvswitch: netlink: Message has 4 unknown bytes.
[  189.347499][ T7279] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  190.442021][ T7299] syz0: rxe_newlink: already configured on veth0
[  190.564166][ T7305] smc: removing ib device syz0
[  190.693632][ T7309] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  190.745958][ T7314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  190.752197][ T7305] smbdirect: ib_dev[syz0] removed
[  190.930458][ T7315] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  190.997245][   T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  191.238309][   T30] usb 3-1: Using ep0 maxpacket: 32
[  191.491629][   T30] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  191.593068][   T30] usb 3-1: config 0 has no interface number 0
[  191.693577][   T30] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  191.883904][   T30] usb 3-1: config 0 interface 85 has no altsetting 0
[  192.203102][   T30] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  192.239218][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.263377][   T30] usb 3-1: Product: syz
[  192.309684][   T30] usb 3-1: Manufacturer: syz
[  192.343302][   T30] usb 3-1: SerialNumber: syz
[  192.394953][   T30] usb 3-1: config 0 descriptor??
[  193.113883][   T30] appletouch 3-1:0.85: Failed to read mode from device.
[  193.236200][   T30] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  193.582637][   T30] usb 3-1: USB disconnect, device number 7
[  193.690870][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  193.698000][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  193.761327][ T5787] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  193.771118][ T7354] loop0: detected capacity change from 0 to 64
[  193.810680][ T7352] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  193.952479][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[  193.963067][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[  193.973792][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[  193.988687][ T7358] rdma_rxe: rxe_newlink: failed to add veth0
[  193.995956][ T7358] rdma_rxe: rxe_newlink: failed to add veth1
[  194.005274][ T7358] smc: net device veth0 applied user defined pnetid SYZ0
[  194.029339][ T5787] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  194.560441][ T7349] ceph: No mds server is up or the cluster is laggy
[  194.571144][ T5787] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  194.586447][ T7336] NFSD: Unable to initialize client recovery tracking! (-110)
[  194.594340][ T7336] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[  194.629850][ T7336] NFSD: starting 90-second grace period (net f000051a)
[  195.004253][ T7367] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  195.563899][ T7371] rdma_rxe: rxe_newlink: failed to add lo
[  195.636963][ T7371] smc: net device lo applied user defined pnetid SYZ0
[  195.882403][ T7378] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  197.723769][ T7392] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  197.996792][ T5787] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  198.156362][ T5787] usb 7-1: Using ep0 maxpacket: 32
[  198.179609][ T5787] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  198.199607][ T5787] usb 7-1: config 0 has no interface number 0
[  198.206235][ T5787] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  198.252991][ T5787] usb 7-1: config 0 interface 85 has no altsetting 0
[  198.268997][ T5787] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  198.279375][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.291140][ T5787] usb 7-1: Product: syz
[  198.295413][ T5787] usb 7-1: Manufacturer: syz
[  198.311483][ T5787] usb 7-1: SerialNumber: syz
[  198.368174][  T932] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  198.391788][ T5787] usb 7-1: config 0 descriptor??
[  198.544244][  T932] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  198.583417][  T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.623135][  T932] usb 2-1: Product: syz
[  198.639128][  T932] usb 2-1: Manufacturer: syz
[  198.669255][  T932] usb 2-1: SerialNumber: syz
[  198.805094][ T7411] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  198.938556][ T5787] appletouch 7-1:0.85: Geyser mode initialized.
[  198.997442][ T7413] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  199.413942][ T5787] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input18
[  199.692054][ T5787] usb 7-1: USB disconnect, device number 5
[  200.032555][ T5787] appletouch 7-1:0.85: input: appletouch disconnected
[  201.864084][  T932] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71
[  201.967258][  T932] usb 2-1: USB disconnect, device number 3
[  202.563220][ T7464] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  203.526616][   T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  203.960409][   T30] usb 5-1: Using ep0 maxpacket: 32
[  204.116440][   T30] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  204.138407][   T30] usb 5-1: config 0 has no interface number 0
[  204.151910][   T30] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  204.174369][   T30] usb 5-1: config 0 interface 85 has no altsetting 0
[  204.197411][   T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  205.224168][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.232846][   T30] usb 5-1: Product: syz
[  205.237263][   T30] usb 5-1: Manufacturer: syz
[  205.241953][   T30] usb 5-1: SerialNumber: syz
[  205.252085][   T30] usb 5-1: config 0 descriptor??
[  205.669897][   T30] appletouch 5-1:0.85: Geyser mode initialized.
[  205.696815][   T30] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input19
[  205.731644][ T7504] netlink: 'syz.6.471': attribute type 2 has an invalid length.
[  205.901129][   T30] usb 5-1: USB disconnect, device number 5
[  206.169029][ T7511] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  206.172702][   T30] appletouch 5-1:0.85: input: appletouch disconnected
[  206.883768][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.475'.
[  206.945156][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.475'.
[  207.723913][ T7531] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  209.263508][ T7545] NFSD: Failed to start, no listeners configured.
[  209.376061][ T7535] lo speed is unknown, defaulting to 1000
[  209.744050][ T5787] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  209.976910][ T5787] usb 1-1: Using ep0 maxpacket: 32
[  210.099786][ T5787] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  210.130031][ T5787] usb 1-1: config 0 has no interface number 0
[  210.154395][ T5787] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  210.169896][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'.
[  210.193424][ T5787] usb 1-1: config 0 interface 85 has no altsetting 0
[  210.206082][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'.
[  210.224974][ T5787] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  210.292122][ T7568] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  210.369814][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.540450][ T5787] usb 1-1: Product: syz
[  210.626153][ T5787] usb 1-1: Manufacturer: syz
[  210.651507][ T5787] usb 1-1: SerialNumber: syz
[  210.710913][ T5787] usb 1-1: config 0 descriptor??
[  210.998408][ T7536] lo speed is unknown, defaulting to 1000
[  211.034173][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'.
[  211.152060][ T5787] appletouch 1-1:0.85: Geyser mode initialized.
[  211.686859][ T5787] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input20
[  211.794741][ T5787] usb 1-1: USB disconnect, device number 2
[  211.794914][    C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  211.954013][ T5787] appletouch 1-1:0.85: input: appletouch disconnected
[  215.481159][ T7539] lo speed is unknown, defaulting to 1000
[  215.673964][ T7638] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  216.255316][ T5640] Bluetooth: hci2: command 0x0406 tx timeout
[  216.255828][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  216.261851][ T5644] Bluetooth: hci4: command 0x0406 tx timeout
[  216.268456][ T5645] Bluetooth: hci0: command 0x0406 tx timeout
[  216.273780][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  327.166303][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  327.173378][    C1] rcu: 	0-...!: (1 GPs behind) idle=9dec/1/0x4000000000000000 softirq=28475/28478 fqs=2
[  327.184535][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5641/1:b..l P5621/1:b..l
[  327.193641][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=34449, q=1045 ncpus=2)
[  327.201631][    C1] Sending NMI from CPU 1 to CPUs 0:
[  327.201672][    C0] NMI backtrace for cpu 0
[  327.201692][    C0] CPU: 0 UID: 0 PID: 7657 Comm: syz.0.526 Not tainted syzkaller #0 PREEMPT(full) 
[  327.201729][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  327.201749][    C0] RIP: 0010:lock_release+0xe9/0x310
[  327.201791][    C0] Code: 45 85 ff 0f 84 a4 01 00 00 48 8d 4c 24 0c 44 89 fa 48 89 de 4c 89 e7 e8 f5 85 ff ff 48 85 c0 0f 84 88 01 00 00 8b 50 24 85 d2 <0f> 85 de 01 00 00 66 83 78 22 1f 76 0c 66 83 68 22 20 66 83 78 22
[  327.201822][    C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00000046
[  327.201847][    C0] RAX: ffff888026738ba0 RBX: ffffffff8ebe8180 RCX: ffffc90000007dac
[  327.201869][    C0] RDX: 0000000000000000 RSI: ffffffff8ebe8180 RDI: ffff888026738ba0
[  327.201890][    C0] RBP: ffffffff89c6fa4b R08: 0000000000000001 R09: 0000000000000000
[  327.201910][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026738000
[  327.201930][    C0] R13: 18c645eef3901f30 R14: 0000000000000002 R15: 0000000000000001
[  327.201952][    C0] FS:  00007f810b1cc6c0(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000
[  327.201981][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.202003][    C0] CR2: 0000200000141030 CR3: 0000000054ed6000 CR4: 0000000000350ef0
[  327.202024][    C0] Call Trace:
[  327.202035][    C0]  <IRQ>
[  327.202045][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.202091][    C0]  advance_sched+0x770/0xd20
[  327.202142][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[  327.202187][    C0]  ? __pfx_advance_sched+0x10/0x10
[  327.202230][    C0]  __hrtimer_run_queues+0x462/0x9c0
[  327.202288][    C0]  hrtimer_interrupt+0x3e5/0x940
[  327.202348][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  327.202426][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  327.202467][    C0]  </IRQ>
[  327.202477][    C0]  <TASK>
[  327.202488][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  327.202525][    C0] RIP: 0010:lock_is_held_type+0xf5/0x140
[  327.202565][    C0] Code: ff ff ff ff 65 0f c1 15 19 b5 aa 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 27 8f 56 f5 e9 22 8f 56 f5 31 c0
[  327.202596][    C0] RSP: 0018:ffffc900082c7bf0 EFLAGS: 00000296
[  327.202620][    C0] RAX: 0000000000000000 RBX: ffffffff8ebe80c0 RCX: 0000000000000001
[  327.202640][    C0] RDX: 0000000000000046 RSI: ffffffff8e1840ee RDI: ffffffff8c400980
[  327.202662][    C0] RBP: ffff888026738000 R08: 0000000000000005 R09: 0000000000000000
[  327.202682][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
[  327.202701][    C0] R13: 0000000000000246 R14: 0000200000141180 R15: 0000000000010106
[  327.202736][    C0]  __might_resched+0x29f/0x330
[  327.202772][    C0]  ? __pfx___might_resched+0x10/0x10
[  327.202808][    C0]  ? __pfx___might_resched+0x10/0x10
[  327.202846][    C0]  __might_fault+0x8b/0x140
[  327.202889][    C0]  do_recvmmsg+0x31c/0x740
[  327.202926][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  327.202971][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.203010][    C0]  ? find_held_lock+0x2b/0x80
[  327.203058][    C0]  ? kcov_ioctl+0x17a/0x750
[  327.203089][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.203128][    C0]  ? rcu_is_watching+0x12/0xc0
[  327.203177][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  327.203226][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  327.203273][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.203314][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.203363][    C0]  do_syscall_64+0x115/0x870
[  327.203407][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.203440][    C0] RIP: 0033:0x7f810a39de99
[  327.203465][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.203496][    C0] RSP: 002b:00007f810b1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  327.203525][    C0] RAX: ffffffffffffffda RBX: 00007f810a626090 RCX: 00007f810a39de99
[  327.203546][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  327.203566][    C0] RBP: 00007f810a433eaf R08: 0000000000000000 R09: 0000000000000000
[  327.203586][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  327.203605][    C0] R13: 00007f810a626128 R14: 00007f810a626090 R15: 00007ffcf0c1eba8
[  327.203638][    C0]  </TASK>
[  327.203663][    C1] task:syz-executor    state:R  running task     stack:22168 pid:5621  tgid:5621  ppid:5615   task_flags:0x400140 flags:0x00080000
[  327.633441][    C1] Call Trace:
[  327.636726][    C1]  <TASK>
[  327.639664][    C1]  __schedule+0x125c/0x6730
[  327.644224][    C1]  ? __pfx___schedule+0x10/0x10
[  327.649103][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.654763][    C1]  ? mark_held_locks+0x40/0x70
[  327.659556][    C1]  preempt_schedule_irq+0x50/0x90
[  327.664612][    C1]  irqentry_exit+0x205/0xa00
[  327.669225][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.674892][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  327.680919][    C1] RIP: 0010:lock_release+0x19e/0x310
[  327.686253][    C1] Code: ff 65 0f c1 05 e3 8d 7e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed 46 7e 12 0f 85 4d 01 00 00 48 83 c4
[  327.705895][    C1] RSP: 0018:ffffc9000409f620 EFLAGS: 00000206
[  327.711991][    C1] RAX: 0000000000000046 RBX: ffffffff8ebe8180 RCX: ffffc9000409f62c
[  327.719983][    C1] RDX: 0000000000000003 RSI: ffffffff8e1840ee RDI: ffffffff8c400980
[  327.727969][    C1] RBP: ffffffff828219b7 R08: 0000000000000001 R09: 0000000000000007
[  327.735955][    C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888076635d00
[  327.744029][    C1] R13: ffff88814040c000 R14: 0000000000000202 R15: 0000000000000004
[  327.752044][    C1]  ? rcu_read_unlock+0x17/0x60
[  327.756866][    C1]  rcu_read_unlock+0x1c/0x60
[  327.761505][    C1]  __memcg_slab_post_alloc_hook+0x908/0x1160
[  327.767528][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.773218][    C1]  ? kasan_save_track+0x14/0x30
[  327.778113][    C1]  kmem_cache_alloc_noprof+0x587/0x6a0
[  327.783615][    C1]  ? anon_vma_clone+0x2ba/0xcd0
[  327.788583][    C1]  anon_vma_clone+0x2ba/0xcd0
[  327.793287][    C1]  ? kmem_cache_alloc_noprof+0x2d7/0x6a0
[  327.799004][    C1]  anon_vma_fork+0x1bb/0x6b0
[  327.803638][    C1]  dup_mmap+0x143e/0x21b0
[  327.808014][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  327.812708][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.818387][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  327.824223][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.829881][    C1]  ? __lock_acquire+0x49f/0x1a40
[  327.834843][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.840496][    C1]  ? find_held_lock+0x2b/0x80
[  327.845204][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  327.851136][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.856799][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.862461][    C1]  copy_process+0x4588/0x8030
[  327.867190][    C1]  ? __pfx_copy_process+0x10/0x10
[  327.872239][    C1]  ? do_raw_spin_lock+0x128/0x260
[  327.877326][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.883013][    C1]  kernel_clone+0x176/0x9d0
[  327.887545][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  327.892590][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.898347][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.904014][    C1]  ? find_held_lock+0x2b/0x80
[  327.908729][    C1]  ? __might_fault+0xc5/0x140
[  327.913454][    C1]  __do_sys_clone+0xd9/0x120
[  327.918593][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[  327.923841][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.929500][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  327.935163][    C1]  do_syscall_64+0x115/0x870
[  327.939791][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.945700][    C1] RIP: 0033:0x7f6e755c6912
[  327.950122][    C1] RSP: 002b:00007ffc71acdb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  327.958637][    C1] RAX: ffffffffffffffda RBX: 00007ffc71acdb10 RCX: 00007f6e755c6912
[  327.966617][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  327.974636][    C1] RBP: 00007ffc71acdc9c R08: 0000000000000000 R09: 0000000000000001
[  327.982613][    C1] R10: 000055555defd7d0 R11: 0000000000000246 R12: 0000000000000001
[  327.990761][    C1] R13: 00000000000927c0 R14: 0000000000034ecb R15: 00007ffc71acdcf0
[  327.998774][    C1]  </TASK>
[  328.001792][    C1] task:udevd           state:R  running task     stack:24632 pid:5641  tgid:5641  ppid:4987   task_flags:0x400140 flags:0x00080000
[  328.015455][    C1] Call Trace:
[  328.018750][    C1]  <TASK>
[  328.021694][    C1]  __schedule+0x125c/0x6730
[  328.026249][    C1]  ? __pfx___schedule+0x10/0x10
[  328.031230][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.037010][    C1]  ? rcu_is_watching+0x12/0xc0
[  328.041894][    C1]  preempt_schedule_irq+0x50/0x90
[  328.047045][    C1]  irqentry_exit+0x205/0xa00
[  328.051688][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.057358][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  328.063369][    C1] RIP: 0010:lock_acquire+0x5e/0x370
[  328.068594][    C1] Code: 05 fb 4d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 cc 3c 0f 0f 82 ac 02 00 00 8b 35 2e 00 3d 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 4d 7e 12 0f 85 ec 02 00 00 48 83 c4
[  328.088248][    C1] RSP: 0018:ffffc900041cf898 EFLAGS: 00000206
[  328.094344][    C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000
[  328.102329][    C1] RDX: 0000000000000000 RSI: ffffffff8e1840ee RDI: ffffffff8c400980
[  328.110315][    C1] RBP: ffffffff8ebe8180 R08: 00000000ffffffff R09: 0000000000000007
[  328.118301][    C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[  328.126291][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  328.134307][    C1]  ? unwind_next_frame+0x3be/0x2090
[  328.139554][    C1]  ? unwind_next_frame+0x3be/0x2090
[  328.144883][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.150554][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  328.156762][    C1]  unwind_next_frame+0xd1/0x2090
[  328.161750][    C1]  ? unwind_next_frame+0xbd/0x2090
[  328.166990][    C1]  ? __fput+0x68d/0xb50
[  328.171187][    C1]  ? bpf_ksym_find+0x124/0x1c0
[  328.175994][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  328.182194][    C1]  arch_stack_walk+0x94/0xf0
[  328.186870][    C1]  ? __fput+0x68d/0xb50
[  328.191079][    C1]  stack_trace_save+0x8e/0xc0
[  328.195806][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  328.201249][    C1]  ? security_file_free+0xb9/0x180
[  328.206399][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.212063][    C1]  ? stack_trace_save+0x8e/0xc0
[  328.216958][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  328.222376][    C1]  kasan_save_stack+0x30/0x50
[  328.227094][    C1]  ? kasan_save_stack+0x30/0x50
[  328.231982][    C1]  ? kasan_save_track+0x14/0x30
[  328.236899][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[  328.241700][    C1]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  328.247712][    C1]  ? kmem_cache_free+0x412/0x6b0
[  328.252683][    C1]  ? __fput+0x68d/0xb50
[  328.256942][    C1]  kasan_save_track+0x14/0x30
[  328.261750][    C1]  __kasan_kmalloc+0xaa/0xb0
[  328.266384][    C1]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  328.271791][    C1]  ? kmem_cache_free+0x412/0x6b0
[  328.276763][    C1]  ? __fput+0x68d/0xb50
[  328.280957][    C1]  kmem_cache_free+0x412/0x6b0
[  328.285749][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.291407][    C1]  ? percpu_counter_add_batch+0xb9/0x230
[  328.297084][    C1]  __fput+0x68d/0xb50
[  328.301127][    C1]  fput_close_sync+0x118/0x250
[  328.305910][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  328.311260][    C1]  __x64_sys_close+0x8b/0x120
[  328.316055][    C1]  do_syscall_64+0x115/0x870
[  328.320676][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.326589][    C1] RIP: 0033:0x7f6164aa7407
[  328.331011][    C1] RSP: 002b:00007ffc30b3abe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  328.339452][    C1] RAX: ffffffffffffffda RBX: 00007f61651a1880 RCX: 00007f6164aa7407
[  328.347460][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  328.355443][    C1] RBP: 0000559b220ca650 R08: 0000000000000000 R09: 0000000000000000
[  328.363426][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559b21dcf880
[  328.371581][    C1] R13: 00007ffc30b3b850 R14: 00007ffc30b3b450 R15: 00007ffc30b3b050
[  328.379586][    C1]  </TASK>
[  328.382617][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g34449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  328.393923][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  328.403931][    C1] rcu: RCU grace-period kthread stack dump:
[  328.409819][    C1] task:rcu_preempt     state:R  running task     stack:27592 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  328.423393][    C1] Call Trace:
[  328.426684][    C1]  <TASK>
[  328.429627][    C1]  __schedule+0x125c/0x6730
[  328.434168][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.439856][    C1]  ? __pfx___schedule+0x10/0x10
[  328.444731][    C1]  ? find_held_lock+0x2b/0x80
[  328.449473][    C1]  ? schedule+0x225/0x2c0
[  328.453865][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.459534][    C1]  schedule+0xdd/0x2c0
[  328.463626][    C1]  schedule_timeout+0x127/0x280
[  328.468516][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  328.473968][    C1]  ? __pfx_process_timeout+0x10/0x10
[  328.479299][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.484955][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  328.490786][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.496443][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  328.501936][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  328.506725][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.512388][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  328.517699][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  328.522672][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  328.527888][    C1]  ? rcu_is_watching+0x12/0xc0
[  328.532745][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  328.538583][    C1]  rcu_gp_kthread+0x179/0x230
[  328.543298][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  328.548521][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  328.554358][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.560046][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.565731][    C1]  ? __kthread_parkme+0x18c/0x230
[  328.570840][    C1]  ? kthread+0x13a/0x450
[  328.575124][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  328.580347][    C1]  kthread+0x370/0x450
[  328.584459][    C1]  ? __pfx_kthread+0x10/0x10
[  328.589185][    C1]  ret_from_fork+0x72b/0xd50
[  328.593844][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  328.599160][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.604909][    C1]  ? __switch_to+0x800/0x10f0
[  328.609629][    C1]  ? __switch_to_asm+0x39/0x70
[  328.614425][    C1]  ? __pfx_kthread+0x10/0x10
[  328.619090][    C1]  ret_from_fork_asm+0x1a/0x30
[  328.623915][    C1]  </TASK>
[  328.626935][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  328.633257][    C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  328.642552][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  328.652616][    C1] Workqueue: events_unbound toggle_allocation_gate
[  328.659166][    C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870
[  328.665863][    C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41
[  328.685498][    C1] RSP: 0018:ffffc90000ba7858 EFLAGS: 00000293
[  328.691584][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2
[  328.699556][    C1] RDX: ffff88801c36be00 RSI: ffffffff81fda5cc RDI: ffff88801c36be00
[  328.707531][    C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000
[  328.715509][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  328.723488][    C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0
[  328.731469][    C1] FS:  0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000
[  328.740511][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.747100][    C1] CR2: 00007f58663eb158 CR3: 000000000e994000 CR4: 0000000000350ef0
[  328.755077][    C1] Call Trace:
[  328.758360][    C1]  <TASK>
[  328.761387][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  328.766460][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  328.772815][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  328.778230][    C1]  ? __pfx___text_poke+0x10/0x10
[  328.783202][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  328.788255][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  328.793391][    C1]  ? __kmalloc_cache_node_noprof+0xab/0x6c0
[  328.799329][    C1]  smp_text_poke_batch_finish+0x337/0xc60
[  328.805081][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.810743][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  328.817007][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.822669][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[  328.828931][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.834593][    C1]  ? find_held_lock+0x2b/0x80
[  328.839304][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.844974][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  328.850978][    C1]  jump_label_update+0x37a/0x550
[  328.855957][    C1]  static_key_enable_cpuslocked+0x1bc/0x270
[  328.861892][    C1]  static_key_enable+0x1a/0x20
[  328.866688][    C1]  toggle_allocation_gate+0xfe/0x2d0
[  328.872009][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  328.877942][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.883643][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.889298][    C1]  ? rcu_is_watching+0x12/0xc0
[  328.894101][    C1]  process_one_work+0xa23/0x1940
[  328.899070][    C1]  ? __pfx_process_one_work+0x10/0x10
[  328.904456][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.910135][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.915796][    C1]  worker_thread+0x5ef/0xe50
[  328.920420][    C1]  ? kthread+0x13a/0x450
[  328.924717][    C1]  ? __pfx_worker_thread+0x10/0x10
[  328.929851][    C1]  kthread+0x370/0x450
[  328.933957][    C1]  ? __pfx_kthread+0x10/0x10
[  328.938668][    C1]  ret_from_fork+0x72b/0xd50
[  328.943282][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  328.948419][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  328.954122][    C1]  ? __switch_to+0x800/0x10f0
[  328.958864][    C1]  ? __switch_to_asm+0x39/0x70
[  328.963655][    C1]  ? __pfx_kthread+0x10/0x10
[  328.968282][    C1]  ret_from_fork_asm+0x1a/0x30
[  328.973097][    C1]  </TASK>
[  463.981345][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [kworker/u8:3:49]
[  463.981381][    C1] Modules linked in:
[  463.981399][    C1] irq event stamp: 2355180
[  463.981412][    C1] hardirqs last  enabled at (2355179): [<ffffffff8bb9b73d>] irqentry_exit+0x24d/0xa00
[  463.981470][    C1] hardirqs last disabled at (2355180): [<ffffffff8bb9a31e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  463.981525][    C1] softirqs last  enabled at (2355172): [<ffffffff81c8d222>] __irq_exit_rcu+0x162/0x210
[  463.981578][    C1] softirqs last disabled at (2355167): [<ffffffff81c8d222>] __irq_exit_rcu+0x162/0x210
[  463.981635][    C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  463.981677][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  463.981701][    C1] Workqueue: events_unbound toggle_allocation_gate
[  463.981760][    C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870
[  463.981805][    C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41
[  463.981839][    C1] RSP: 0018:ffffc90000ba7858 EFLAGS: 00000293
[  463.981866][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2
[  463.981888][    C1] RDX: ffff88801c36be00 RSI: ffffffff81fda5cc RDI: ffff88801c36be00
[  463.981912][    C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000
[  463.981935][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  463.981956][    C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0
[  463.981982][    C1] FS:  0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000
[  463.982013][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  463.982038][    C1] CR2: 00007f58663eb158 CR3: 000000000e994000 CR4: 0000000000350ef0
[  463.982061][    C1] Call Trace:
[  463.982074][    C1]  <TASK>
[  463.982094][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  463.982163][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  463.982206][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  463.982270][    C1]  ? __pfx___text_poke+0x10/0x10
[  463.982328][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  463.982383][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  463.982427][    C1]  ? __kmalloc_cache_node_noprof+0xab/0x6c0
[  463.982492][    C1]  smp_text_poke_batch_finish+0x337/0xc60
[  463.982535][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.982582][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  463.982625][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.982669][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[  463.982708][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.982752][    C1]  ? find_held_lock+0x2b/0x80
[  463.982808][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.982860][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  463.982900][    C1]  jump_label_update+0x37a/0x550
[  463.982963][    C1]  static_key_enable_cpuslocked+0x1bc/0x270
[  463.983025][    C1]  static_key_enable+0x1a/0x20
[  463.983082][    C1]  toggle_allocation_gate+0xfe/0x2d0
[  463.983143][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  463.983205][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.983253][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.983296][    C1]  ? rcu_is_watching+0x12/0xc0
[  463.983356][    C1]  process_one_work+0xa23/0x1940
[  463.983410][    C1]  ? __pfx_process_one_work+0x10/0x10
[  463.983444][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.983506][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.983556][    C1]  worker_thread+0x5ef/0xe50
[  463.983609][    C1]  ? kthread+0x13a/0x450
[  463.983663][    C1]  ? __pfx_worker_thread+0x10/0x10
[  463.983697][    C1]  kthread+0x370/0x450
[  463.983752][    C1]  ? __pfx_kthread+0x10/0x10
[  463.983812][    C1]  ret_from_fork+0x72b/0xd50
[  463.983862][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  463.983912][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  463.983964][    C1]  ? __switch_to+0x800/0x10f0
[  463.984020][    C1]  ? __switch_to_asm+0x39/0x70
[  463.984073][    C1]  ? __pfx_kthread+0x10/0x10
[  463.984133][    C1]  ret_from_fork_asm+0x1a/0x30
[  463.984205][    C1]  </TASK>
[  463.984218][    C1] Sending NMI from CPU 1 to CPUs 0:
[  464.384715][    C0] NMI backtrace for cpu 0
[  464.384740][    C0] CPU: 0 UID: 0 PID: 7657 Comm: syz.0.526 Not tainted syzkaller #0 PREEMPT(full) 
[  464.384798][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  464.384818][    C0] RIP: 0010:_raw_spin_lock_irqsave+0xb/0x60
[  464.384860][    C0] Code: 8b eb 55 f6 eb c9 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 48 89 fb 9c 5d <fa> f7 c5 00 02 00 00 75 39 bf 01 00 00 00 e8 a2 f2 18 f6 ff 74 24
[  464.384891][    C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000016
[  464.384916][    C0] RAX: ffffffff9b94e058 RBX: ffffffff9b94e058 RCX: 61c8864680b583eb
[  464.384938][    C0] RDX: 0000000000000120 RSI: ffffffff9b94e050 RDI: ffffffff9b94e058
[  464.384958][    C0] RBP: 0000000000000016 R08: 0000000000000005 R09: ffffc90000007d90
[  464.384979][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  464.385007][    C0] R13: ffff888029755300 R14: 0000000000000001 R15: 1ffff92000000fb2
[  464.385031][    C0] FS:  00007f810b1cc6c0(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000
[  464.385060][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.385081][    C0] CR2: 0000200000141030 CR3: 0000000054ed6000 CR4: 0000000000350ef0
[  464.385102][    C0] Call Trace:
[  464.385113][    C0]  <IRQ>
[  464.385126][    C0]  debug_object_activate+0x144/0x4b0
[  464.385180][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  464.385234][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.385274][    C0]  ? do_raw_spin_lock+0x128/0x260
[  464.385319][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.385362][    C0]  enqueue_hrtimer+0x75/0x2f0
[  464.385410][    C0]  __hrtimer_run_queues+0x6ed/0x9c0
[  464.385466][    C0]  hrtimer_interrupt+0x3e5/0x940
[  464.385528][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  464.385580][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  464.385621][    C0]  </IRQ>
[  464.385630][    C0]  <TASK>
[  464.385642][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  464.385678][    C0] RIP: 0010:lock_is_held_type+0xf5/0x140
[  464.385718][    C0] Code: ff ff ff ff 65 0f c1 15 19 b5 aa 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 27 8f 56 f5 e9 22 8f 56 f5 31 c0
[  464.385749][    C0] RSP: 0018:ffffc900082c7bf0 EFLAGS: 00000296
[  464.385773][    C0] RAX: 0000000000000000 RBX: ffffffff8ebe80c0 RCX: 0000000000000001
[  464.385793][    C0] RDX: 0000000000000046 RSI: ffffffff8e1840ee RDI: ffffffff8c400980
[  464.385814][    C0] RBP: ffff888026738000 R08: 0000000000000005 R09: 0000000000000000
[  464.385833][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff
[  464.385853][    C0] R13: 0000000000000246 R14: 0000200000141180 R15: 0000000000010106
[  464.385889][    C0]  __might_resched+0x29f/0x330
[  464.385926][    C0]  ? __pfx___might_resched+0x10/0x10
[  464.385962][    C0]  ? __pfx___might_resched+0x10/0x10
[  464.386006][    C0]  __might_fault+0x8b/0x140
[  464.386053][    C0]  do_recvmmsg+0x31c/0x740
[  464.386091][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  464.386138][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.386176][    C0]  ? find_held_lock+0x2b/0x80
[  464.386224][    C0]  ? kcov_ioctl+0x17a/0x750
[  464.386255][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.386294][    C0]  ? rcu_is_watching+0x12/0xc0
[  464.386344][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  464.386392][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  464.386439][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.386481][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.386524][    C0]  do_syscall_64+0x115/0x870
[  464.386568][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.386601][    C0] RIP: 0033:0x7f810a39de99
[  464.386627][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.386657][    C0] RSP: 002b:00007f810b1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  464.386685][    C0] RAX: ffffffffffffffda RBX: 00007f810a626090 RCX: 00007f810a39de99
[  464.386707][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  464.386727][    C0] RBP: 00007f810a433eaf R08: 0000000000000000 R09: 0000000000000000
[  464.386746][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  464.386766][    C0] R13: 00007f810a626128 R14: 00007f810a626090 R15: 00007ffcf0c1eba8
[  464.386801][    C0]  </TASK>
[  464.810287][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  464.816972][    C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.827842][    C1] Tainted: [L]=SOFTLOCKUP
[  464.832163][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  464.842226][    C1] Workqueue: events_unbound toggle_allocation_gate
[  464.848776][    C1] Call Trace:
[  464.852055][    C1]  <IRQ>
[  464.854897][    C1]  dump_stack_lvl+0x100/0x190
[  464.859621][    C1]  vpanic+0x552/0x970
[  464.863615][    C1]  ? __pfx_vpanic+0x10/0x10
[  464.868130][    C1]  ? __entry_text_end+0x1020b5/0x1020b9
[  464.873709][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  464.878946][    C1]  panic+0xd1/0xe0
[  464.882686][    C1]  ? __pfx_panic+0x10/0x10
[  464.887109][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.892769][    C1]  ? __pfx_printk_trigger_flush+0x10/0x10
[  464.898526][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.904184][    C1]  ? wq_watchdog_touch+0xec/0x1a0
[  464.909242][    C1]  ? watchdog_timer_fn.cold+0x5/0x25
[  464.914567][    C1]  ? watchdog_timer_fn+0x702/0x7a0
[  464.919721][    C1]  watchdog_timer_fn.cold+0x16/0x25
[  464.925138][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  464.930617][    C1]  __hrtimer_run_queues+0x13f/0x9c0
[  464.935946][    C1]  hrtimer_interrupt+0x3e5/0x940
[  464.940942][    C1]  __sysvec_apic_timer_interrupt+0x109/0x470
[  464.946967][    C1]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  464.952631][    C1]  </IRQ>
[  464.955562][    C1]  <TASK>
[  464.958492][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  464.964491][    C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870
[  464.971209][    C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 54 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41
[  464.990880][    C1] RSP: 0018:ffffc90000ba7858 EFLAGS: 00000293
[  464.996969][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fda5f2
[  465.004956][    C1] RDX: ffff88801c36be00 RSI: ffffffff81fda5cc RDI: ffff88801c36be00
[  465.012943][    C1] RBP: ffff8880b84434e0 R08: 0000000000000005 R09: 0000000000000000
[  465.020921][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[  465.028935][    C1] R13: ffffed101708869d R14: 0000000000000001 R15: ffff8880b853c9c0
[  465.036960][    C1]  ? smp_call_function_many_cond+0x5b2/0x1870
[  465.043054][    C1]  ? smp_call_function_many_cond+0x58c/0x1870
[  465.049151][    C1]  ? smp_call_function_many_cond+0x58c/0x1870
[  465.055352][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  465.060431][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  465.066794][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  465.072276][    C1]  ? __pfx___text_poke+0x10/0x10
[  465.077258][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  465.082366][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  465.087509][    C1]  ? __kmalloc_cache_node_noprof+0xab/0x6c0
[  465.093446][    C1]  smp_text_poke_batch_finish+0x337/0xc60
[  465.099194][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.104853][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  465.111120][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.116780][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[  465.123037][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.128691][    C1]  ? find_held_lock+0x2b/0x80
[  465.133405][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.139078][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  465.145086][    C1]  jump_label_update+0x37a/0x550
[  465.150071][    C1]  static_key_enable_cpuslocked+0x1bc/0x270
[  465.156007][    C1]  static_key_enable+0x1a/0x20
[  465.160840][    C1]  toggle_allocation_gate+0xfe/0x2d0
[  465.166191][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  465.172124][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.177784][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.183435][    C1]  ? rcu_is_watching+0x12/0xc0
[  465.188247][    C1]  process_one_work+0xa23/0x1940
[  465.193220][    C1]  ? __pfx_process_one_work+0x10/0x10
[  465.198603][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.204272][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.209936][    C1]  worker_thread+0x5ef/0xe50
[  465.214560][    C1]  ? kthread+0x13a/0x450
[  465.218835][    C1]  ? __pfx_worker_thread+0x10/0x10
[  465.223955][    C1]  kthread+0x370/0x450
[  465.228146][    C1]  ? __pfx_kthread+0x10/0x10
[  465.232776][    C1]  ret_from_fork+0x72b/0xd50
[  465.237399][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  465.242544][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  465.248204][    C1]  ? __switch_to+0x800/0x10f0
[  465.252921][    C1]  ? __switch_to_asm+0x39/0x70
[  465.257716][    C1]  ? __pfx_kthread+0x10/0x10
[  465.262379][    C1]  ret_from_fork_asm+0x1a/0x30
[  465.267210][    C1]  </TASK>
[  466.435153][    C1] Shutting down cpus with NMI
[  466.440119][    C1] Kernel Offset: disabled
[  466.444471][    C1] Rebooting in 86400 seconds..