last executing test programs:

7.612801065s ago: executing program 2 (id=3):
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="d0044630825a942a"], 0x4, 0x800)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2, 0x71}, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x4, 0xfffffffa)
read$msr(r1, &(0x7f0000002fc0)=""/102400, 0x19000)
r2 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

7.078612148s ago: executing program 4 (id=5):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
fcntl$addseals(r0, 0x409, 0x3f)

6.727521357s ago: executing program 4 (id=6):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c)
capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000080)={0x0, 0xe, 0x65df, 0x4000, 0x6, 0x4})
syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140))
r3 = socket(0x80000000000000a, 0x2, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="420000000200188b97ffca3402bea964669852c44c9f7663fa33b1076cc3d88f6c9447b43482b3b5754295df9e59a82993ec40b36052dde02b8f40c1d8e326a3df8d4bf7f5444bf348b0f6b60af4eea98d4dd2b47af671d89a5119cfc8f9cf98d10f9cee578137f7e3558f7a52f857b3a0badbaed702c590d7ae512511ccd43fa1c80ccaf824dd54bb8aecccd5a268", @ANYRESOCT=r2], 0x42)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r3, 0x0, 0x0})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r6, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xffffffffffffffae)
r7 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0xcdfd, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

6.703471613s ago: executing program 2 (id=7):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, <r2=>0x0})
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000000))
syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000380))
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.219712521s ago: executing program 4 (id=8):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000ffffac1414bb982652227d4333016c03e063f8ee15f0e70235219129284d0a44a07d143e59320dcfd953d70d6e3760128277323207d0f2422376e0bb04765f2cce4e256506cc9fb55ea8a586f75813fd9777e806984058f4d6"], 0x20, 0xc0}], 0x1, 0x80)
io_setup(0x200014, &(0x7f00000014c0))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x45c, 0x45c], 0x0, 0x0, 0x2, 0x1}}, 0x40)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
r6 = syz_open_dev$vim2m(&(0x7f0000001140), 0xff8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000001180)={0xa, 0x2, 0x1, "7674db5233fe152d10022e61f93cf11a219d6bff195ec6e49d43f15e7a7fcff7", 0x32314d48})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x4120000, 0x0, 0x0, &(0x7f000000b280), &(0x7f000000b2c0), &(0x7f000000b300)="8df786c4c4536bf11017f6f5954a244c6289401063ab7ed169d995b91492731a2837b4de00ccdcd48728faaf8a7e53b1568e0d62507845a19003dbe660744666a7fbdc60eeb608c755ef436153a7d58b5e15972cbe174dfe5f2e19069f2282110b3fdeefd08f7c72d7de6c2b4ca74c1cfff2116f39d3c3184cb8396f3169ef0dad5996968c4ffab4ace6edd0683195642937dc3aa9050f8c9f615f642765fffc361089cd6efff9986cc5fd5d5acf00600f6019aea319033a99b9f565b9252351ac99b5545d991da0d3edf6aedee306b15aee")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000b400), &(0x7f000000b440)=0xc)
getresgid(&(0x7f000000b480), &(0x7f000000b4c0), &(0x7f000000b500))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0)
lstat(&(0x7f000000b5c0)='./file0\x00', &(0x7f000000b600)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b740)=[{{&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000002840)="f762f40e819e5afcd78aa9f13998dd9341bf8c8a1adc05cc3cd048084ae10e9b8dcf13f103444ab03ee202706c", 0x2d}], 0x1, &(0x7f0000005c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r3, r4, r3, r4, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xc0, 0x4000}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005d80)="e16c53c186752c358841f060ca96e0a1b6603fefdf610a0792a304e35c209af9fd9264d28904156f960f454671f8780dfc63f4300ec4f0309cb5171d5541b72a4b533696c2963a83e0e3dba51160813e8d1b2adf81d8cb04ed19a602f2f3876ac0c6f1a36ef0c1a23c9c3d3ab08fa365aa8a92c28014f49b39572dfc1dbd087019f50acf85aace8852111edea3d06aef247cc819c0b7bbd2d2feb749376b7d6c21b4", 0xa2}, {&(0x7f0000005e80)="b587fa5ca44aed8110976a421c948e47d5aca0e62dca2496637ee1838175f9fd072fbca9e9d7e01a7f2fb86310ed187d87d729a72ba3fa5706b459d7fea376ed99e8fba25b3aa24b129e0b0d2e7956838c9697c8b5375ed79d0e51e816550806833bf37b72aa049e4776afec4f0ce4b5381e824daf894ac604915a7fa1e226617d1607347b78df6345ecc747ea3e3fd3bc33f435458bfcbd7995f27fbac3ef56ad884e1a30cad2bb60c0ef8fd1062bb98ab3b68b46c3005a6d3e80b25caa179d6154272696964f81e60b1dd3e1c75d311991e2703efde1", 0xd7}, {&(0x7f0000005f80)="2dae14383933ef416b8602e91eae4604adbaff2cc40b5a2ec31cd6ef6fb3e79451e7e191214b43dcbfa4fa6d07f56864f2a76521aa98e15a5b37931bdae0c02e3735e1585f4519127f798b8bf4afc71efcf02f678447931431e17f6140a373e4cb540ff89e91fcd857baa2d2a75b2ac6ec4ef6ccec330a182962f1a7717bc5a6c70a8ff8c28340577ec1415b2e1cdc0c4d79bd9007e2d3872c", 0x99}], 0x3, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x20000800}}, {{0x0, 0x0, &(0x7f00000092c0)=[{&(0x7f0000008100)="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", 0xfd}, {&(0x7f0000001780)="b379db6d8fbd8695224baad532ad926e848874dc1aaeaafe3ef6667231d049388370a769f7e68e6dcb2def0cdaee709ad47f1b2acb5c6e6a378a6ef749ab13ed56f16c68cd765d44248425a00aac2c809f243497fca14626c6fbcdb516e2fe019d21348905c23b34f72d45f161163602694fa1c25c84ef6f3b37ce53a96c9029314a9075f2f740a64e2d953978bd0f53bf331e2a9a6e1ccfdbf66f48cd2a8d78cc0b461b766dd5d2d4f4fc62a3ccfb7a56583da4c9639a838717aa26ff0d052999552bfd85b32074f0612b037774584c6d5d185854e8719a2858decbe322fdbd3af9dc19cef874d02c93f862a7e5114ca010a0d343c4412888d70b96ed8451de5c7b15fa39e09597e9c50988a79c46baf74ceda775eadbdf8586d29627e44c53aeea64c89be9f01fd32a4bce90684dd052ff6e15a427ddf84f61ce512a8b08498ad66398d0319e983326329ec8e4b6b7b3911b03fa86595a2e2b6927706eaaded3387534ae494353133a64e4d498bce6e1c4f8815c977754e1cc617679671c59e01e6ffe166df73f7aca9d68119616ab14363b72e90b364b40adc1ba869fa15a6c0ff61fec45009b946e54232cdcea639d5048950cab0191c81dbe9dc017b80b1f1a4f6f1ac48910f7c6c5f2d536e657d5d1e3f5c74c2116c73748bd0004000000000000bf4735e6daaa49652704af2ffc46e4a150bbb7c268ba76f9b35663584923a8746d5885e0fc07201522f9adfe6d0662b301e843e8b52729775bd7454b1ce7ce21da9bf14f6c6b9e591a9648b580a6df1e33afe9a89fa03ac5dc2f3c6f40c07123c3cfa6b057b05402e6a301c6bed2f2e00b39873efd31a8efc91f9c6a308effaac0801b7ca5d8019cd402dd2e66481490e25847814a7aac95b51ed03f56892def68ea044282d0d83c65ea02f0d8fc493b5b84d82ecae8c2e61425846c9c809e08e8464f5bd0664dcc66b320407ea1a6f2c1336bc79661236b062bdd8785d1d94d5848dff8bf0d0e20b3f71a215bc0dcacf30933c547c5196f5f655f17a26546d5ec07f36f435c71c17baf49e122f4070547db1611dc4af3178fb57c7c3a43615a0e258d8cb6641d19c5aed1b9b087c772d808db0cf7a62e2022272246539804e766215d3349e02aa1ebb324b3a93440220a4b361aa74b36817c185482ae5cbfae16a87f163b9703e1abee7bdc80e093b4e804f82f876247418638815d41d3cd2bc0a0d0710406b9508b10da93b61e3574959c60a103786f288021568b19ca11b079d3771aac96483dfd02ee233fc59fd21646e354a3502103c76d338dc63c94196cf91c0b54fd878bcacbdc37feb884998e42a17d86398dbe3a1091f379f3d5543b04877f01fa46f704c211bf4c7d5336e5cf9dc0c520838788d050fa40cabff219ea49ae90e42e2a057510744eddd82fe02353331c0416f7601c09b6f11814f44a4876ab7f316d20f479191acc83d86e0510b755a97402dd317eb9f0d3fff6e1366218d2d2bc980356097ef817368dcb348837246b919eca960da2fa90140eff693f3211c4f1b05e862c4750c892fe1069ce6ae8d1b291b6380f46c5002955010d6de5f437a878693b3336ee64a487ce14048985982e7e1428d15cf77b853f101086eccd0ca1d289bec8d6d632f8e94460637b17bbe65c256c3a722fe4b0e862a1bcf63a04f85208a6c933f15fb91ca052f4381a3dfdec50aa67350dc5fd63451aaabf475687d662c0183ff83b8d83b8ad8386d1faae90fb15d40268497a6dbb21e9121f909d5de9728ac129f68a061a76f218149752ca425089e1adf5ece5c076307e239a6ad17daa805d8757980ad527b6100d0ca29c744bd2019feca6d030b6e5097763b794b6d54ba014b1b0abe9eb69276098eb2bf868b521205e5e0c7ad327f77b81dc521979e0efc4ee981956da80510e5bb809401403a882942aed0d35f605000000cb566409c8f64cc89b2e0ae87adc9a65c89b915d798987698ceef07138d266c3cf6ac84c84052cbba7495b47a1941843234ea1134b8533f2a7ffecdf79b7afbec80813e817f2107865d16799ec7e9d4c39d940282775c52de4dc4123653d21f64e776184faec2cfb72f8e17a4cc2bfc5af568316a458c34d3efd8c249d336843ec8efd04f8412de84c8302043db670b1a12456a51787658ba3721493fe6d111edd950e2dc0df667985740317ae055d28280c8d3c74d67b2ded46daae361107529aa0375d924d1c3fddb50054a5ce98e73f1d862545e1df71a3c5d33518b744c616316d792a6ffe368eed9d275b148098d4b3368296e0dd028c649e512bd040c9d8fdba2d1d75056c99f21eed4c03944fccfcd41ef99cf642aad19022bb4c9933681ea4105691c01535c0762896a363048e66786b4714193aba11898e586685c9a2a97be9631418320210cd56c84b694075001759ad171c667a723f4c8d232615b5750c77168b194cfcf8e0caa8fd6ca00b7649bd7c76716b0b827fce475864924e6e1f5aedd651ac919e60083c591ac46859c86f34ddf2164aed40f83f42aec3ba48ee8a967741812bf6664dae3b6bfd6f88fc433b85ddc9bea01fc25e048c338ae924cd34b064ffe69ac9608030c0984daf7539c6dbc78afbfe9f1373366cf5d0b2a7474e3b6be58b1ab8ec4aaf090f0866ba4f271f5be4f7041d1c4af67e51157f34930aee78e7d7b41aaf5e3873dc3d24d0bbcc091cd69d50d72765afbb2906a1487533ab4da22c953bb8835337c52bd1d4c531b4efcc8f08e86da4187fb61e0746673035ad33919592da9cb41e8f09b6ac246cf83f054038072877153a3597d90ae050f9dfb794845bb9282888eeb147d386019df5a53aec6a189c0fc13b0ad3c3cec3a83119b566c92062609c88e1f0816bdf20c8f8ab7e7dd9bfeb17e3cd7c41df62445557e8b1872d76dc8ee89cfa7015ff5ba4255d6c19cb8bd032b975d00df73067804fc2a01a6b851ec93c8a0effc825f7fda2fc73bf6794e973ac274bb46e7bf3c3130efd03ddc9e3e80d1a2657bfcfb3c70e58a0aeb65a5bcde7a516937a2f8e99e158fa1ccc21a81ea75da3bba86a851c662eb16350c0668b0d7d75826209e9483d0c260c6849d2a6fb468cc78d56131cf06800cb536fc81a4ef6994bfe352feb7db92d2f438224b05469548add480d37399730e7beabdc7df78dc4e3ca997264d8f85e25542b0c6507326cf8047c473c898825a71706c25cf10d56572917c1b32a65b01501bc00144fa2823f0ae3dde2ec2b3ef52286e8293e315cdae57ff853cb0979d44525292c8ce4e4d6eef77eaacfca27fd15509df2445da87287a118a8a01d3e37c1c9f7703d30bf8e896da2d28bd1416e62c4e9b018abaa68ed9f76a48e405c7bfbc0afaddb05efbae84b6e0a0e014ff5422078a6a25608b1ee361035f204beee5df1c6593d6fa25ace000c57588178bc7bd1aedca9908270f058ce84034800f712e48181ffd9bdf3ae483dd17343f72bb118b362f366adeed415c9c1f9a80b20ec150379d723b4b0e8731e9013e282d74a7a3a0176c5d39ee794ccc1f50feeb2df45f71fb9bb1b5d7fb0d3b5480228d0868b04e7356ba97ae12cafcae9691fc3dd2a6a3d8788c3e11c88de078e42334e1eb9193cb73257e9ea6f3f90107482be1991d6a57733f5de8046debffd930311a24c5b5f5ec466eec426e8d6353f5426e1263dd98ba38b302e732596bee28d8856d4d18b337b11f38d51319fbc88f29b61d0c2607292092d16480e686f500dbe363be7d8927b5846cf1c2ca1c6f2bf897c6c1fae60439cc71eb14adb36925f1d8a792d237fce0d7c9a8b36815b1af89ce441999aeb67b8904a96e756708176bf5ea7cdf42d262471622a3c00e58240fb087bfb9b700d8d05aea4c990d05148b9d74771d1617d3a482b1801b8726cdc9ea36c2258a8d4688e46521ae92723c151039fac822d37309dbf89991cafd4a0cd4d7c889ae37cf77008383fcbbb5269eb174df2848b7d210fe051b7c98547706392a0dec9902086e1c6337c77caa8a4697cc56e549c04f7d8a81ab94297f5f22965cd58c06791305ff2416e2560be64fb3de7e899ca99fae25a4635d8c12492a28913d4e5dad5fe50fd712e148be7c6e7bde8b9ec9fa3eee3139640613378c9e1045c641465765f2e35c69bd771901abd9ecc0912f3beeb0e4ebfcaf27c54d197df53709e61b08e9b05082e080d2d5b67fea82b4ab39611207de90c8be5b1def1bb1e577bd03316df59ad98460ee6d1363e28f3a23dc6163ff3e5b5fe83d4103716c90dca0ed02094172c245910f3e49919751aff023956d87e9f209fec281ad4358420ab5cea2bdfe5fc5a0d5fa70052e5011500d58c6bcc86d1f93973c67256001ac6caa7402e0a82fee2cbab071fbbddcca1548f63be6e7693f47286b85a83af73e4280fb76277897bd00245c0c578b469b58e2b100c128ca20c588e7f824225a82570218e7a166b384dc31bf372b05ba34f8b1832bee9bf3d013f880da6e079948d308b178ebdce744a14221e62562094826f2af1553df536896b2e5fbbc3d8cc6524551d9dd016c5b6fce3dba595b67fef1a82735688d409dc286bb1dea41a72a31ced37a7ea9000c9bd38c1099ddcbdc427698b517cdbf26f142da3f6e9f6287ae5fc864f5e39ce6f4da25dd754e5da8d34f03dc0eb91e2f29ab044ec8d991b4dba204dae7f730990c8dbb30f0566bacaa06e66f6912062e7797b02794ed2815c8d0a22fd3f90a0a209cee19c4e8a8f9619705061c98bbc804a9d71eb2847e1885a2284b7543788a6c32700244a28f7f205c1907c1c9547095e235bf611604055210023987fd6e68e13f43d04980a2380144acc6ec7aaf76a998f182db1ed439d5a672301d20b8b560451396ddfac9e14851c3cb4cce72c7622a5e8e82935176d2a89e434ec33e760ef39861f2355092b5865c342fd8f7bc1f4e3cc75702eb0624960b74b17ac67ab663b3f96b97918c3a08d1b4b33d257e886a6f1aea841cba1d8bea9ed84f4a5d4737091b75b605557afac975ec0ef538b0e1aab70cb12d1e9dcf4ba303c406279d2ee21e24e3d27b753c24e56bbadcf708e7107fec39c78db488a7bf2db43fe54a397d27d4a81e860b53ba3680b2661d7e031c184da15a0cf89fe264fe49e9bf39613ab3cf9f86776a08646dec7481c22bf3841ff27837ed071a5e22f6844b01c3ee3440753fc8b203b1d5a31f826d7397314d2b9062976ef07e54405e28e1d4d6bb476e2d5f21c4d205949eeadda2b4634d0f28efc436b0d8a1910af3a8442af26968a11f8e1978ff6a659e679adf95f1558ef144a33611bb7fa711bd17d11bde79c093c97fea8c6cd81ad7b660b1e1707098acbaeeb380182de8f5bd3407837621b3321ce3dc43acbc913e7e2bb7e1102d22c558f27c679adcd4a687486a6506feac040264a01ec6c4f4a4204461c8ae583ccc5fcc0e143a48a6a39e7bc768ca9507aa5db8060a044d3dbf7cecdb21381468ebc7372fcce5d3c8a02a2da96af793e091569b5a3d5bfc7bf12e0c79135a4db0038d515462297ed34c651d0d8e5fe73484766e14e1f3fd89b7350cb2c2997415c92d9d458182a5d1a9ac198c9e00754b1214395c0906057470e909e0e67ebdd9f7e29b77b7670a4119d253680ee6d35f53cb7f43671ce1af40a44828da0d2828d9c713836b88f1a3ed8bd603b0d53525c881f6eb47566836839c6c8e8aa4dffc9bb2adb9c032df0828086f262236841766a784dffbe1dbf925b4200b79bdd4b035d57e6aaeec4b0feff1bc91c6d4b88f250aa98", 0x1006}, {&(0x7f0000009200)="333b60306fd6ac4b4c239b61ef6bf283c5251a863f158382d0c0d69d0b3ea4fd329afe23e7a622395eeec160ec74a1268413fdea1dc9caab7bf49a4bf2f665a4c925aed4283b9e7fca7af7fc5243416424c5bd4e76fccd99e5e543f0742141675605710ce3debc96a9bbcb76b64f20cfc16abea614c2350e53cec626c02270a912c8d88b37e4654a8e87a62cac2b92a57a9619997791", 0x96}], 0x3, &(0x7f000000a640), 0x0, 0x810}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}], 0x80, 0x40000}}], 0x4, 0x2c004011)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)
r12 = dup3(0xffffffffffffffff, r5, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000001400)={0x1, {{0xa, 0x4e23, 0x5, @local, 0x7ff}}, {{0xa, 0x4e22, 0x6, @mcast1, 0x5}}}, 0x108)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

5.677228588s ago: executing program 0 (id=9):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x79fa, 0x14402)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000340))
get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3)

5.656100588s ago: executing program 3 (id=11):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x5)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
shutdown(0xffffffffffffffff, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="be330d00bc02c4dc68c1d3ca38ef5f6d8cd0fb84a78f187651db6aab77e5900ccb3e49b173178ccc1f26ffb055a58feda646cae44e4070792e0107e46fa36d529f8b47a278f16af968e9366ed7d5b44e1e224ec3964be6f7adaa4dc94f67306e28911b0091eae83b5a4dc07ec8410db06e2ab8cab59aa1cac02ce08aed819b4f7a6b6e8fb93b75d10071aaf79e1566240d7d5daef94c8a42912e4c113b85839995f18eca0dc4e6f5ecf11079e73af98bfb7f8afd8dfca847c41eb47a3cd80a52718864c8d36c36b50ac4f446bc6aeae871bc47ccdf7f", 0xd6}, {&(0x7f00000003c0)="542ec33d376652187dafab546885b0695ac95d7bc98ecbcdff3cf8aa5b45159cbd778d64458d68830df0bf5c3f8584bea586758af062764ded5ec0c37c510289a35e7911fa8bab06f55e857e7ba29d099820a64acbe03ccb8a3cbc36f5166bbb38377045f597d2f0caabeda20b0058297bbec2581230682a882d2334effbf27fcc71247aa6ca99784a8f8ec8ce32c22e918a12659964940e42654317e98fc5cc180e8198aef40edc290e0ec3537a5954a1b70e0b9a639aa102f52edce197baffcc9b8583dece243a3918aaba98d055daaf1df2ec3653438f80ff62efab033540251230d8", 0xe4}, {&(0x7f00000004c0)="f1143ed3c364b553e7b691ae9c7505849d34b5fb1f3f9ec81dbf73c74f20c5d865ad7da3177f36a29ee1b4c9aceb4365d12d4fd8bab038fae97f9585bbb86957a6919a6167e92f0d3a2b146e3bff4bc91656cb639a357259a3b7ee6a05", 0x5d}, {&(0x7f0000000580)="4b891bb33d312846d0829289bb3e399fd59140d59f994b6e11ea81bdd637fcc7fc29965584d26f", 0x27}], 0x4)
connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8)
shutdown(0xffffffffffffffff, 0x1)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

5.423840469s ago: executing program 1 (id=12):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x33}, 0x0, @in=@loopback, 0xfffffffd, 0x5, 0x0, 0xb7}}, 0xe8) (fail_nth: 1)

5.387972002s ago: executing program 1 (id=13):
r0 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) (async)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff)
r1 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
flistxattr(0xffffffffffffffff, &(0x7f00000001c0)=""/116, 0x74)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r3, 0x25, 0x0, @val=@tracing}, 0x40)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x74) (async)
ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x74)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r4, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRES64=r4, @ANYRES8], 0x50)
fsmount(r1, 0x0, 0xf)

4.925199222s ago: executing program 0 (id=14):
syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c240703000000ed129e8430072408000000000924030000000302000904010000010200000904010101010200000824020100000000090501090000000310072501800101010904020000010300000904020101010200000f"], 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup2(r0, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x1, 0x4)

4.707587636s ago: executing program 4 (id=15):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
unshare(0x2000400)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0)
clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000300)="aa89d6233c68757cd56d0af23483c3654c49e574480b5f561c513a31bb50ac9788a22cfd334379392a1aaae7dcfb6f5c888629fe33a714a881c4b0a92d6c11617986c60c0ff9b1566a929d6ad97df756699491afde53c464347e434973dc23", &(0x7f00000000c0)=@udp6=r6, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x42200)
r7 = socket(0x10, 0x803, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYRES32=r4], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000ffdbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800)
sendmsg$TIPC_NL_NET_GET(r7, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="23092bbd70000900df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x7)

4.586628907s ago: executing program 1 (id=16):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x12, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x6, 0x1, 0x2, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xcb, &(0x7f0000000800)=""/203, 0x41000, 0x2, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x9, 0x570d8f05, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x1], &(0x7f0000000380)=[{0x5, 0x3, 0xb, 0xa}, {0x5, 0x4, 0xd}, {0x2, 0x5, 0xf, 0x8}, {0x4, 0x4, 0x10, 0x1c}], 0x10, 0x29, @void, @value}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@deltfilter={0x568, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0xfff2}, {0x10}, {0xfff2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xe4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x454, 0x2, [@TCA_CGROUP_ACT={0x450, 0x1, [@m_skbmod={0xb0, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x82, 0x6, "06a0cc0efd2a37e1e7199cfbaf37f1e2ab4bbcbaba721785fd3067a90b503eb336bd83bb8424fa197ae8a0e9a0f92457300b07f00377a911403e3862f87fee43a30925c1fe3108c938a0e7ebe2ff4233dde9e4d1f5b2b86ccd4ef635e0cfbc0dbedc41aec73487aa1439cc59748edc816b7720fcf86c66800d50a56b12e7"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x1d0, 0xc, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xef4a, 0x10000001, 0x7, 0x1}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9b, 0x7, 0x20000000, 0x800, 0x4}, @rand_addr=0x64010100, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1a6b, 0x7, 0x5, 0xf, 0x36}, @dev={0xac, 0x14, 0x14, 0x20}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x7, 0x9, 0xff}, @broadcast, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0xffffffffffffffff, 0x7, 0xff}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}]}, {0xdd, 0x6, "f8a3e4ef01c2f5548e1f99046e56570c34abe4027d9e246b878bbd56b853ad29ba6dd8acf8bd28fd7923c828cd20d5f3ecfb5ce86209678b2f4b93eecb9361f2d4561aa7592910a21508ec694c58d5da241711c728d9adf9d05c86c936ecfa3df1c2e69096d61f63c7623bbccc4d7c90970598d4a7ba0766859322da768720b7b7100372dc24c8b8663a68cd1a15d548f300d54db8f0a86311f033b38f385d23f7e2850c3efe98fc57ca531c7d2e9509499b6a7e4378e927376d1a20ff7641c38735eafa23d5de827b899c18f192154bf78638d59913e3226a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x98, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x69, 0x6, "1815f6913a8a62fbde450a8b259fd6c2868de55e43defb96e9124606183f56ade39a4954b542ccad4c44bbb29dcc45f52c0eebda36f66519d8014aea608917944a3078c89483314fa3a796f32b41055a128524e31b324af8ed784bcf8062cb671b2c1908b1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x134, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7b2, 0x0, 0x9, 0xfffffff8}, @private=0xa010100, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0x4, 0x0, 0x7, 0x81}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x7, 0x0, 0x80}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x1}}]}, {0x91, 0x6, "5713ed6c1ab55f5b0d7941cfe3ea56e3c01909e6b534f5e992bd26e9a230c55fe6374e812f926f03821d3fbc0b48468c85f4ee3759e9311e2851718a572c985d4e4c1f8636efa6e96fc10495dfbdb8f5ceca7cb8010190fa4b7124acad793a018c9bd45dc05d7327f7c9b9478bf1613787adb97c53229eacbef42f1ae357a8d85d64af549c6cc595e9169221d9"}, {0xc, 0x7, {0x628ecff22eb6a4de}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xb8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x84, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xa8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x101}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xd79}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x7c}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x25}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0x11b6}, @TCA_CHAIN={0x8, 0xb, 0x8e}]}, 0x568}}, 0x804)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@deltclass={0x24, 0x29, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0x6, 0x9}, {0xe, 0xa}}}, 0x24}}, 0x2000c000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f00005e7000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setuid(0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
getrlimit(0x5, &(0x7f0000000040))
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000580))
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

4.584254855s ago: executing program 3 (id=17):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_pts(0xffffffffffffffff, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

3.563965845s ago: executing program 4 (id=18):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000240)={0x22fdb43ab75d8351, 0x21, 0x51, {0x51, 0xb, "f07f5d10880c57c3db525d9923484358437624fa0ac9cf9adee7f1390696976ca5c198b5aad8eea9e77701d164aeb4b6d9003a52b60729e5af9c110deba310dcfab961989884fddc544d87341c3017"}}, &(0x7f00000002c0)={0x0, 0x3, 0x50, @string={0x50, 0x3, "ab1539fcb0405610b3b6b89afe15026ac6eb8de7d4178aa01f08bc60ea3207b630adea571bb6a2ed967f48ca46a27ad2e20271b82927f0a5f38b1a8b554d96a58eb37340d918fa85e34fb9f3bd54"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000340)={0x40, 0xb, 0x44, "01dcfca283b3b1935dfa901a6963c7b91b3929b5fe31b885e3e5be132b29a13f776b4522f8ebd6892f4a37238ef5eb7fa032ae326f87888dba36be035c38f53e3be12f95"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)=ANY=[@ANYBLOB="00004ee1a9"], &(0x7f0000000400)={0x20, 0x82, 0x1, ')C'}, &(0x7f0000000440)={0x20, 0x83, 0x3, "3b929b"}, &(0x7f0000000480)={0x20, 0x84, 0x1, '1'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "ebaa71"}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000200)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[])
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffe}}, 0x10)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x100)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
chdir(0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_io_uring_setup(0x1612, &(0x7f0000000040)={0x0, 0x0, 0x201}, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

3.490612903s ago: executing program 1 (id=19):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
epoll_create(0x208000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0)
memfd_create(&(0x7f0000000880)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x5)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000232000/0x2000)=nil, 0x2000}})

2.908845024s ago: executing program 3 (id=20):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
connect$bt_sco(r4, 0x0, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x5)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
shutdown(r4, 0x1)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000002c0)="be330d00bc02c4dc68c1d3ca38ef5f6d8cd0fb84a78f187651db6aab77e5900ccb3e49b173178ccc1f26ffb055a58feda646cae44e4070792e0107e46fa36d529f8b47a278f16af968e9366ed7d5b44e1e224ec3964be6f7adaa4dc94f67306e28911b0091eae83b5a4dc07ec8410db06e2ab8cab59aa1cac02ce08aed819b4f7a6b6e8fb93b75d10071aaf79e1566240d7d5daef94c8a42912e4c113b85839995f18eca0dc4e6f5ecf11079e73af98bfb7f8afd8dfca847c41eb47a3cd80a52718864c8d36c36b50ac4f446bc6aeae871bc47ccdf7f", 0xd6}, {&(0x7f00000003c0)="542ec33d376652187dafab546885b0695ac95d7bc98ecbcdff3cf8aa5b45159cbd778d64458d68830df0bf5c3f8584bea586758af062764ded5ec0c37c510289a35e7911fa8bab06f55e857e7ba29d099820a64acbe03ccb8a3cbc36f5166bbb38377045f597d2f0caabeda20b0058297bbec2581230682a882d2334effbf27fcc71247aa6ca99784a8f8ec8ce32c22e918a12659964940e42654317e98fc5cc180e8198aef40edc290e0ec3537a5954a1b70e0b9a639aa102f52edce197baffcc9b8583dece243a3918aaba98d055daaf1df2ec3653438f80ff62efab033540251230d8", 0xe4}, {&(0x7f00000004c0)="f1143ed3c364b553e7b691ae9c7505849d34b5fb1f3f9ec81dbf73c74f20c5d865ad7da3177f36a29ee1b4c9aceb4365d12d4fd8bab038fae97f9585bbb86957a6919a6167e92f0d3a2b146e3bff4bc91656cb639a357259a3b7ee6a05", 0x5d}, {&(0x7f0000000580)="4b891bb33d312846d0829289bb3e399fd59140d59f994b6e11ea81bdd637fcc7fc29965584d26f", 0x27}], 0x4)
connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8)
shutdown(0xffffffffffffffff, 0x1)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

2.908201859s ago: executing program 1 (id=21):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x15)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b814e9952bc0439c6671dec3d92c825b61551dfe0d13a3a96b4164b41cfd2f44d23899ffe5fc40d406b91136155e3e81688e0a7d26f2636300eb56"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d})
r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01)
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000380))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0xf00)

2.587733618s ago: executing program 2 (id=22):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x544, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x518, 0x2, [@TCA_U32_SEL={0x514, 0x5, {0x10, 0x1, 0x6, 0x1, 0x10, 0x7, 0xfffb, 0x6, [{0x4, 0x7, 0x7}, {0x9, 0xfff, 0xc4, 0x8000}, {0x6, 0xffff, 0xb, 0x80000000}, {0xe9e3, 0x4, 0x10, 0x3ff}, {0xfffffff6, 0xbd, 0x1, 0x3}, {0x8, 0x748c, 0x3, 0x6}, {0x0, 0x9, 0x6, 0xd72}, {0x8, 0x79, 0xfffffe01, 0x2}, {0x1, 0x3, 0x7, 0x77}, {0x3, 0x6, 0x8001, 0x963}, {0xcdf, 0x712, 0x8, 0x8}, {0x6, 0x4, 0xe, 0x3}, {0x4, 0xbb, 0x4, 0x8}, {0x0, 0x4, 0x3, 0x7}, {0x0, 0x1, 0xaff1, 0x45}, {0x3, 0x7, 0x8, 0x2}, {0x9, 0x81, 0x4, 0x2}, {0xffffff80, 0x9, 0x5, 0x4}, {0x1, 0xfff, 0x0, 0x83b2}, {0x3, 0x1, 0x63c, 0xc}, {0x5, 0x6, 0x2, 0x3}, {0x2, 0x5, 0x9, 0x3}, {0x8, 0x4, 0x5, 0x400}, {0x1, 0x46, 0x8, 0x7c}, {0x4, 0x5, 0x2, 0x4}, {0x9, 0x3, 0x1}, {0x7, 0x7, 0x401, 0x40}, {0x3, 0x2, 0x3, 0x68}, {0x4, 0x0, 0x7, 0xe}, {0x30a, 0xfffffff9, 0x7f, 0x8001}, {0x0, 0x2, 0x0, 0x100}, {0x8, 0x8, 0x4, 0x81}, {0x0, 0xdb, 0x622dc04a, 0x5}, {0xffffffad, 0x7, 0x9f, 0x4}, {0x7, 0xe42d, 0x9, 0x2}, {0x7, 0x67, 0x9, 0x1}, {0xfff, 0x6, 0x4, 0x7}, {0xb, 0x1000, 0x80, 0x1}, {0x2, 0x3, 0x5, 0x40}, {0x8, 0x3, 0x5, 0x2}, {0x1, 0x10, 0x96c, 0x9}, {0x1, 0xfffffff9, 0x8, 0x7f}, {0xcdc0b7f, 0xcda6, 0x101, 0x5}, {0x800, 0x1, 0x3, 0x4}, {0xb6000000, 0x200, 0x5, 0xffffffff}, {0x6, 0x101, 0x8, 0xf551}, {0x1, 0x5, 0xf3, 0x3}, {0xffff2a20, 0x200, 0xe8, 0x1}, {0x2, 0x2, 0xe0000000, 0x1}, {0x83, 0x80000001, 0x5, 0x7fff}, {0x9, 0x4f, 0xe, 0x3}, {0x5458, 0x8, 0x8, 0x4}, {0x8, 0x8783dd7d, 0x4, 0x34}, {0x3, 0x2, 0x7, 0x200}, {0x78, 0x5, 0x6, 0x1}, {0x9, 0x2f, 0x0, 0x2}, {0x7, 0x4, 0x7, 0xa}, {0x1, 0x8, 0x8, 0x3}, {0x5, 0x9, 0x6f7f8590, 0x101}, {0x1ff, 0x7, 0x4, 0xfffffff7}, {0x2, 0xb44, 0x9, 0x44d}, {0xa, 0x2, 0xfffffffa, 0xb58}, {0x3, 0xfff, 0x0, 0x5}, {0x2800, 0x1, 0x5, 0x5168}, {0x8, 0x0, 0x7ad, 0x1}, {0x4, 0xfffffff8, 0xc, 0x2}, {0x43, 0x5, 0x7, 0x101}, {0x3b93c3e1, 0x2a, 0x1, 0x3}, {0x6, 0x4, 0x5, 0xb93}, {0x6, 0x1c000000, 0x8, 0x3}, {0x6, 0x0, 0x7, 0xfffff729}, {0x81, 0xcc0, 0x9ae1, 0x1}, {0x30, 0x5, 0x529, 0x8000}, {0x4, 0x3612, 0x2, 0x4b3}, {0x3, 0x5, 0x1, 0x2}, {0x1, 0x100, 0x3, 0x1}, {0xd5, 0x90ee, 0x3, 0xff}, {0xfffffffe, 0x8, 0x9, 0x80000000}, {0xa, 0x7, 0x40, 0x10001}, {0x5f, 0x44, 0x0, 0xfff}]}}]}}]}, 0x544}}, 0x801)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})

2.587246801s ago: executing program 0 (id=23):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x544, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x518, 0x2, [@TCA_U32_SEL={0x514, 0x5, {0x10, 0x1, 0x6, 0x1, 0x10, 0x7, 0xfffb, 0x6, [{0x4, 0x7, 0x7}, {0x9, 0xfff, 0xc4, 0x8000}, {0x6, 0xffff, 0xb, 0x80000000}, {0xe9e3, 0x4, 0x10, 0x3ff}, {0xfffffff6, 0xbd, 0x1, 0x3}, {0x8, 0x748c, 0x3, 0x6}, {0x0, 0x9, 0x6, 0xd72}, {0x8, 0x79, 0xfffffe01, 0x2}, {0x1, 0x3, 0x7, 0x77}, {0x3, 0x6, 0x8001, 0x963}, {0xcdf, 0x712, 0x8, 0x8}, {0x6, 0x4, 0xe, 0x3}, {0x4, 0xbb, 0x4, 0x8}, {0x0, 0x4, 0x3, 0x7}, {0x0, 0x1, 0xaff1, 0x45}, {0x3, 0x7, 0x8, 0x2}, {0x9, 0x81, 0x4, 0x2}, {0xffffff80, 0x9, 0x5, 0x4}, {0x1, 0xfff, 0x0, 0x83b2}, {0x3, 0x1, 0x63c, 0xc}, {0x5, 0x6, 0x2, 0x3}, {0x2, 0x5, 0x9, 0x3}, {0x8, 0x4, 0x5, 0x400}, {0x1, 0x46, 0x8, 0x7c}, {0x4, 0x5, 0x2, 0x4}, {0x9, 0x3, 0x1}, {0x7, 0x7, 0x401, 0x40}, {0x3, 0x2, 0x3, 0x68}, {0x4, 0x0, 0x7, 0xe}, {0x30a, 0xfffffff9, 0x7f, 0x8001}, {0x0, 0x2, 0x0, 0x100}, {0x8, 0x8, 0x4, 0x81}, {0x0, 0xdb, 0x622dc04a, 0x5}, {0xffffffad, 0x7, 0x9f, 0x4}, {0x7, 0xe42d, 0x9, 0x2}, {0x7, 0x67, 0x9, 0x1}, {0xfff, 0x6, 0x4, 0x7}, {0xb, 0x1000, 0x80, 0x1}, {0x2, 0x3, 0x5, 0x40}, {0x8, 0x3, 0x5, 0x2}, {0x1, 0x10, 0x96c, 0x9}, {0x1, 0xfffffff9, 0x8, 0x7f}, {0xcdc0b7f, 0xcda6, 0x101, 0x5}, {0x800, 0x1, 0x3, 0x4}, {0xb6000000, 0x200, 0x5, 0xffffffff}, {0x6, 0x101, 0x8, 0xf551}, {0x1, 0x5, 0xf3, 0x3}, {0xffff2a20, 0x200, 0xe8, 0x1}, {0x2, 0x2, 0xe0000000, 0x1}, {0x83, 0x80000001, 0x5, 0x7fff}, {0x9, 0x4f, 0xe, 0x3}, {0x5458, 0x8, 0x8, 0x4}, {0x8, 0x8783dd7d, 0x4, 0x34}, {0x3, 0x2, 0x7, 0x200}, {0x78, 0x5, 0x6, 0x1}, {0x9, 0x2f, 0x0, 0x2}, {0x7, 0x4, 0x7, 0xa}, {0x1, 0x8, 0x8, 0x3}, {0x5, 0x9, 0x6f7f8590, 0x101}, {0x1ff, 0x7, 0x4, 0xfffffff7}, {0x2, 0xb44, 0x9, 0x44d}, {0xa, 0x2, 0xfffffffa, 0xb58}, {0x3, 0xfff, 0x0, 0x5}, {0x2800, 0x1, 0x5, 0x5168}, {0x8, 0x0, 0x7ad, 0x1}, {0x4, 0xfffffff8, 0xc, 0x2}, {0x43, 0x5, 0x7, 0x101}, {0x3b93c3e1, 0x2a, 0x1, 0x3}, {0x6, 0x4, 0x5, 0xb93}, {0x6, 0x1c000000, 0x8, 0x3}, {0x6, 0x0, 0x7, 0xfffff729}, {0x81, 0xcc0, 0x9ae1, 0x1}, {0x30, 0x5, 0x529, 0x8000}, {0x4, 0x3612, 0x2, 0x4b3}, {0x3, 0x5, 0x1, 0x2}, {0x1, 0x100, 0x3, 0x1}, {0xd5, 0x90ee, 0x3, 0xff}, {0xfffffffe, 0x8, 0x9, 0x80000000}, {0xa, 0x7, 0x40, 0x10001}, {0x5f, 0x44, 0x0, 0xfff}]}}]}}]}, 0x544}}, 0x801)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})

2.384403095s ago: executing program 0 (id=24):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000000c0)=0x40)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00:\x00\v\x00\x00'], 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a500000097"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000003000/0x1000)=nil, 0x6)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

2.344763627s ago: executing program 2 (id=25):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x9)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900"], 0x98}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="18f77f87d7b363eaae000000000000000700000000000000abf513067603f9865b0bcf1e4dfbdbf849eea2323c409cd3f9ccbd04f10ba6bef168a7503580076bcc7a1c6e322eb9b0177e19a4c8e844faf38e30340afdc06e3d2b82b3de6b9536e754fc4f17bd56704745dfce38b0ac955d2cba4744c4ca90cdef8d7a41fb9a80ab73582f49daf296dac8af0ba6acb72a8a717b6f0a720881a5d212c40465afb5be7fcf3e071f5b7039b0a8fbacea8b8d333ada43f1d25dd553064b"], 0x18}], 0x1}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x7, 0x67, {0x67, 0x23, "73c60075a101a811f0e152c2b15809b9705470110b981a73880e515cd5c8cdd2b1d779ac4bc588e6aa8dbb3f54cc2c4738d2f9d59c8b18b4e50068f4746176ca8014e42ffdd79fb4e87c6bc347dc2050b506d746db8dcea6452652985cf01a9fb882083d28"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="00030400000004030004c9abdd0e801dd428e155c07fac913a89c0e254ef", @ANYRES8=r1], &(0x7f0000000380)=ANY=[@ANYBLOB="002201000072f7"], &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x18, 0x3, 0x1, {0x22, 0xd45}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x0, 0xa, 0xb2, "525d8d84a5af84f81f201e04cc7feffa90fd735a9d6362eb493c460b22dd283277c45891a34b2c32c31b37d286f08738dc4af11e935f56a0d073ff83c68ad38688658851ef43cfa26fcdb87138dcba171ccd4df29e7eceab95b04a395f171dc2dfe16e8212ab2c958f4eeffa0b66eb3ab85f0fccd1f40edc990d38134c10b5837c7013bb4d64d0a834a74ae90344dd902bb1a7c55dba947a30aab1f9b6ab133d5ee8826de7d27bc56e969fd048976f7e82b6"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x94}, &(0x7f00000002c0)={0x20, 0x1, 0x2a, "fb2b4aba03698aa50800100071b8464fdf848f63982bebae4f5307373367a2766621a36dea05707a71ab"}, &(0x7f0000000880)={0x20, 0x3, 0x1}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}})

1.444781898s ago: executing program 3 (id=26):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080), 0x8)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

1.2562309s ago: executing program 0 (id=27):
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340))
socket$isdn_base(0x22, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'geneve0\x00', <r1=>0x0})
r2 = socket(0x11, 0x3, 0x0)
sendto$packet(r2, &(0x7f0000000000)="1412e0c84935a9738e0ff2f788a8", 0x12, 0x0, &(0x7f00000007c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
socket$tipc(0x1e, 0x5, 0x0)

1.14868323s ago: executing program 3 (id=28):
close(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x3, [0x6, 0xffff1337, 0x3], [{0x0, 0x7, 0x0, 0x1}, {0x35, 0x35}, {0x9, 0x131}, {0x2, 0x3}, {0x0, 0xa5}, {}, {0x80000000, 0xfffffffd}, {0x0, 0x7fff}, {0xf}, {0xfffffffd}, {0x0, 0x2}, {0xdab5, 0xfffffffd}], 0xc})
lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0x4c, 0x2c, ""/44}, &(0x7f0000000000)=0x4c, 0x1)
bind$inet(r4, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x38, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)}], 0x1}, 0x0)
r8 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80))
io_uring_register$IORING_REGISTER_FILES2(r8, 0x6, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="b9c6d87fe657b6b464decd55fae2087e85f4f1024f1c5965da33cc88fb4e71431cb2647a86375344ff6ef71cf2cd5c0753dc064899b5e222f95bfe9eaae843e67913c30ff4bb1e098434939cd2be84e36b54ee4bc2a06b7485f5f23cd042c4174504c3127f4cb2d9469ba2b40747663fa2f4ec17079f6d40a3f2e68b4a2dd921351d977b3e8dbd5207b30cb8971fcfcd30b5ed9e3f87c460991906139cb238ae34e8f3dece00"/177, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)

1.103820482s ago: executing program 0 (id=29):
msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000011000000594e76cc9e6944555c0b6afd5f09c907b970d0c4cf9b07620fc7a1f9a62df4f843e6289c3271e556b3f3925662921afc17a1678bb9a96dfda0d4add17f0a04"], 0x8, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = epoll_create(0x7)
getpid()
socket$tipc(0x1e, 0x2, 0x0)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080))
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='geneve1\x00', 0x10)
setgroups(0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001114b76d6a2400000000000008004b001340000008004a"], 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))

560.532248ms ago: executing program 3 (id=30):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
socket$kcm(0x10, 0x2, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket(0x1d, 0xde58181180db8703, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x2, {0x0, 0x0, 0x2}}, 0x18)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x15, 0x3, 'ovf\x00', 0x21, 0x5bc, 0x4c}, 0x2c)

0s ago: executing program 1 (id=31):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_pts(0xffffffffffffffff, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x167, &(0x7f0000000e80)={{0x12, 0x1, 0x201, 0xd1, 0x1a, 0xbf, 0x40, 0xfd9, 0x3f, 0x85a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x155, 0x1, 0x0, 0x4, 0x80, 0xc0, [{{0x9, 0x4, 0x87, 0xc, 0x5, 0xf4, 0x80, 0xf4, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "411ac9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0xc740, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x8000}, @mdlm_detail={0x4, 0x24, 0x13, 0x4}, @mdlm_detail={0xc7, 0x24, 0x13, 0x31, "279272329c40262086bbec70eab0afe4c9f6e60150d7a611dc98a4aa84d22d39a5c0c6157659f7cb870ea608d7423e5c7c6da12a19ddef751ddc54764de1a1e0b983e35889faa39d29226189fe87030c6dd20739911acd0b5d472f45cda22e71b5ad77821817d8529e4e99d6628cb8e0e414e985ae62dbb9af2ae97d6a0db0467daddc7840f056e2ea403662684ec4ab4bf11027a35c744e844a0b71497497b4164799e703441e020be73868fd170aecb8dba676de69a9eb9ab11bf306b77c723da76e"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x9, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0x9}]}], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x2, 0x1}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x2, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf1, 0x3}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x9, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x367}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x7f, 0x4, 0x4, [@generic={0x4, 0x3, "b4dc"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0x4}]}}]}}]}}]}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="00ffee0000eeffffffffffffff00ff0300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (fail_nth: 7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x8000}}]}}]}, 0xa4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts.
[   47.909930][   T29] audit: type=1400 audit(1731473533.013:88): avc:  denied  { mounton } for  pid=5812 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.913122][ T5812] cgroup: Unknown subsys name 'net'
[   47.938553][   T29] audit: type=1400 audit(1731473533.023:89): avc:  denied  { mount } for  pid=5812 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   47.960808][   T29] audit: type=1400 audit(1731473533.043:90): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.152620][ T5812] cgroup: Unknown subsys name 'cpuset'
[   48.159659][ T5812] cgroup: Unknown subsys name 'rlimit'
[   48.274525][   T29] audit: type=1400 audit(1731473533.383:91): avc:  denied  { setattr } for  pid=5812 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   48.301956][   T29] audit: type=1400 audit(1731473533.383:92): avc:  denied  { create } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.328467][   T29] audit: type=1400 audit(1731473533.383:93): avc:  denied  { write } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.342677][ T5814] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   48.349093][   T29] audit: type=1400 audit(1731473533.383:94): avc:  denied  { read } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.378136][   T29] audit: type=1400 audit(1731473533.383:95): avc:  denied  { mounton } for  pid=5812 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   48.402938][   T29] audit: type=1400 audit(1731473533.383:96): avc:  denied  { mount } for  pid=5812 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   48.427651][   T29] audit: type=1400 audit(1731473533.423:97): avc:  denied  { read } for  pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   49.221595][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.026036][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.045061][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.055224][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.062551][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   51.070560][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.078210][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   51.085784][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.086360][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.093138][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   51.101097][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.114511][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.121006][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   51.121695][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   51.135638][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.149929][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   51.157747][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   51.162143][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   51.165435][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.172651][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   51.178997][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.193171][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.193955][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   51.200346][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   51.209041][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   51.214992][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   51.221700][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   51.228099][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.235538][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   51.242698][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.275177][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.529282][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   51.598055][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   51.615794][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   51.677273][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   51.688131][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.695948][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.703420][ T5827] bridge_slave_0: entered allmulticast mode
[   51.709748][ T5827] bridge_slave_0: entered promiscuous mode
[   51.718916][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.726049][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.733227][ T5827] bridge_slave_1: entered allmulticast mode
[   51.739745][ T5827] bridge_slave_1: entered promiscuous mode
[   51.761260][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   51.789237][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.796462][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.803812][ T5822] bridge_slave_0: entered allmulticast mode
[   51.810375][ T5822] bridge_slave_0: entered promiscuous mode
[   51.817076][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.824341][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.831555][ T5822] bridge_slave_1: entered allmulticast mode
[   51.837993][ T5822] bridge_slave_1: entered promiscuous mode
[   51.863443][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.870599][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.877687][ T5825] bridge_slave_0: entered allmulticast mode
[   51.884264][ T5825] bridge_slave_0: entered promiscuous mode
[   51.896382][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.927126][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.934301][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.941455][ T5825] bridge_slave_1: entered allmulticast mode
[   51.948192][ T5825] bridge_slave_1: entered promiscuous mode
[   51.959318][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.978519][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.006922][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.033193][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.044996][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.060321][ T5827] team0: Port device team_slave_0 added
[   52.066859][ T5827] team0: Port device team_slave_1 added
[   52.072787][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.080263][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.087338][ T5828] bridge_slave_0: entered allmulticast mode
[   52.093902][ T5828] bridge_slave_0: entered promiscuous mode
[   52.101286][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.108335][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.115632][ T5828] bridge_slave_1: entered allmulticast mode
[   52.122930][ T5828] bridge_slave_1: entered promiscuous mode
[   52.150676][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.157766][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.167765][ T5826] bridge_slave_0: entered allmulticast mode
[   52.174257][ T5826] bridge_slave_0: entered promiscuous mode
[   52.182990][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.190134][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.197388][ T5826] bridge_slave_1: entered allmulticast mode
[   52.203907][ T5826] bridge_slave_1: entered promiscuous mode
[   52.217585][ T5825] team0: Port device team_slave_0 added
[   52.224908][ T5822] team0: Port device team_slave_0 added
[   52.232408][ T5822] team0: Port device team_slave_1 added
[   52.254296][ T5825] team0: Port device team_slave_1 added
[   52.265369][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.272662][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.299030][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.314157][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.342267][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.349200][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.375551][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.387395][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.394496][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.420385][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.436337][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.447098][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.458448][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.468333][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.475487][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.501503][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.513473][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.520439][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.546366][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.557959][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.565031][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.590943][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.649789][ T5828] team0: Port device team_slave_0 added
[   52.664505][ T5826] team0: Port device team_slave_0 added
[   52.675826][ T5826] team0: Port device team_slave_1 added
[   52.685036][ T5822] hsr_slave_0: entered promiscuous mode
[   52.691143][ T5822] hsr_slave_1: entered promiscuous mode
[   52.697971][ T5828] team0: Port device team_slave_1 added
[   52.709810][ T5827] hsr_slave_0: entered promiscuous mode
[   52.715826][ T5827] hsr_slave_1: entered promiscuous mode
[   52.723935][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.731871][ T5827] Cannot create hsr debugfs directory
[   52.763472][ T5825] hsr_slave_0: entered promiscuous mode
[   52.769747][ T5825] hsr_slave_1: entered promiscuous mode
[   52.777694][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.785804][ T5825] Cannot create hsr debugfs directory
[   52.794377][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.801355][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.827276][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.838705][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.845688][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.871928][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.898318][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.905339][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.931285][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.948680][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.955745][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.982019][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.009487][ T5826] hsr_slave_0: entered promiscuous mode
[   53.015606][ T5826] hsr_slave_1: entered promiscuous mode
[   53.021581][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.029109][ T5826] Cannot create hsr debugfs directory
[   53.097200][ T5828] hsr_slave_0: entered promiscuous mode
[   53.104022][ T5828] hsr_slave_1: entered promiscuous mode
[   53.109939][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.117496][ T5828] Cannot create hsr debugfs directory
[   53.266797][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   53.270444][   T54] Bluetooth: hci4: command tx timeout
[   53.281605][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   53.291138][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   53.306255][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   53.336759][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.343928][   T54] Bluetooth: hci0: command tx timeout
[   53.343941][ T5824] Bluetooth: hci2: command tx timeout
[   53.344038][ T5824] Bluetooth: hci1: command tx timeout
[   53.349416][   T54] Bluetooth: hci3: command tx timeout
[   53.368711][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.384144][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.401476][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.436281][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   53.446001][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   53.454778][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   53.465473][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   53.511451][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.541577][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.559524][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.572663][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.579407][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.592982][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.602909][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.611360][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.627710][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.658832][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   53.683272][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.690393][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.699065][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.706183][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.733955][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.787768][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   53.809697][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.816789][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.842427][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.859997][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.867062][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.883050][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   53.883067][   T29] audit: type=1400 audit(1731473538.993:111): avc:  denied  { sys_module } for  pid=5822 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   53.901775][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.925623][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.959505][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   53.985650][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   53.994356][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.001425][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.014937][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   54.045584][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.052654][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.066189][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.073265][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.094801][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.101879][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.116427][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.131414][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.138447][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.153547][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.168692][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.176214][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.397273][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.452893][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.504661][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.546370][ T5825] veth0_vlan: entered promiscuous mode
[   54.572819][ T5822] veth0_vlan: entered promiscuous mode
[   54.579446][ T5826] veth0_vlan: entered promiscuous mode
[   54.594197][ T5826] veth1_vlan: entered promiscuous mode
[   54.611820][ T5822] veth1_vlan: entered promiscuous mode
[   54.632994][ T5826] veth0_macvtap: entered promiscuous mode
[   54.641496][ T5826] veth1_macvtap: entered promiscuous mode
[   54.649816][ T5825] veth1_vlan: entered promiscuous mode
[   54.675550][ T5827] veth0_vlan: entered promiscuous mode
[   54.685691][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.702341][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.722916][ T5827] veth1_vlan: entered promiscuous mode
[   54.734185][ T5822] veth0_macvtap: entered promiscuous mode
[   54.742244][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.751873][ T5825] veth0_macvtap: entered promiscuous mode
[   54.761759][ T5825] veth1_macvtap: entered promiscuous mode
[   54.774299][ T5822] veth1_macvtap: entered promiscuous mode
[   54.791328][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.802435][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.811430][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.822611][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.833434][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.844538][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.855337][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.876838][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.890229][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.902690][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.919719][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.931314][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.942776][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.953809][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.964905][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.972355][ T5828] veth0_vlan: entered promiscuous mode
[   54.981245][ T5827] veth0_macvtap: entered promiscuous mode
[   54.997460][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.006821][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.015879][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.025324][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.042440][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.053543][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.063406][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.074205][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.084751][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.099386][ T5828] veth1_vlan: entered promiscuous mode
[   55.116607][ T5827] veth1_macvtap: entered promiscuous mode
[   55.127434][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.137169][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.145909][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.155487][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.203022][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.209301][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.213557][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.227917][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.238730][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.249406][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.259478][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.270585][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.281070][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.306834][ T5828] veth0_macvtap: entered promiscuous mode
[   55.324471][ T5828] veth1_macvtap: entered promiscuous mode
[   55.336528][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.348464][   T54] Bluetooth: hci4: command tx timeout
[   55.354233][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.364219][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.374630][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.384613][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.395049][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.405775][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.420251][   T54] Bluetooth: hci1: command tx timeout
[   55.428578][ T5139] Bluetooth: hci0: command tx timeout
[   55.428965][ T5824] Bluetooth: hci2: command tx timeout
[   55.434838][ T5139] Bluetooth: hci3: command tx timeout
[   55.448480][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.459563][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.469398][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.480221][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.490262][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.491748][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.501379][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.518794][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.530383][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.535104][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.541148][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.555553][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.564489][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.573341][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.582367][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.598988][   T29] audit: type=1400 audit(1731473540.703:112): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.dS3IqJ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   55.625310][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.646431][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.657163][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.666301][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.674299][   T29] audit: type=1400 audit(1731473540.703:113): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.676208][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.698936][   T29] audit: type=1400 audit(1731473540.713:114): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.dS3IqJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   55.712342][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.742642][   T29] audit: type=1400 audit(1731473540.713:115): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   55.749253][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.766186][   T29] audit: type=1400 audit(1731473540.713:116): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.dS3IqJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   55.804127][   T29] audit: type=1400 audit(1731473540.713:117): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.dS3IqJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   55.805607][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.832646][   T29] audit: type=1400 audit(1731473540.733:118): avc:  denied  { unmount } for  pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   55.846772][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.866993][   T29] audit: type=1400 audit(1731473540.753:119): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   55.871922][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.895096][   T29] audit: type=1400 audit(1731473540.753:120): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   55.910230][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.939274][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.965457][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.975202][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.004649][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.015355][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.028459][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.038243][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.068411][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.082304][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.099006][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.109189][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.511552][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.550604][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.558712][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.597019][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.619448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   56.700052][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   56.734539][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.742874][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.780163][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   56.780456][ T5916] mkiss: ax0: crc mode is auto.
[   56.843430][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.874958][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.006429][ T5922] capability: warning: `syz.4.6' uses 32-bit capabilities (legacy support in use)
[   57.432873][ T5139] Bluetooth: hci4: command tx timeout
[   57.799799][ T5139] Bluetooth: hci3: command tx timeout
[   57.805552][ T5139] Bluetooth: hci2: command tx timeout
[   57.810158][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'.
[   57.820245][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.829759][ T5139] Bluetooth: hci1: command tx timeout
[   57.835876][ T5139] Bluetooth: hci0: command tx timeout
[   58.421060][ T5949] mkiss: ax0: crc mode is auto.
[   58.891592][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   58.891607][   T29] audit: type=1400 audit(1731473543.993:167): avc:  denied  { mount } for  pid=5951 comm="syz.1.13" name="/" dev="rpc_pipefs" ino=8393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   58.920574][    C1] vkms_vblank_simulate: vblank timer overrun
[   58.926741][   T29] audit: type=1400 audit(1731473543.993:168): avc:  denied  { read write } for  pid=5951 comm="syz.1.13" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.951069][   T29] audit: type=1400 audit(1731473543.993:169): avc:  denied  { open } for  pid=5951 comm="syz.1.13" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.974851][    C1] vkms_vblank_simulate: vblank timer overrun
[   58.981591][   T29] audit: type=1400 audit(1731473543.993:170): avc:  denied  { ioctl } for  pid=5951 comm="syz.1.13" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   59.006327][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.118651][   T29] audit: type=1400 audit(1731473544.223:171): avc:  denied  { create } for  pid=5960 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   59.138141][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.153883][ T5963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5963 comm=syz.4.15
[   59.169374][   T29] audit: type=1400 audit(1731473544.262:172): avc:  denied  { create } for  pid=5962 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   59.188508][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.195689][   T29] audit: type=1400 audit(1731473544.262:173): avc:  denied  { setopt } for  pid=5962 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   59.233064][   T29] audit: type=1400 audit(1731473544.342:174): avc:  denied  { bind } for  pid=5962 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   59.252495][   T29] audit: type=1400 audit(1731473544.342:175): avc:  denied  { create } for  pid=5960 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   59.271849][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.280342][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.289162][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'.
[   59.291489][   T29] audit: type=1400 audit(1731473544.342:176): avc:  denied  { ioctl } for  pid=5960 comm="syz.1.16" path="socket:[8421]" dev="sockfs" ino=8421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   59.322256][    C1] vkms_vblank_simulate: vblank timer overrun
[   59.500819][   T54] Bluetooth: hci4: command tx timeout
[   59.509669][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.520445][ T5876] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   59.531611][ T5876] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   59.542772][ T5876] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   59.557661][ T5876] usb 1-1: config 1 interface 1 has no altsetting 0
[   59.581308][ T5876] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   59.628863][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.637427][ T5876] usb 1-1: Product: syz
[   59.643508][ T5876] usb 1-1: Manufacturer: syz
[   59.648483][ T5876] usb 1-1: SerialNumber: syz
[   60.051444][   T54] Bluetooth: hci0: command tx timeout
[   60.051461][ T5139] Bluetooth: hci1: command tx timeout
[   60.056875][   T54] Bluetooth: hci2: command tx timeout
[   60.064355][ T5139] Bluetooth: hci3: command tx timeout
[   60.200180][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   60.380331][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   60.380599][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   60.466909][ T5876] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[   60.492222][ T5876] usb 1-1: MIDIStreaming interface descriptor not found
[   60.650076][ T5837] usb 5-1: Using ep0 maxpacket: 32
[   60.673220][ T5837] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   60.709929][ T5837] usb 5-1: config 0 has no interface number 0
[   60.749219][ T5876] usb 1-1: USB disconnect, device number 2
[   60.757058][ T5837] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   60.772231][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.798486][ T5837] usb 5-1: Product: syz
[   60.815949][ T5837] usb 5-1: Manufacturer: syz
[   60.827870][ T5837] usb 5-1: SerialNumber: syz
[   60.837069][ T5837] usb 5-1: config 0 descriptor??
[   61.013706][ T5837] smsc95xx v2.0.0
[   61.075729][ T5985] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   61.143852][ T5990] mkiss: ax0: crc mode is auto.
[   61.149601][ T5989] Zero length message leads to an empty skb
[   61.160587][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   61.509199][ T5837] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   61.514057][ T5999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25'.
[   61.520108][ T5837] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   62.241832][ T5837] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   62.261717][ T5837] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[   62.559927][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   62.600086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.661755][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   62.720107][ T5831] usb 3-1: Using ep0 maxpacket: 16
[   63.069771][ T5831] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[   63.100189][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.108207][ T5831] usb 3-1: Product: syz
[   63.112566][ T5831] usb 3-1: Manufacturer: syz
[   63.117158][ T5831] usb 3-1: SerialNumber: syz
[   63.142249][ T5831] usb 3-1: config 0 descriptor??
[   63.173829][ T5831] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[   63.309883][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   64.017165][ T6023] FAULT_INJECTION: forcing a failure.
[   64.017165][ T6023] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   64.017698][ T6023] 
[   64.017704][ T6023] ======================================================
[   64.017709][ T6023] WARNING: possible circular locking dependency detected
[   64.017715][ T6023] 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 Not tainted
[   64.017730][ T6023] ------------------------------------------------------
[   64.017734][ T6023] syz.1.31/6023 is trying to acquire lock:
[   64.017742][ T6023] ffffffff8e0c5600 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0
[   64.017785][ T6023] 
[   64.017785][ T6023] but task is already holding lock:
[   64.017790][ T6023] ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[   64.017823][ T6023] 
[   64.017823][ T6023] which lock already depends on the new lock.
[   64.017823][ T6023] 
[   64.017827][ T6023] 
[   64.017827][ T6023] the existing dependency chain (in reverse order) is:
[   64.017832][ T6023] 
[   64.017832][ T6023] -> #5 (&rq->__lock){-.-.}-{2:2}:
[   64.017851][ T6023]        _raw_spin_lock_nested+0x31/0x40
[   64.017872][ T6023]        raw_spin_rq_lock_nested+0x29/0x130
[   64.017886][ T6023]        task_rq_lock+0xcf/0x3b0
[   64.017900][ T6023]        cgroup_move_task+0x82/0x250
[   64.017920][ T6023]        css_set_move_task+0x288/0x5f0
[   64.017941][ T6023]        cgroup_post_fork+0x1c6/0x910
[   64.017956][ T6023]        copy_process+0x51a5/0x8cb0
[   64.017974][ T6023]        kernel_clone+0xfd/0x960
[   64.017991][ T6023]        user_mode_thread+0xb4/0xf0
[   64.018010][ T6023]        rest_init+0x23/0x2b0
[   64.018026][ T6023]        start_kernel+0x3e4/0x4d0
[   64.018040][ T6023]        x86_64_start_reservations+0x18/0x30
[   64.018055][ T6023]        x86_64_start_kernel+0xb2/0xc0
[   64.018069][ T6023]        common_startup_64+0x13e/0x148
[   64.018087][ T6023] 
[   64.018087][ T6023] -> #4 (&p->pi_lock){-.-.}-{2:2}:
[   64.018106][ T6023]        _raw_spin_lock_irqsave+0x3a/0x60
[   64.018126][ T6023]        try_to_wake_up+0xa1/0x14f0
[   64.018140][ T6023]        create_worker+0x333/0x800
[   64.018162][ T6023]        workqueue_init+0x4b0/0xb90
[   64.018179][ T6023]        kernel_init_freeable+0x32f/0x900
[   64.018194][ T6023]        kernel_init+0x1c/0x2b0
[   64.018210][ T6023]        ret_from_fork+0x45/0x80
[   64.018224][ T6023]        ret_from_fork_asm+0x1a/0x30
[   64.018245][ T6023] 
[   64.018245][ T6023] -> #3 (&pool->lock){-.-.}-{2:2}:
[   64.018264][ T6023]        _raw_spin_lock+0x2e/0x40
[   64.018283][ T6023]        __queue_work+0x26b/0x1080
[   64.018297][ T6023]        queue_work_on+0x11a/0x140
[   64.018310][ T6023]        rpm_suspend+0xe69/0x1200
[   64.018331][ T6023]        rpm_idle+0x5bf/0x740
[   64.018349][ T6023]        __pm_runtime_idle+0xbc/0x160
[   64.018369][ T6023]        __device_attach+0x382/0x4b0
[   64.018390][ T6023]        bus_probe_device+0x17f/0x1c0
[   64.018409][ T6023]        device_add+0x114b/0x1a70
[   64.018423][ T6023]        serial_base_port_add+0x357/0x4b0
[   64.018442][ T6023]        serial_core_register_port+0x13d/0x2570
[   64.018460][ T6023]        serial8250_register_8250_port+0x14cd/0x21f0
[   64.018483][ T6023]        serial_pnp_probe+0x44f/0x930
[   64.018504][ T6023]        pnp_device_probe+0x2a5/0x4d0
[   64.018525][ T6023]        really_probe+0x23e/0xa90
[   64.018545][ T6023]        __driver_probe_device+0x1de/0x440
[   64.018566][ T6023]        driver_probe_device+0x4c/0x1b0
[   64.018586][ T6023]        __driver_attach+0x283/0x580
[   64.018608][ T6023]        bus_for_each_dev+0x13c/0x1d0
[   64.018625][ T6023]        bus_add_driver+0x2e9/0x690
[   64.018644][ T6023]        driver_register+0x15c/0x4b0
[   64.018657][ T6023]        serial8250_init+0xc9/0x1e0
[   64.018676][ T6023]        do_one_initcall+0x128/0x700
[   64.018696][ T6023]        kernel_init_freeable+0x5c7/0x900
[   64.018710][ T6023]        kernel_init+0x1c/0x2b0
[   64.018730][ T6023]        ret_from_fork+0x45/0x80
[   64.018743][ T6023]        ret_from_fork_asm+0x1a/0x30
[   64.018764][ T6023] 
[   64.018764][ T6023] -> #2 (&dev->power.lock){-...}-{2:2}:
[   64.018784][ T6023]        _raw_spin_lock_irqsave+0x3a/0x60
[   64.018804][ T6023]        __pm_runtime_resume+0xa9/0x170
[   64.018826][ T6023]        __uart_start+0x1b0/0x4c0
[   64.018846][ T6023]        uart_write+0x218/0xb30
[   64.018861][ T6023]        n_tty_write+0x419/0x1140
[   64.018880][ T6023]        file_tty_write.constprop.0+0x506/0x9a0
[   64.018895][ T6023]        redirected_tty_write+0xcc/0x140
[   64.018910][ T6023]        vfs_write+0x5ae/0x1150
[   64.018932][ T6023]        ksys_write+0x12f/0x260
[   64.018943][ T6023]        do_syscall_64+0xcd/0x250
[   64.018957][ T6023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.018979][ T6023] 
[   64.018979][ T6023] -> #1 (&port_lock_key){-.-.}-{2:2}:
[   64.018997][ T6023]        _raw_spin_lock_irqsave+0x3a/0x60
[   64.019017][ T6023]        serial8250_console_write+0xb56/0x17c0
[   64.019038][ T6023]        console_flush_all+0x803/0xc60
[   64.019055][ T6023]        console_unlock+0xd9/0x210
[   64.019072][ T6023]        vprintk_emit+0x424/0x6f0
[   64.019089][ T6023]        vprintk+0x7f/0xa0
[   64.019107][ T6023]        _printk+0xc8/0x100
[   64.019120][ T6023]        register_console+0xbfd/0x1170
[   64.019138][ T6023]        univ8250_console_init+0x5f/0x90
[   64.019157][ T6023]        console_init+0xcc/0x680
[   64.019171][ T6023]        start_kernel+0x29a/0x4d0
[   64.019184][ T6023]        x86_64_start_reservations+0x18/0x30
[   64.019199][ T6023]        x86_64_start_kernel+0xb2/0xc0
[   64.019213][ T6023]        common_startup_64+0x13e/0x148
[   64.019229][ T6023] 
[   64.019229][ T6023] -> #0 (console_owner){....}-{0:0}:
[   64.019248][ T6023]        __lock_acquire+0x250b/0x3ce0
[   64.019261][ T6023]        lock_acquire.part.0+0x11b/0x380
[   64.019275][ T6023]        console_lock_spinning_enable+0xb0/0xd0
[   64.019292][ T6023]        console_flush_all+0x7ac/0xc60
[   64.019309][ T6023]        console_unlock+0xd9/0x210
[   64.019326][ T6023]        vprintk_emit+0x424/0x6f0
[   64.019343][ T6023]        vprintk+0x7f/0xa0
[   64.019360][ T6023]        _printk+0xc8/0x100
[   64.019373][ T6023]        should_fail_ex+0x46c/0x5b0
[   64.019389][ T6023]        strncpy_from_user+0x3b/0x2c0
[   64.019403][ T6023]        strncpy_from_user_nofault+0x7f/0x180
[   64.019424][ T6023]        bpf_probe_read_user_str+0x26/0x70
[   64.019441][ T6023]        bpf_prog_bc7c5c6b9645592f+0x3e/0x40
[   64.019453][ T6023]        bpf_trace_run4+0x245/0x5a0
[   64.019473][ T6023]        __bpf_trace_sched_switch+0x13e/0x190
[   64.019488][ T6023]        __schedule+0x19b0/0x5740
[   64.019508][ T6023]        preempt_schedule_irq+0x51/0x90
[   64.019528][ T6023]        irqentry_exit+0x36/0x90
[   64.019540][ T6023]        asm_sysvec_reschedule_ipi+0x1a/0x20
[   64.019563][ T6023]        arch_stack_walk+0x4/0x100
[   64.019580][ T6023]        stack_trace_save+0x95/0xd0
[   64.019598][ T6023]        kasan_save_stack+0x33/0x60
[   64.019614][ T6023]        kasan_save_track+0x14/0x30
[   64.019632][ T6023]        __kasan_slab_alloc+0x89/0x90
[   64.019648][ T6023]        kmem_cache_alloc_node_noprof+0x153/0x310
[   64.019666][ T6023]        alloc_vmap_area+0x636/0x2a70
[   64.019679][ T6023]        __get_vm_area_node+0x17e/0x2d0
[   64.019692][ T6023]        __vmalloc_node_range_noprof+0x26a/0x15a0
[   64.019708][ T6023]        __vmalloc_noprof+0x6d/0x90
[   64.019729][ T6023]        bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.019752][ T6023]        bpf_prog_alloc+0x3b/0x230
[   64.019772][ T6023]        bpf_prog_load+0x159e/0x2660
[   64.019786][ T6023]        __sys_bpf+0x402b/0x49a0
[   64.019801][ T6023]        __x64_sys_bpf+0x78/0xc0
[   64.019816][ T6023]        do_syscall_64+0xcd/0x250
[   64.019830][ T6023]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.019849][ T6023] 
[   64.019849][ T6023] other info that might help us debug this:
[   64.019849][ T6023] 
[   64.019852][ T6023] Chain exists of:
[   64.019852][ T6023]   console_owner --> &p->pi_lock --> &rq->__lock
[   64.019852][ T6023] 
[   64.019869][ T6023]  Possible unsafe locking scenario:
[   64.019869][ T6023] 
[   64.019871][ T6023]        CPU0                    CPU1
[   64.019874][ T6023]        ----                    ----
[   64.019877][ T6023]   lock(&rq->__lock);
[   64.019884][ T6023]                                lock(&p->pi_lock);
[   64.019891][ T6023]                                lock(&rq->__lock);
[   64.019898][ T6023]   lock(console_owner);
[   64.019905][ T6023] 
[   64.019905][ T6023]  *** DEADLOCK ***
[   64.019905][ T6023] 
[   64.019907][ T6023] 4 locks held by syz.1.31/6023:
[   64.019914][ T6023]  #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[   64.019940][ T6023]  #1: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0
[   64.019970][ T6023]  #2: ffffffff8e1a5a40 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0
[   64.020000][ T6023]  #3: ffffffff8e1a5ab0 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60
[   64.020028][ T6023] 
[   64.020028][ T6023] stack backtrace:
[   64.020032][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.31 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
[   64.020046][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   64.020053][ T6023] Call Trace:
[   64.020057][ T6023]  <TASK>
[   64.020061][ T6023]  dump_stack_lvl+0x116/0x1f0
[   64.020075][ T6023]  print_circular_bug+0x41c/0x610
[   64.020094][ T6023]  check_noncircular+0x31a/0x400
[   64.020112][ T6023]  ? __pfx_check_noncircular+0x10/0x10
[   64.020132][ T6023]  ? lockdep_lock+0xc6/0x200
[   64.020147][ T6023]  ? __pfx_lockdep_lock+0x10/0x10
[   64.020163][ T6023]  __lock_acquire+0x250b/0x3ce0
[   64.020177][ T6023]  ? __pfx___lock_acquire+0x10/0x10
[   64.020190][ T6023]  lock_acquire.part.0+0x11b/0x380
[   64.020202][ T6023]  ? console_lock_spinning_enable+0x9f/0xd0
[   64.020216][ T6023]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   64.020228][ T6023]  ? rcu_is_watching+0x12/0xc0
[   64.020243][ T6023]  ? trace_lock_acquire+0x14a/0x1d0
[   64.020258][ T6023]  ? console_lock_spinning_enable+0x9f/0xd0
[   64.020273][ T6023]  ? lock_acquire+0x2f/0xb0
[   64.020283][ T6023]  ? console_lock_spinning_enable+0x9f/0xd0
[   64.020298][ T6023]  console_lock_spinning_enable+0xb0/0xd0
[   64.020312][ T6023]  ? console_lock_spinning_enable+0x9f/0xd0
[   64.020326][ T6023]  console_flush_all+0x7ac/0xc60
[   64.020341][ T6023]  ? __pfx_console_flush_all+0x10/0x10
[   64.020357][ T6023]  ? printk_percpu_data_ready+0x9/0x20
[   64.020370][ T6023]  ? nbcon_get_cpu_emergency_nesting+0x3b/0x50
[   64.020386][ T6023]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   64.020406][ T6023]  console_unlock+0xd9/0x210
[   64.020419][ T6023]  ? __pfx_console_unlock+0x10/0x10
[   64.020433][ T6023]  ? lock_acquire+0x2f/0xb0
[   64.020444][ T6023]  ? vprintk+0x7f/0xa0
[   64.020460][ T6023]  ? __down_trylock_console_sem+0xb0/0x140
[   64.020476][ T6023]  vprintk_emit+0x424/0x6f0
[   64.020493][ T6023]  ? __pfx_vprintk_emit+0x10/0x10
[   64.020510][ T6023]  ? __lock_acquire+0xbdd/0x3ce0
[   64.020523][ T6023]  vprintk+0x7f/0xa0
[   64.020535][ T6023]  _printk+0xc8/0x100
[   64.020543][ T6023]  ? __pfx__printk+0x10/0x10
[   64.020551][ T6023]  ? ___ratelimit+0x24c/0x570
[   64.020564][ T6023]  ? __pfx____ratelimit+0x10/0x10
[   64.020578][ T6023]  should_fail_ex+0x46c/0x5b0
[   64.020588][ T6023]  strncpy_from_user+0x3b/0x2c0
[   64.020597][ T6023]  strncpy_from_user_nofault+0x7f/0x180
[   64.020609][ T6023]  bpf_probe_read_user_str+0x26/0x70
[   64.020619][ T6023]  bpf_prog_bc7c5c6b9645592f+0x3e/0x40
[   64.020626][ T6023]  bpf_trace_run4+0x245/0x5a0
[   64.020638][ T6023]  ? __pfx_bpf_trace_run4+0x10/0x10
[   64.020649][ T6023]  ? hlock_class+0x4e/0x130
[   64.020660][ T6023]  ? lock_acquire.part.0+0x11b/0x380
[   64.020669][ T6023]  __bpf_trace_sched_switch+0x13e/0x190
[   64.020679][ T6023]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[   64.020688][ T6023]  ? plist_check_prev_next+0x41/0x1a0
[   64.020700][ T6023]  ? psi_task_switch+0x6db/0x8e0
[   64.020713][ T6023]  __schedule+0x19b0/0x5740
[   64.020730][ T6023]  ? finish_task_switch.isra.0+0x217/0xcc0
[   64.020740][ T6023]  ? __pfx___schedule+0x10/0x10
[   64.020751][ T6023]  ? hlock_class+0x4e/0x130
[   64.020765][ T6023]  preempt_schedule_irq+0x51/0x90
[   64.020777][ T6023]  irqentry_exit+0x36/0x90
[   64.020784][ T6023]  asm_sysvec_reschedule_ipi+0x1a/0x20
[   64.020797][ T6023] RIP: 0010:arch_stack_walk+0x4/0x100
[   64.020808][ T6023] Code: ff ff ff e8 7e fa 58 00 89 e8 e6 83 e9 11 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 48 89 e5 41 57 49 89 d7 41 56 49 89 ce b9 0c 00 00 00 41 55 49
[   64.020817][ T6023] RSP: 0018:ffffc90002fbf3c0 EFLAGS: 00000202
[   64.020824][ T6023] RAX: 0000000100000000 RBX: fffff520005f7e79 RCX: 0000000000000000
[   64.020829][ T6023] RDX: ffff88802d464880 RSI: ffffc90002fbf3e8 RDI: ffffffff817946d0
[   64.020835][ T6023] RBP: 0000000000000cc0 R08: 0000000000000007 R09: 0000000000000000
[   64.020840][ T6023] R10: ffff8880301b0250 R11: 0000000000000000 R12: 0000000000000001
[   64.020845][ T6023] R13: 0000000000000cc0 R14: 0000000000000001 R15: ffff88801b04fa00
[   64.020852][ T6023]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   64.020864][ T6023]  stack_trace_save+0x95/0xd0
[   64.020874][ T6023]  ? __pfx_stack_trace_save+0x10/0x10
[   64.020885][ T6023]  ? is_bpf_text_address+0x30/0x1a0
[   64.020898][ T6023]  kasan_save_stack+0x33/0x60
[   64.020914][ T6023]  kasan_save_track+0x14/0x30
[   64.020923][ T6023]  __kasan_slab_alloc+0x89/0x90
[   64.020933][ T6023]  kmem_cache_alloc_node_noprof+0x153/0x310
[   64.020943][ T6023]  ? alloc_vmap_area+0x636/0x2a70
[   64.020952][ T6023]  alloc_vmap_area+0x636/0x2a70
[   64.020962][ T6023]  ? __pfx_alloc_vmap_area+0x10/0x10
[   64.020971][ T6023]  __get_vm_area_node+0x17e/0x2d0
[   64.020982][ T6023]  __vmalloc_node_range_noprof+0x26a/0x15a0
[   64.020992][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.021004][ T6023]  ? __pfx___schedule+0x10/0x10
[   64.021017][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.021031][ T6023]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   64.021040][ T6023]  ? lockdep_hardirqs_on+0x7c/0x110
[   64.021054][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.021067][ T6023]  __vmalloc_noprof+0x6d/0x90
[   64.021076][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.021088][ T6023]  bpf_prog_alloc_no_stats+0x54/0x5d0
[   64.021100][ T6023]  ? security_capable+0x7e/0x260
[   64.021114][ T6023]  bpf_prog_alloc+0x3b/0x230
[   64.021126][ T6023]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   64.021139][ T6023]  bpf_prog_load+0x159e/0x2660
[   64.021149][ T6023]  ? __pfx_bpf_prog_load+0x10/0x10
[   64.021157][ T6023]  ? avc_has_perm_noaudit+0x143/0x3a0
[   64.021173][ T6023]  ? selinux_bpf+0xde/0x130
[   64.021186][ T6023]  __sys_bpf+0x402b/0x49a0
[   64.021194][ T6023]  ? ksys_write+0x21e/0x260
[   64.021202][ T6023]  ? reacquire_held_locks+0x470/0x4c0
[   64.021210][ T6023]  ? __pfx___sys_bpf+0x10/0x10
[   64.021219][ T6023]  ? vfs_write+0x306/0x1150
[   64.021232][ T6023]  ? __mutex_unlock_slowpath+0x164/0x650
[   64.021244][ T6023]  ? fput+0x30/0x390
[   64.021254][ T6023]  ? ksys_write+0x1ad/0x260
[   64.021261][ T6023]  ? __pfx_ksys_write+0x10/0x10
[   64.021275][ T6023]  __x64_sys_bpf+0x78/0xc0
[   64.021284][ T6023]  ? lockdep_hardirqs_on+0x7c/0x110
[   64.021297][ T6023]  do_syscall_64+0xcd/0x250
[   64.021305][ T6023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.021318][ T6023] RIP: 0033:0x7f9b4077e719
[   64.021325][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.021332][ T6023] RSP: 002b:00007f9b41498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   64.021340][ T6023] RAX: ffffffffffffffda RBX: 00007f9b40936130 RCX: 00007f9b4077e719
[   64.021346][ T6023] RDX: 0000000000000094 RSI: 0000000020000080 RDI: 0000000000000005
[   64.021351][ T6023] RBP: 00007f9b41498090 R08: 0000000000000000 R09: 0000000000000000
[   64.021356][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.021361][ T6023] R13: 0000000000000000 R14: 00007f9b40936130 R15: 00007ffcab3e45a8
[   64.021369][ T6023]  </TASK>
[   65.530264][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.31 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0
[   65.540726][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   65.550749][ T6023] Call Trace:
[   65.553996][ T6023]  <TASK>
[   65.556900][ T6023]  dump_stack_lvl+0x116/0x1f0
[   65.561547][ T6023]  should_fail_ex+0x497/0x5b0
[   65.566193][ T6023]  strncpy_from_user+0x3b/0x2c0
[   65.571011][ T6023]  strncpy_from_user_nofault+0x7f/0x180
[   65.576534][ T6023]  bpf_probe_read_user_str+0x26/0x70
[   65.581786][ T6023]  bpf_prog_bc7c5c6b9645592f+0x3e/0x40
[   65.587208][ T6023]  bpf_trace_run4+0x245/0x5a0
[   65.591856][ T6023]  ? __pfx_bpf_trace_run4+0x10/0x10
[   65.597031][ T6023]  ? hlock_class+0x4e/0x130
[   65.601502][ T6023]  ? lock_acquire.part.0+0x11b/0x380
[   65.606753][ T6023]  __bpf_trace_sched_switch+0x13e/0x190
[   65.612267][ T6023]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[   65.618297][ T6023]  ? plist_check_prev_next+0x41/0x1a0
[   65.623640][ T6023]  ? psi_task_switch+0x6db/0x8e0
[   65.628550][ T6023]  __schedule+0x19b0/0x5740
[   65.633032][ T6023]  ? finish_task_switch.isra.0+0x217/0xcc0
[   65.638803][ T6023]  ? __pfx___schedule+0x10/0x10
[   65.643622][ T6023]  ? hlock_class+0x4e/0x130
[   65.648095][ T6023]  preempt_schedule_irq+0x51/0x90
[   65.653088][ T6023]  irqentry_exit+0x36/0x90
[   65.657468][ T6023]  asm_sysvec_reschedule_ipi+0x1a/0x20
[   65.662898][ T6023] RIP: 0010:arch_stack_walk+0x4/0x100
[   65.668239][ T6023] Code: ff ff ff e8 7e fa 58 00 89 e8 e6 83 e9 11 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 48 89 e5 41 57 49 89 d7 41 56 49 89 ce b9 0c 00 00 00 41 55 49
[   65.687811][ T6023] RSP: 0018:ffffc90002fbf3c0 EFLAGS: 00000202
[   65.693842][ T6023] RAX: 0000000100000000 RBX: fffff520005f7e79 RCX: 0000000000000000
[   65.701782][ T6023] RDX: ffff88802d464880 RSI: ffffc90002fbf3e8 RDI: ffffffff817946d0
[   65.709730][ T6023] RBP: 0000000000000cc0 R08: 0000000000000007 R09: 0000000000000000
[   65.717682][ T6023] R10: ffff8880301b0250 R11: 0000000000000000 R12: 0000000000000001
[   65.725619][ T6023] R13: 0000000000000cc0 R14: 0000000000000001 R15: ffff88801b04fa00
[   65.733556][ T6023]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   65.739679][ T6023]  stack_trace_save+0x95/0xd0
[   65.744324][ T6023]  ? __pfx_stack_trace_save+0x10/0x10
[   65.749667][ T6023]  ? is_bpf_text_address+0x30/0x1a0
[   65.754835][ T6023]  kasan_save_stack+0x33/0x60
[   65.759487][ T6023]  kasan_save_track+0x14/0x30
[   65.764130][ T6023]  __kasan_slab_alloc+0x89/0x90
[   65.768946][ T6023]  kmem_cache_alloc_node_noprof+0x153/0x310
[   65.774806][ T6023]  ? alloc_vmap_area+0x636/0x2a70
[   65.779797][ T6023]  alloc_vmap_area+0x636/0x2a70
[   65.784614][ T6023]  ? __pfx_alloc_vmap_area+0x10/0x10
[   65.789864][ T6023]  __get_vm_area_node+0x17e/0x2d0
[   65.794854][ T6023]  __vmalloc_node_range_noprof+0x26a/0x15a0
[   65.800714][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   65.806228][ T6023]  ? __pfx___schedule+0x10/0x10
[   65.811050][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   65.816576][ T6023]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   65.822870][ T6023]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.828048][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   65.833561][ T6023]  __vmalloc_noprof+0x6d/0x90
[   65.838205][ T6023]  ? bpf_prog_alloc_no_stats+0x54/0x5d0
[   65.843719][ T6023]  bpf_prog_alloc_no_stats+0x54/0x5d0
[   65.849059][ T6023]  ? security_capable+0x7e/0x260
[   65.853968][ T6023]  bpf_prog_alloc+0x3b/0x230
[   65.858526][ T6023]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   65.864391][ T6023]  bpf_prog_load+0x159e/0x2660
[   65.869122][ T6023]  ? __pfx_bpf_prog_load+0x10/0x10
[   65.874207][ T6023]  ? avc_has_perm_noaudit+0x143/0x3a0
[   65.879558][ T6023]  ? selinux_bpf+0xde/0x130
[   65.884034][ T6023]  __sys_bpf+0x402b/0x49a0
[   65.888416][ T6023]  ? ksys_write+0x21e/0x260
[   65.892885][ T6023]  ? reacquire_held_locks+0x470/0x4c0
[   65.898223][ T6023]  ? __pfx___sys_bpf+0x10/0x10
[   65.902952][ T6023]  ? vfs_write+0x306/0x1150
[   65.907425][ T6023]  ? __mutex_unlock_slowpath+0x164/0x650
[   65.913024][ T6023]  ? fput+0x30/0x390
[   65.916886][ T6023]  ? ksys_write+0x1ad/0x260
[   65.921352][ T6023]  ? __pfx_ksys_write+0x10/0x10
[   65.926172][ T6023]  __x64_sys_bpf+0x78/0xc0
[   65.930556][ T6023]  ? lockdep_hardirqs_on+0x7c/0x110
[   65.935725][ T6023]  do_syscall_64+0xcd/0x250
[   65.940194][ T6023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.946055][ T6023] RIP: 0033:0x7f9b4077e719
[   65.950446][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.970018][ T6023] RSP: 002b:00007f9b41498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   65.978395][ T6023] RAX: ffffffffffffffda RBX: 00007f9b40936130 RCX: 00007f9b4077e719
[   65.986332][ T6023] RDX: 0000000000000094 RSI: 0000000020000080 RDI: 0000000000000005
[   65.994268][ T6023] RBP: 00007f9b41498090 R08: 0000000000000000 R09: 0000000000000000
[   66.002215][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.010153][ T6023] R13: 0000000000000000 R14: 00007f9b40936130 R15: 00007ffcab3e45a8
[   66.018094][ T6023]  </TASK>
[   66.021105][    C1] vkms_vblank_simulate: vblank timer overrun
[   66.022390][ T5831] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[   66.041091][   T29] kauditd_printk_skb: 24 callbacks suppressed
[   66.041105][   T29] audit: type=1400 audit(1731473548.992:201): avc:  denied  { create } for  pid=6015 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.066299][   T29] audit: type=1400 audit(1731473549.112:202): avc:  denied  { map_read map_write } for  pid=6020 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.215047][ T5833] IPVS: starting estimator thread 0...
[   66.240600][   T25] usb 5-1: USB disconnect, device number 2
[   66.339995][ T6024] IPVS: using max 58 ests per chain, 139200 per kthread
[   66.390083][ T5833] usb 3-1: USB disconnect, device number 2
[   70.951371][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   70.958142][ T1296] ieee802154 phy1 wpan1: encryption failed: -22