last executing test programs:

14.694610485s ago: executing program 3 (id=38):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ffffff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

14.492372423s ago: executing program 3 (id=39):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1})
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

14.086989076s ago: executing program 0 (id=40):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52})
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
gettid()
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @local, 0x1000}}, 0x8, 0x2, 0x6, 0x0, 0x3, 0x2, 0xe}, 0x9c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x200, 0x61)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1262, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000f5ff000000000195"], &(0x7f0000000680)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r8, 0x0, 0x100000200000000}, 0x18)
fsopen(&(0x7f0000000200)='iso9660\x00', 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "c3f75d4b007c27cbac504b6e57de86f8134fa44d35000000001000"}})

12.85279641s ago: executing program 0 (id=41):
r0 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
msgctl$IPC_SET(0xffffffffffffffff, 0x85800008, 0x0)
r3 = epoll_create1(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
close_range(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000001c0)={[0x7]})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x4, 0x2, 0x8, 0xffffffffffff699f, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88)
fcntl$addseals(r0, 0x409, 0x8)
mmap(&(0x7f00005a5000/0x12000)=nil, 0x12000, 0x2, 0x13, r0, 0xb44f2000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

9.930405218s ago: executing program 3 (id=48):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52})
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
gettid()
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @local, 0x1000}}, 0x8, 0x2, 0x6, 0x0, 0x3, 0x2, 0xe}, 0x9c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x200, 0x61)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1262, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000f5ff000000000195"], &(0x7f0000000680)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r8, 0x0, 0x100000200000000}, 0x18)
fsopen(&(0x7f0000000200)='iso9660\x00', 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "c3f75d4b007c27cbac504b6e57de86f8134fa44d35000000001000"}})

9.145669991s ago: executing program 4 (id=49):
syz_usb_connect(0x2, 0x3cc, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x6d, 0x47, 0x88, 0x8, 0x13d3, 0xf84d, 0x4fad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ba, 0x2, 0x6, 0xa, 0x40, 0x0, [{{0x9, 0x4, 0x92, 0x9, 0xb, 0xff, 0x1, 0x1, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bdb691bd3d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xffff, 0x2}, {0x6, 0x24, 0x1a, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}, @obex={0x5, 0x24, 0x15, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x3, 0x8}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xc8, "d3867328"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x7d, "6a2a8da22758"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x40, 0x9a}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xe, 0x7, 0x4, [@generic={0x93, 0x24, "aabf56adc9fe9bc0c2eada89516439a6c05c8d1c7aa3d94d63e358c6de4eb7f4e9bd96b06805a2b0fab5cf441f122446cc6846792d1d293d566a4d5f321a9f6aefb800ce78d12d96b39b54da1ed603a0bce08f5e9c7bee17019e0f253970f21dc9a7881574954279a117263afe40bd193af913e66e1854fff2c1969356bc3aaa4a53c1e154048cefca834e59a21128368e"}, @generic={0xc8, 0x10, "b5141a2844076bf49147393a90bb41f71b1620cab3592bf45bd95362363556854aca4549261353d741c7819feb50bda34e77d4199bd67e68b029c6513d35bb18064e0c02f21c6da3347eff6b68341a1abd1460719d7a68028c444748adc5f4a78cb4de0e37fe3d3f86560ec907653d60385b3480ae9d4565b468e25de2397e0f702b246812c50728af3780422c12b31749a6a5f657676ef1b58cdf3d380ed3dab3a2694b86ac6afe00374478d06fc40e1a91ae9735807ebca7b0cd177e0fdfd8d768cd5cee59"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0xf, 0x3}}, {{0x9, 0x5, 0x80, 0x14, 0x10, 0x0, 0xdb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xbc, 0xeb, 0x4}}, {{0x9, 0x5, 0xe, 0x12, 0x10, 0xe, 0x0, 0xe}}, {{0x9, 0x5, 0x8, 0xc, 0x420, 0x61, 0x5, 0x9, [@generic={0xa, 0xb, "3cbc0590db6a3c24"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x30, 0x10}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xcf, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x50}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0x46, 0x0, [@generic={0x4f, 0x4, "edccc575831a9e075d773b78f8d7ce12b84e4d63a8b83e593cc87e03322e79c201efc77021cf5676e898b0bae73916d1f0b92945b73c3cbc2198a13ea6b4afcd6df77972d67a53e4ca9594eb15"}, @generic={0x2b, 0x22, "0180768e46b8144fed0a90e982f937681e1b3325c243a110f688d833ff66f9acead2430d4a2be1dfa6"}]}}]}}, {{0x9, 0x4, 0x3f, 0x2, 0x5, 0xa8, 0x63, 0xf5, 0x9, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0xe, 0xa, "", "ff"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x3, 0x9, 0x2, "", "cbe5"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x7, 0x8}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x40, "4af874a6f78603"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x883, 0x3, "cff32d8c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf6, 0x1, 0x5, 0xc, 'w', "ba3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x220, 0x10, 0x6, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x8, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x0, 0x8}]}}, {{0x9, 0x5, 0x89, 0xc, 0x8, 0xf8, 0x1, 0xc, [@generic={0x6a, 0x23, "711b6fa961761e7095a193c028ceabda9b4648af3b57c88fb2059f7d9fd84e7900cb106855c47d1094527053433801987c9e5632adabc663b9bf9aadb98c0e22c72d4f960295c70f2368604e003df810ca3ca4c546c3c144148cc6d75243d5790723ceb3afec0270"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xb, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8999}]}}, {{0x9, 0x5, 0x5, 0x0, 0x50, 0x7, 0x6, 0x10}}]}}]}}]}}, &(0x7f000001b0c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x50, 0x80, 0x7, 0x10, 0x40, 0xfa}, 0x25, &(0x7f0000000400)={0x5, 0xf, 0x25, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x0, 0xf00, 0x0, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x2, 0x27}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0xa, [{0xda, &(0x7f0000000440)=@string={0xda, 0x3, "b0ae75c917fb904595905088754613bc9cdbfcbf280d62542ba925899655a97f01954dd52a46a3364096599ce6af1ed12b62ac92f05af15403e721e2efa763198f1cc31c13e6bf8f5dae7ee670afddf7160af1c523c18ed4ca949f5780a07df0c6e5bc2ca794f6223c79deef2aa5ccbbef5326a4dc946b92e45aa291ff89484f92ace69a7cafd201d3874dac1bd89c3359c62e4eb39d71e272618709de02aaf2af9de1a8d1dd00a6035f4c704ec59728ac15fc234010866755f9b1be5c7e40a6978704e6e4afbcc4f84d8b0f9ef56d85c1224edd8c47d576"}}, {0xc4, &(0x7f0000001d00)=@string={0xc4, 0x3, "6e0f8f02eed562ea3f52d5fac5c8bbcff01012261004cb6e318f1d021c3bd69e17b189d4599176a4960c2730f0b07f29c95525afcc1d1e2a8d1900db372310b044f1ed58e224abfb80d6f1063148a2286fa32280cca6b52befc4b3cb9306ade01eb0b74dc9b8de3f9b20550ec381ce9b7cb585e1bc6c591fa8adceb3c50ecde6ada8edc252afb60be682d2e9575a76a9c375f6f8e9b36fdc939766d15f68212a8f49b7671dff230daa3b72e8d2e9077cc40ce8ae308eb64c326e6fc5ec42da0be68a"}}, {0x54, &(0x7f0000001e00)=@string={0x54, 0x3, "868c207b12b81e10e01f4700c83bde8d4889dc77a25853c602a1233b49069e366c7dc7595c1890a115f94ab38b5b04de5ebfc704f9051363299b483439fb70bb2514da832d348799f86e1b9f42545a220b4e"}}, {0xb2, &(0x7f0000001e80)=@string={0xb2, 0x3, "2bdbc91a70338001169b6e2ef0cc9ba6d233e0e7062f5335b9802a1739e127725835c4b5d6985799c7bfa14618b5c3feaa5a8a167345b90e547258db48eff3649f9d11b0680d023e715a9b56f53e1fd10858c166ccb16635635d7ea6808a65e6d29d6fba663356858354afee435e034d8413f96a44c9be12d7c46d3aae7c0ee0f1cb5343778c45bedeb680cad8fd2bfb4fd04960751913aff07effff3e5909b4d9aee0de9b04714da19d0bc1cb1e43d3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x3461}}, {0x42, &(0x7f000001b000)=@string={0x42, 0x3, "7d6ccf5d128f70ab7bcad710acb4fea98f2b5e48dd6072f6808d31c19a8b47b12f3cc5cea1fa684a235996f74ce4b53d659ca360ca3d23fc2b000bf438f0dfbe"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f000001b080)=@lang_id={0x4, 0x3, 0x4001}}]})
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800)
connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x1, 0x2, 0x7}, 0x10)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000040))
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0xffffffff, 0xd, 0x2c9f340f, 0x7})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2})
r7 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0xc0405626, &(0x7f0000000040))
dup(r7)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4, 0x8000000000000000, 0x0, 0xfffffffe})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
keyctl$read(0xb, r1, &(0x7f0000000580)=""/4096, 0x1000)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

8.117459396s ago: executing program 0 (id=51):
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000008f900"/27], 0x50)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000b80)={[0x5]}, 0x8, 0x80000)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000304000000d403"]}, 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "b66ae47d59a5864edfbc57ffed2b40972508c166fcea61b9aaaeef02a0aa734a064583969ed89c09cfb346314e467d0f74129e5e9e93da0e36"}}}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
io_setup(0x9, &(0x7f0000000080))
r7 = epoll_create1(0x0)
io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, r7, 0x0, 0x0, 0x26, 0x0, 0x1}])
read$FUSE(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xcd}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x44, &(0x7f0000000340)=""/68, 0x41100, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x6, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000bc0)=[r1, 0xffffffffffffffff, r2, r3], &(0x7f0000000c00)=[{0x4, 0x1, 0xf, 0xc}, {0x5, 0x5, 0xb, 0xa}, {0x5, 0x4, 0xd, 0xa}, {0x5, 0x3, 0x3, 0x6}, {0x4, 0x2, 0x0, 0x6}], 0x10, 0x2, @void, @value}, 0x94)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

7.823862397s ago: executing program 2 (id=52):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0xf, 0x0, &(0x7f0000000640))
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x70bda87d, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

7.626726506s ago: executing program 3 (id=53):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0xf, 0x0, &(0x7f0000000640))
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x70bda87d, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

6.721946693s ago: executing program 2 (id=54):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52})
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
gettid()
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @local, 0x1000}}, 0x8, 0x2, 0x6, 0x0, 0x3, 0x2, 0xe}, 0x9c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x200, 0x61)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1262, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000f5ff000000000195"], &(0x7f0000000680)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r8, 0x0, 0x100000200000000}, 0x18)
fsopen(&(0x7f0000000200)='iso9660\x00', 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "c3f75d4b007c27cbac504b6e57de86f8134fa44d35000000001000"}})

6.300736014s ago: executing program 3 (id=55):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x248, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87b], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x24b)
write$uinput_user_dev(r0, &(0x7f00000021c0)={'syz0\x00', {}, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
socket$unix(0x1, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x0, 0x0, 0x4007)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, &(0x7f00000019c0)={0x0, 0x8, 0xd6, {0xd6, 0x1, "eda22e81f846ff69abdf859669533ff4baad9dfa91fb0a919daf55a5ce59684d452208096d8dc9937b32cc7d68ed82efbbeb59a62f002a95fc3fa1473f949ff378e07c6effd1b458ee76360072691e6f275db84202ff3d0ed2ac9489b20f960c9129d571f3b453bac2441c96614bad8b3db8e1e93fc2c55b91154298d399a8e41ba9c6720f5724a571b87f9462a06730aec9593a34a2c693f4b1ed1cd92778940c3b4081a9767e4d248c04affa4a3b12bf625083ca6eaef393f5a7cf3d38c01affcffa4be0c5e0ddfdf73f17424ec1d0d7e267c8"}}, &(0x7f0000000200)={0x0, 0x3, 0x70, @string={0x70, 0x3, "1cbeb919c7f3ffdf63cfedf55a3d7fe3d6aa1f0feb3d4abf9fd6e0ce9ff7974e1f35f7bb301d1d28f0d55f29990649be64e39eedfdccab82cd53103c2632aafdc64bfda5faf9f533bd09ffac7cc64d8a0c02b6920886aff10bc00fb4bf7b148505ee9eb2ae3917fd69c011363c46"}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x8, 0x6, 0xf5, "72cfee73", "ea45e937"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x8, 0x50, 0x0, 0x9, 0xa2fa, 0x6}}}, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)={0x40, 0x14, 0x7b, "359498b77edcaff42cde3ec38f2d3efcade6371ef47c9f33c93e88c7fe4836b31970d09f559bff1f286198a6651728ae033be326e1bd550ade70b52a7b38e3c30a8717616973dfb1b36571e282d8ae37ca5bfa962819d5f3fa6c045560226bbefb2a7fd611ff7d78209112fb2bc92a9d23bf9d3db7c28b29fae8cf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001bc0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001c00)={0x20, 0x0, 0x8, {0xe0, 0x10, [0xf0]}}, &(0x7f0000001c40)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000001c80)={0x40, 0x9, 0x1, 0xef}, &(0x7f0000001cc0)={0x40, 0xb, 0x2, "ecfd"}, &(0x7f0000001d00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001d40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001d80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000001dc0)={0x40, 0x19, 0x2, "49b0"}, &(0x7f0000001e00)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000001e40)={0x40, 0x1c, 0x1}, &(0x7f0000001e80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001ec0)={0x40, 0x21, 0x1, 0x2}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r4 = shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil)
r5 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000000)=""/188)
r6 = socket(0x2b, 0x80801, 0x1)
shmctl$SHM_STAT(r4, 0xd, &(0x7f00000009c0)=""/4096)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r6, 0xfffffffffffffffd)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
clock_adjtime(0x0, &(0x7f0000000340)={0xfffffffffffffffe, 0x6, 0xc0000000000000, 0x73, 0xc, 0x7, 0x7c, 0xb, 0x6, 0x180000000000, 0x0, 0x2, 0x40, 0x8, 0x0, 0x3, 0x145d, 0x3, 0x7fffffffffffffff, 0x9, 0x0, 0xbf3, 0x7fffffffffffffff, 0x9, 0x46a, 0x1})

5.139717464s ago: executing program 4 (id=56):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
syz_open_procfs(r5, &(0x7f0000000300)='attr/current\x00')
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1f0000000500000002000000010000000006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r8}, 0x38)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r2, r10, 0x0, 0x0, 0xdead, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001a000100090000007cdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700100000000000000000000000000014000100fe8000000000000000000000000000bb7310f4658dbf1f733f4a1e67ada2a0611935c461477bdce9053601aaded17091e4c2f87094e7743691ea9b41a0d755c12a3249c7af8ef431273df9708bc9f1e078f3485d69d134d6f75a5230791b8f7006a9308f2bc230c045e8f295f486959d0e3e58adf3e6903bba9d29815992218604c340141c673bec5e8dfc7373ebd680f3743dc61a38bf9a85a10f77d4ed9941bcf1a1529035839d"], 0x99}}, 0x0)

5.063451835s ago: executing program 2 (id=57):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8)
gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_pts(0xffffffffffffffff, 0x121500)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)

4.915463429s ago: executing program 1 (id=58):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff01000000"], 0x310)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0)

3.925931077s ago: executing program 1 (id=59):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00')
unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={{0x77359400}}, 0x100)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="040e0c"], 0xf)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000033c0)={0x0, 0x1})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)

3.77800359s ago: executing program 4 (id=60):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x18000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)

3.488738864s ago: executing program 1 (id=61):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000028c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b00000025704220202020000100fdffffffffffffff000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e000000700000003e17c6551d27971d71d24be23601669465534e502030cb3be0b3c1b371650f2382a51", @ANYRES8=r1, @ANYRES32, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d0000000600000006000000000000008401000000000000870500000000000000800000", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB, @ANYRES16, @ANYRES16, @ANYBLOB, @ANYRESHEX], 0x658)
fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r2, 0x0, 0x0, 0x60010020, 0x0)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x800d)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)

2.957429079s ago: executing program 1 (id=62):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)

2.949089513s ago: executing program 3 (id=63):
syz_usb_connect(0x2, 0x747, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x6d, 0x47, 0x88, 0x8, 0x13d3, 0xf84d, 0x4fad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x735, 0x3, 0x6, 0xa, 0x40, 0x0, [{{0x9, 0x4, 0x92, 0x9, 0xb, 0xff, 0x1, 0x1, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "bdb691bd3d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xffff, 0x2}, {0x6, 0x24, 0x1a, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8}, @obex={0x5, 0x24, 0x15, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x1, 0x3, 0x8}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x6, 0xc8, "d3867328"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x7d, "6a2a8da22758"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x40, 0x9a}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xe, 0x7, 0x4, [@generic={0x93, 0x24, "aabf56adc9fe9bc0c2eada89516439a6c05c8d1c7aa3d94d63e358c6de4eb7f4e9bd96b06805a2b0fab5cf441f122446cc6846792d1d293d566a4d5f321a9f6aefb800ce78d12d96b39b54da1ed603a0bce08f5e9c7bee17019e0f253970f21dc9a7881574954279a117263afe40bd193af913e66e1854fff2c1969356bc3aaa4a53c1e154048cefca834e59a21128368e"}, @generic={0xc8, 0x10, "b5141a2844076bf49147393a90bb41f71b1620cab3592bf45bd95362363556854aca4549261353d741c7819feb50bda34e77d4199bd67e68b029c6513d35bb18064e0c02f21c6da3347eff6b68341a1abd1460719d7a68028c444748adc5f4a78cb4de0e37fe3d3f86560ec907653d60385b3480ae9d4565b468e25de2397e0f702b246812c50728af3780422c12b31749a6a5f657676ef1b58cdf3d380ed3dab3a2694b86ac6afe00374478d06fc40e1a91ae9735807ebca7b0cd177e0fdfd8d768cd5cee59"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x6, 0xf, 0x3}}, {{0x9, 0x5, 0x80, 0x14, 0x10, 0x0, 0xdb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xbc, 0xeb, 0x4}}, {{0x9, 0x5, 0xe, 0x12, 0x10, 0xe, 0x0, 0xe}}, {{0x9, 0x5, 0x8, 0xc, 0x420, 0x61, 0x5, 0x9, [@generic={0xa, 0xb, "3cbc0590db6a3c24"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x30, 0x10}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xcf, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x50}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0x46, 0x0, [@generic={0x4f, 0x4, "edccc575831a9e075d773b78f8d7ce12b84e4d63a8b83e593cc87e03322e79c201efc77021cf5676e898b0bae73916d1f0b92945b73c3cbc2198a13ea6b4afcd6df77972d67a53e4ca9594eb15"}, @generic={0x2b, 0x22, "0180768e46b8144fed0a90e982f937681e1b3325c243a110f688d833ff66f9acead2430d4a2be1dfa6"}]}}]}}, {{0x9, 0x4, 0x90, 0xff, 0x9, 0x54, 0x9e, 0xad, 0x3, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'f'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x7ff, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x4, 0x649}, @obex={0x5, 0x24, 0x15, 0xa24}, @mbim_extended={0x8, 0x24, 0x1c, 0x961, 0x6, 0x3}]}], [{{0x9, 0x5, 0x0, 0x9, 0x10, 0x8, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x77}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0x7, 0xc6}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0xab, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4709e871dc384869, 0x40, 0x1, 0x2, 0xba}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xff, 0x13, 0x9, [@generic={0xa3, 0x2, "2c580b4fe6951ec06fd84e9f3d0035ae9f8a33b3232712cdc3b223a3c426e03aa102bf4ab986d997b393b1b2f151e826d644e80e363a335e11c471eb72b90a0631ab37954b233887f03c4433398970d1051774831d01702a53bf168ed23f507afe057bded968ce27158078c6512bd4e425ef36c50366bc8f5191cd94c460eb7fdaaf67f952af0d2e130b364dcb35ea450579e3acff4f4098499b95bcf03bf0c7f5"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x9, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe, 0xa8, 0xa2, [@generic={0xbd, 0x11, "18f9d24ebeacebc66c0366b0176c349ff4777a5aede2fc5d7808fd83fff2b293eb773955fb519327626e53e1f4a94a22b7a9426999672f2af918917c11a761a74fbd07c5197539c85e74d647aed4cd84ac8cb7741a46f931f768fffc3f5685d6e13b7af433084d1e7ee255c662def5cc3894aa9d4540c38976f9b6951617bd6d49ec0e1cc6e4c3230c6595080b433e10c7bdc6486669090ffbcb35598b59f722cdb6a68a483322b4ce1c6d37acbeb8b3f5cb16c97a3288f4aa9aab"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xf, 0x6, 0x9, [@generic={0xf8, 0x11, "a91f0baff8815602f1b0b0ba9e1790ea3a18b20c81bebd3b43303565c1b09e266c4b68d8cc24d0f069e355a9073063c0240228330009810de3607469f505f0e381ff4928202b5463a8b9fd0c643de848332869e2f23d032d95fe3bd92873599ba85e9370e198df7bd3a8c856acae93f93836c27584af0a7c2336bf6b984158c6f5a98ca2c06636bf78e4fbc5aeb9e2e4d2129408b8b3c71ca27d7db8d48073229b3a6ba207cf21c49ff423a468ea1c4a1449a9c94195b40f16df314a6668da3363bae1c42ccbaa7221d3328463b0024ac94f943389d7929dd8e502dbcde0ee18453b67407fbed358a23fcc0f861a1945e4ed60a02e77"}]}}]}}, {{0x9, 0x4, 0x3f, 0x2, 0x5, 0xa8, 0x63, 0xf5, 0x9, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0xe, 0xa, "", "ff"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x3, 0x9, 0x2, "", "cbe5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x7, 0x8, "63ab"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x40, "4af874a6f786"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x883, 0x3, "cff32d8c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf6, 0x1, 0x5, 0xc, 'w', "ba3c"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x220, 0x10, 0x6, 0x6, [@generic={0x78, 0x4, "a3cb318283481c906a6411fcd07e573c2b1c45b15c93f3493e26aa7af66ce46c87770063455d88865cdfcbf4604277540b7c647e31160dd99e11baccb4217d2d64bfc26af6e055fb478a6f11c317a5af818fe6a066e856693e01e29a362c3a6891af054a525a22552e88aecd6899f0b1c63a01d7fed5"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x8, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x0, 0x8}]}}, {{0x9, 0x5, 0x89, 0xc, 0x8, 0xf8, 0x1, 0xc, [@generic={0x6b, 0x23, "711b6fa961761e7095a193c028ceabda9b4648af3b57c88fb2059f7d9fd84e7900cb106855c47d1094527053433801987c9e5632adabc663b9bf9aadb98c0e22c72d4f960295c70f2368604e003df810ca3ca4c546c3c144148cc6d75243d5790723ceb3afec0270af"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xb, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8999}]}}, {{0x9, 0x5, 0x5, 0x0, 0x50, 0x7, 0x6, 0x10}}]}}]}}]}}, &(0x7f000001b0c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x50, 0x80, 0x7, 0x10, 0x40, 0xfa}, 0x25, &(0x7f0000000400)={0x5, 0xf, 0x25, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x0, 0xf00, 0x0, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x2, 0x27}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0xa, [{0xda, &(0x7f0000000440)=@string={0xda, 0x3, "b0ae75c917fb904595905088754613bc9cdbfcbf280d62542ba925899655a97f01954dd52a46a3364096599ce6af1ed12b62ac92f05af15403e721e2efa763198f1cc31c13e6bf8f5dae7ee670afddf7160af1c523c18ed4ca949f5780a07df0c6e5bc2ca794f6223c79deef2aa5ccbbef5326a4dc946b92e45aa291ff89484f92ace69a7cafd201d3874dac1bd89c3359c62e4eb39d71e272618709de02aaf2af9de1a8d1dd00a6035f4c704ec59728ac15fc234010866755f9b1be5c7e40a6978704e6e4afbcc4f84d8b0f9ef56d85c1224edd8c47d576"}}, {0xc4, &(0x7f0000001d00)=@string={0xc4, 0x3, "6e0f8f02eed562ea3f52d5fac5c8bbcff01012261004cb6e318f1d021c3bd69e17b189d4599176a4960c2730f0b07f29c95525afcc1d1e2a8d1900db372310b044f1ed58e224abfb80d6f1063148a2286fa32280cca6b52befc4b3cb9306ade01eb0b74dc9b8de3f9b20550ec381ce9b7cb585e1bc6c591fa8adceb3c50ecde6ada8edc252afb60be682d2e9575a76a9c375f6f8e9b36fdc939766d15f68212a8f49b7671dff230daa3b72e8d2e9077cc40ce8ae308eb64c326e6fc5ec42da0be68a"}}, {0x54, &(0x7f0000001e00)=@string={0x54, 0x3, "868c207b12b81e10e01f4700c83bde8d4889dc77a25853c602a1233b49069e366c7dc7595c1890a115f94ab38b5b04de5ebfc704f9051363299b483439fb70bb2514da832d348799f86e1b9f42545a220b4e"}}, {0xb2, &(0x7f0000001e80)=@string={0xb2, 0x3, "2bdbc91a70338001169b6e2ef0cc9ba6d233e0e7062f5335b9802a1739e127725835c4b5d6985799c7bfa14618b5c3feaa5a8a167345b90e547258db48eff3649f9d11b0680d023e715a9b56f53e1fd10858c166ccb16635635d7ea6808a65e6d29d6fba663356858354afee435e034d8413f96a44c9be12d7c46d3aae7c0ee0f1cb5343778c45bedeb680cad8fd2bfb4fd04960751913aff07effff3e5909b4d9aee0de9b04714da19d0bc1cb1e43d3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x3461}}, {0x42, &(0x7f000001b000)=@string={0x42, 0x3, "7d6ccf5d128f70ab7bcad710acb4fea98f2b5e48dd6072f6808d31c19a8b47b12f3cc5cea1fa684a235996f74ce4b53d659ca360ca3d23fc2b000bf438f0dfbe"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f000001b080)=@lang_id={0x4, 0x3, 0x4001}}]})
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x1, 0x2, 0x7}, 0x10)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000040))
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0}}, 0x18)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0xffffffff, 0xd, 0x2c9f340f, 0x7})
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2})
r6 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0xc0405626, &(0x7f0000000040))
dup(r6)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4, 0x8000000000000000, 0x0, 0xfffffffe})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
keyctl$read(0xb, r1, &(0x7f0000000580)=""/4096, 0x1000)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

2.89918612s ago: executing program 0 (id=64):
r0 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3)
r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
write$cgroup_int(r1, 0x0, 0x0)
msgctl$IPC_SET(0xffffffffffffffff, 0x85800008, 0x0)
r5 = epoll_create1(0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
close_range(r5, 0xffffffffffffffff, 0x0)
ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000001c0)={[0x7]})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x4, 0x2, 0x8, 0xffffffffffff699f, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88)
fcntl$addseals(r0, 0x409, 0x8)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

2.808599783s ago: executing program 4 (id=65):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00')
preadv(r1, &(0x7f0000001400), 0x0, 0xc002a0, 0x101)

2.690065159s ago: executing program 1 (id=66):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0xf, 0x0, &(0x7f0000000640))
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x70bda87d, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

2.595355006s ago: executing program 4 (id=67):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x4, 0x8}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$igmp6(0xa, 0x3, 0x2)
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000240)={0x20006b, 0x0, 0x120000}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

2.537991837s ago: executing program 2 (id=68):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x4, 0x8}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$igmp6(0xa, 0x3, 0x2)
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000240)={0x20006b, 0x0, 0x120000}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
socket$kcm(0x10, 0x2, 0x0)

1.580561141s ago: executing program 0 (id=69):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
flock(r0, 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000400)=[{0x34, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}, {0x0, 0xfa, 0xf2, 0x4}, {0xae9, 0xd8, 0x20, 0x8}]}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESDEC=r2], 0xfc}}, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c)
r9 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x4, 0x0, 0xfffffffd, 0x19, @local, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x0, 0x800, 0xbca}})
ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x5d, r10})
sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000000000800000000001000000000000000000000332661ff5fe060b431f1d497f4dfa9a6fa905bdd9e7c75fd8b145dbd17ad8368f00db68c774e3c9f4efba04ac2c5b6bf74392c824203e1b5dd9b0646ef4bd9752d0b60ada313a4514047fb75e7e19a875c16616cf63fc20a1a8bf703f37af8f0d1ee52fe53c698433f7356c6c559eb079726286abc9a5ad2dd4f0c6f78daeca26d675a1a40b5bb7d0c2a987977b03cebe152bc89e3d90baa22b5d20e217515a2afd9f1e853464d3e1e7ca0aa1d3f96c0ce08d600"], 0x10}}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f00000003c0)={'batadv0\x00', {0x2, 0x4e20, @local}})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_uring_setup(0x661e, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f0000000440)='./file0\x00')

1.334914145s ago: executing program 4 (id=70):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52})
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
gettid()
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @local, 0x1000}}, 0x8, 0x2, 0x6, 0x0, 0x3, 0x2, 0xe}, 0x9c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x200, 0x61)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x100007f, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x1262, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000f5ff000000000195"], &(0x7f0000000680)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000100)='contention_end\x00', r8, 0x0, 0x100000200000000}, 0x18)
fsopen(&(0x7f0000000200)='iso9660\x00', 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "c3f75d4b007c27cbac504b6e57de86f8134fa44d35000000001000"}})

1.131037s ago: executing program 2 (id=71):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1})
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
syz_open_procfs(r4, &(0x7f0000000300)='attr/current\x00')
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1f0000000500000002000000010000000006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r7}, 0x38)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001a000100090000007cdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700100000000000000000000000000014000100fe8000000000000000000000000000bb7310f4658dbf1f733f4a1e67ada2a0611935c461477bdce9053601aaded17091e4c2f87094e7743691ea9b41a0d755c12a3249c7af8ef431273df9708bc9f1e078f3485d69d134d6f75a5230791b8f7006a9308f2bc230c045e8f295f486959d0e3e58adf3e6903bba9d29815992218604c340141c673bec5e8dfc7373ebd680f3743dc61a38bf9a85a10f77d4ed9941bcf1a1529035839d"], 0x99}}, 0x0)

739.25669ms ago: executing program 1 (id=72):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b9800000c00f326635001000000f30dbe40f011866b9070900000f3266b9800000c00f326635000100000f300f01d166b94d06000066b8833954cc66ba000000000f3015000066b9d00b00000f32640fffce", 0x53}], 0x1, 0x54, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0x59, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xc, 0xa}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8001)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_G_EDID(r8, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

22.646773ms ago: executing program 2 (id=73):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000028c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b00000025704220202020000100fdffffffffffffff000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e000000700000003e17c6551d27971d71d24be23601669465534e502030cb3be0b3c1b371650f2382a51", @ANYRES8, @ANYRES32, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d0000000600000006000000000000008401000000000000870500000000000000800000", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d55d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB, @ANYRES16, @ANYRES16, @ANYBLOB, @ANYRESHEX], 0x658)
fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r1, 0x0, 0x0, 0x60010020, 0x0)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x800d)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)

0s ago: executing program 0 (id=74):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x4, 0x8}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$igmp6(0xa, 0x3, 0x2)
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000240)={0x20006b, 0x0, 0x120000}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts.
[   59.244736][   T30] audit: type=1400 audit(1746973436.375:66): avc:  denied  { mounton } for  pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   59.248207][ T5799] cgroup: Unknown subsys name 'net'
[   59.267472][   T30] audit: type=1400 audit(1746973436.375:67): avc:  denied  { mount } for  pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   59.297340][   T30] audit: type=1400 audit(1746973436.435:68): avc:  denied  { unmount } for  pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   59.484265][ T5799] cgroup: Unknown subsys name 'cpuset'
[   59.492165][ T5799] cgroup: Unknown subsys name 'rlimit'
[   59.655169][   T30] audit: type=1400 audit(1746973436.785:69): avc:  denied  { setattr } for  pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   59.678592][   T30] audit: type=1400 audit(1746973436.785:70): avc:  denied  { create } for  pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   59.707651][   T30] audit: type=1400 audit(1746973436.785:71): avc:  denied  { write } for  pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   59.728146][   T30] audit: type=1400 audit(1746973436.785:72): avc:  denied  { read } for  pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   59.749050][   T30] audit: type=1400 audit(1746973436.815:73): avc:  denied  { mounton } for  pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   59.776364][   T30] audit: type=1400 audit(1746973436.815:74): avc:  denied  { mount } for  pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   59.799836][   T30] audit: type=1400 audit(1746973436.825:75): avc:  denied  { read } for  pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   59.804385][ T5801] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   60.690527][ T5799] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.523095][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   64.523109][   T30] audit: type=1400 audit(1746973441.655:82): avc:  denied  { create } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.601174][   T30] audit: type=1400 audit(1746973441.685:83): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   64.641118][   T30] audit: type=1400 audit(1746973441.685:84): avc:  denied  { open } for  pid=5811 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   64.643210][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.691049][   T30] audit: type=1400 audit(1746973441.695:85): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="socket:[4676]" dev="sockfs" ino=4676 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.716740][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.731424][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.761261][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.768824][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.801718][   T30] audit: type=1400 audit(1746973441.915:86): avc:  denied  { read } for  pid=5811 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.887199][   T30] audit: type=1400 audit(1746973441.915:87): avc:  denied  { open } for  pid=5811 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.911294][   T30] audit: type=1400 audit(1746973441.915:88): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   64.912431][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.941768][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.950387][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.958693][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.993838][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.002631][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.010533][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.019576][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.032078][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.039724][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.051951][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.059485][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.068598][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.084811][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.092442][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.111248][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.119040][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.126477][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.134252][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.141763][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.183980][   T30] audit: type=1400 audit(1746973442.305:89): avc:  denied  { module_request } for  pid=5811 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   65.291967][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   65.438289][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.445464][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.452878][ T5811] bridge_slave_0: entered allmulticast mode
[   65.459445][ T5811] bridge_slave_0: entered promiscuous mode
[   65.467327][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.474494][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.481652][ T5811] bridge_slave_1: entered allmulticast mode
[   65.488192][ T5811] bridge_slave_1: entered promiscuous mode
[   65.554128][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.567297][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.619710][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   65.677607][ T5811] team0: Port device team_slave_0 added
[   65.718247][ T5811] team0: Port device team_slave_1 added
[   65.727080][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   65.776888][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.784047][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.810768][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.822061][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   65.856090][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.864562][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.890728][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.914053][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.921264][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.928423][ T5830] bridge_slave_0: entered allmulticast mode
[   65.936903][ T5830] bridge_slave_0: entered promiscuous mode
[   65.947055][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.954249][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.961695][ T5830] bridge_slave_1: entered allmulticast mode
[   65.968546][ T5830] bridge_slave_1: entered promiscuous mode
[   65.987143][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   66.016988][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.042873][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.134534][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.141927][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.149062][ T5821] bridge_slave_0: entered allmulticast mode
[   66.156089][ T5821] bridge_slave_0: entered promiscuous mode
[   66.166805][ T5811] hsr_slave_0: entered promiscuous mode
[   66.173194][ T5811] hsr_slave_1: entered promiscuous mode
[   66.182732][ T5830] team0: Port device team_slave_0 added
[   66.199224][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.206472][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.214825][ T5821] bridge_slave_1: entered allmulticast mode
[   66.224040][ T5821] bridge_slave_1: entered promiscuous mode
[   66.241397][ T5830] team0: Port device team_slave_1 added
[   66.326076][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.333226][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.340413][ T5818] bridge_slave_0: entered allmulticast mode
[   66.347243][ T5818] bridge_slave_0: entered promiscuous mode
[   66.355666][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.367864][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.380824][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.388030][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.413987][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.426112][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.433090][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.462347][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.473580][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.480667][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.488115][ T5820] bridge_slave_0: entered allmulticast mode
[   66.494784][ T5820] bridge_slave_0: entered promiscuous mode
[   66.501827][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.508927][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.516047][ T5818] bridge_slave_1: entered allmulticast mode
[   66.523295][ T5818] bridge_slave_1: entered promiscuous mode
[   66.544311][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.551457][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.558673][ T5820] bridge_slave_1: entered allmulticast mode
[   66.565972][ T5820] bridge_slave_1: entered promiscuous mode
[   66.618236][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.637334][ T5821] team0: Port device team_slave_0 added
[   66.657774][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.668904][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.680553][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.692008][ T5821] team0: Port device team_slave_1 added
[   66.759017][ T5820] team0: Port device team_slave_0 added
[   66.772950][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.779893][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.805974][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.818018][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.825025][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.850989][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.851812][ T5814] Bluetooth: hci0: command tx timeout
[   66.865494][ T5830] hsr_slave_0: entered promiscuous mode
[   66.873071][ T5830] hsr_slave_1: entered promiscuous mode
[   66.878896][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.886748][ T5830] Cannot create hsr debugfs directory
[   66.897786][ T5820] team0: Port device team_slave_1 added
[   66.905604][ T5818] team0: Port device team_slave_0 added
[   66.913693][ T5818] team0: Port device team_slave_1 added
[   66.985325][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.993618][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.019786][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.037888][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.044933][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.071015][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.083282][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.090221][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.116263][ T5814] Bluetooth: hci2: command tx timeout
[   67.116412][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.140861][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.148359][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.161394][ T5814] Bluetooth: hci4: command tx timeout
[   67.174346][ T5127] Bluetooth: hci3: command tx timeout
[   67.180024][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.185322][ T5827] Bluetooth: hci1: command tx timeout
[   67.231579][ T5821] hsr_slave_0: entered promiscuous mode
[   67.237820][ T5821] hsr_slave_1: entered promiscuous mode
[   67.244317][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.252180][ T5821] Cannot create hsr debugfs directory
[   67.330511][ T5818] hsr_slave_0: entered promiscuous mode
[   67.336541][ T5818] hsr_slave_1: entered promiscuous mode
[   67.342518][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.350050][ T5818] Cannot create hsr debugfs directory
[   67.363416][ T5820] hsr_slave_0: entered promiscuous mode
[   67.369390][ T5820] hsr_slave_1: entered promiscuous mode
[   67.375414][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.383177][ T5820] Cannot create hsr debugfs directory
[   67.407014][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.445663][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.475285][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.510743][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.667085][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   67.677476][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.702048][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.714157][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.752591][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.778808][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.788591][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.812092][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.869623][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.885564][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.894756][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.913677][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.941336][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.995461][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.024756][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   68.032931][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.045747][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.056142][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.068956][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.085723][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.092876][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.117691][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.133464][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   68.147818][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.154932][ T4485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.178495][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   68.186399][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.193550][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.223254][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.230335][ T4485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.247435][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.254546][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.279707][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.286789][ T4485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.329249][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.376232][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   68.401823][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.408928][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.438852][   T30] audit: type=1400 audit(1746973445.565:90): avc:  denied  { sys_module } for  pid=5811 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   68.472860][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.479961][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.519317][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.619287][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   68.680731][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.695731][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.714808][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.721924][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.736488][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.743628][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.850083][ T5821] veth0_vlan: entered promiscuous mode
[   68.896486][ T5811] veth0_vlan: entered promiscuous mode
[   68.908439][ T5821] veth1_vlan: entered promiscuous mode
[   68.925165][ T5827] Bluetooth: hci0: command tx timeout
[   68.967953][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.989745][ T5811] veth1_vlan: entered promiscuous mode
[   69.015463][ T5821] veth0_macvtap: entered promiscuous mode
[   69.024365][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.037657][ T5821] veth1_macvtap: entered promiscuous mode
[   69.066399][ T5811] veth0_macvtap: entered promiscuous mode
[   69.076217][ T5811] veth1_macvtap: entered promiscuous mode
[   69.124391][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.134219][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.147216][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.159425][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.168184][ T5827] Bluetooth: hci2: command tx timeout
[   69.180215][ T5818] veth0_vlan: entered promiscuous mode
[   69.198137][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.208423][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.217350][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.226663][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.236301][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.245085][ T5827] Bluetooth: hci4: command tx timeout
[   69.251540][ T5827] Bluetooth: hci1: command tx timeout
[   69.253872][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.256917][ T5827] Bluetooth: hci3: command tx timeout
[   69.267929][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.283631][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.306352][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.315571][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.326444][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.335269][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.363822][ T5818] veth1_vlan: entered promiscuous mode
[   69.412692][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.472368][ T5818] veth0_macvtap: entered promiscuous mode
[   69.493212][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.507300][ T5818] veth1_macvtap: entered promiscuous mode
[   69.511052][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.530767][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.540554][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.575546][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.583961][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.584829][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.603240][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.613747][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.625203][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.636253][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.660910][   T30] audit: type=1400 audit(1746973446.785:91): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/root/syzkaller.EKLc6W/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   69.667039][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.688615][   T30] audit: type=1400 audit(1746973446.795:92): avc:  denied  { mount } for  pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.711712][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.722479][   T30] audit: type=1400 audit(1746973446.795:93): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/root/syzkaller.EKLc6W/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   69.728695][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.763614][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.774250][   T30] audit: type=1400 audit(1746973446.835:94): avc:  denied  { mount } for  pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   69.784685][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.799523][   T30] audit: type=1400 audit(1746973446.835:95): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/root/syzkaller.EKLc6W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   69.808680][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.840093][   T30] audit: type=1400 audit(1746973446.835:96): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/root/syzkaller.EKLc6W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   69.867634][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.870777][   T30] audit: type=1400 audit(1746973446.835:97): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   69.896106][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.896134][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.919105][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.942344][   T30] audit: type=1400 audit(1746973446.905:98): avc:  denied  { mounton } for  pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   69.955887][ T5830] veth0_vlan: entered promiscuous mode
[   69.970381][   T30] audit: type=1400 audit(1746973446.905:99): avc:  denied  { mount } for  pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=6759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   69.994462][   T30] audit: type=1400 audit(1746973446.905:100): avc:  denied  { mount } for  pid=5811 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   70.026089][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.026843][ T5820] veth0_vlan: entered promiscuous mode
[   70.042546][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.088911][ T5830] veth1_vlan: entered promiscuous mode
[   70.120160][ T5820] veth1_vlan: entered promiscuous mode
[   70.260148][ T5820] veth0_macvtap: entered promiscuous mode
[   70.280122][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.295738][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.316679][ T5900] Zero length message leads to an empty skb
[   70.319278][ T5820] veth1_macvtap: entered promiscuous mode
[   70.340375][ T5830] veth0_macvtap: entered promiscuous mode
[   70.364728][ T5830] veth1_macvtap: entered promiscuous mode
[   70.375449][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.384580][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.423406][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.460666][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.471152][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.482063][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.492289][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.503033][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.514366][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.538013][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.556882][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.578158][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.594997][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.618456][ T5904] binder: 5899:5904 ioctl c0306201 0 returned -14
[   70.636338][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.648845][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.660118][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.684621][ T5901] lo speed is unknown, defaulting to 1000
[   70.699648][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.743424][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.792981][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.828954][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.840288][ T5906] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   70.898689][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.940708][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.974675][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.005190][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.006504][ T5827] Bluetooth: hci0: command tx timeout
[   71.021238][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   71.027625][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   71.033262][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.072905][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.084543][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.095072][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.106222][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.113813][ T5901] lo speed is unknown, defaulting to 1000
[   71.133266][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.158863][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.219465][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.240458][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.281434][ T5827] Bluetooth: hci2: command tx timeout
[   71.318756][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   71.335843][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   71.356558][ T5827] Bluetooth: hci3: command tx timeout
[   71.364523][ T5827] Bluetooth: hci1: command tx timeout
[   71.370024][ T5827] Bluetooth: hci4: command tx timeout
[   71.604786][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.615562][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.625593][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.636264][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.668520][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.691469][ T5901] lo speed is unknown, defaulting to 1000
[   71.700934][ T5901] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.703469][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.771533][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.783096][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.795097][ T5901] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.796310][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.831322][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   71.951266][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.091731][ T5901] lo speed is unknown, defaulting to 1000
[   72.105105][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.131005][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.167713][ T5901] lo speed is unknown, defaulting to 1000
[   72.177676][ T5916] netlink: 'syz.0.7': attribute type 10 has an invalid length.
[   72.216424][ T5916] team0: Port device wlan1 added
[   72.407544][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.416830][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.426538][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.048353][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.129227][ T5127] Bluetooth: hci0: command tx timeout
[   73.138380][ T5901] lo speed is unknown, defaulting to 1000
[   73.154936][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.169843][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.241668][ T5901] lo speed is unknown, defaulting to 1000
[   73.249232][ T5901] lo speed is unknown, defaulting to 1000
[   73.324497][ T5127] Bluetooth: hci2: command tx timeout
[   73.381352][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.391154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.406748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   73.420995][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.451756][ T5127] Bluetooth: hci4: command tx timeout
[   73.457185][ T5827] Bluetooth: hci1: command tx timeout
[   73.462895][ T5814] Bluetooth: hci3: command tx timeout
[   74.911062][   T30] kauditd_printk_skb: 58 callbacks suppressed
[   74.911089][   T30] audit: type=1400 audit(1746973451.775:159): avc:  denied  { accept } for  pid=5936 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   75.067762][ T5944] vxfs: WRONG superblock magic 00000000 at 1
[   75.081487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.082134][ T5944] vxfs: WRONG superblock magic 00000000 at 8
[   75.301322][   T30] audit: type=1400 audit(1746973451.935:160): avc:  denied  { mount } for  pid=5936 comm="syz.2.12" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   75.322699][ T5944] vxfs: can't find superblock.
[   75.687730][   T30] audit: type=1400 audit(1746973452.335:161): avc:  denied  { write } for  pid=5933 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   75.728842][   T30] audit: type=1400 audit(1746973452.335:162): avc:  denied  { write } for  pid=5933 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.787031][   T30] audit: type=1400 audit(1746973452.365:163): avc:  denied  { read append } for  pid=5933 comm="syz.4.5" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   75.876801][   T30] audit: type=1400 audit(1746973452.365:164): avc:  denied  { open } for  pid=5933 comm="syz.4.5" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   75.900444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   75.960705][ T5958] siw: device registration error -23
[   75.974609][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   76.639033][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.648313][    T9] cfg80211: failed to load regulatory.db
[   76.718031][   T30] audit: type=1400 audit(1746973452.405:165): avc:  denied  { map } for  pid=5933 comm="syz.4.5" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   76.746362][ T5961] netlink: 'syz.1.17': attribute type 10 has an invalid length.
[   76.765269][ T5961] team0: Port device wlan1 added
[   76.884935][   T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   77.022981][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.844284][   T30] audit: type=1400 audit(1746973452.405:166): avc:  denied  { write execute } for  pid=5933 comm="syz.4.5" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   78.739959][   T10] usb 1-1: Product: syz
[   78.772938][   T10] usb 1-1: Manufacturer: syz
[   78.804401][   T10] usb 1-1: SerialNumber: syz
[   78.924666][   T10] usb 1-1: config 0 descriptor??
[   78.971332][   T30] audit: type=1400 audit(1746973452.475:167): avc:  denied  { map_read map_write } for  pid=5948 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.973503][ T5974] input: syz0 as /devices/virtual/input/input5
[   78.991504][   T10] usb 1-1: can't set config #0, error -71
[   79.021905][   T10] usb 1-1: USB disconnect, device number 2
[   79.035754][   T30] audit: type=1400 audit(1746973452.775:168): avc:  denied  { write } for  pid=5948 comm="syz.0.14" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.121051][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.228028][ T5982] xt_connbytes: Forcing CT accounting to be enabled
[   79.234862][ T5982] Cannot find set identified by id 0 to match
[   79.296243][ T5865] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.307567][ T5865] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.339045][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0
[   79.355310][ T5865] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[   79.374147][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.389941][ T5865] usb 5-1: config 0 descriptor??
[   79.619568][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.654323][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.684048][ T5971] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.20'.
[   79.693728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.721642][   T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   80.041538][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[   80.051578][   T24] usb 2-1: config 6 has an invalid interface number: 146 but max is 2
[   80.059760][   T24] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[   80.069300][   T24] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[   80.088810][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'.
[   80.100677][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.108782][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.124261][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   80.124276][   T30] audit: type=1400 audit(1746973457.215:179): avc:  denied  { read } for  pid=5969 comm="syz.4.20" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.156127][ T5971] Invalid ELF header magic: != ELF
[   80.161622][   T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   80.181900][   T24] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 3
[   80.181900][   T30] audit: type=1400 audit(1746973457.215:180): avc:  denied  { open } for  pid=5969 comm="syz.4.20" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.181946][   T30] audit: type=1400 audit(1746973457.215:181): avc:  denied  { ioctl } for  pid=5969 comm="syz.4.20" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   80.249267][   T30] audit: type=1400 audit(1746973457.215:182): avc:  denied  { write } for  pid=5969 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   80.251066][   T24] usb 2-1: config 6 has no interface number 0
[   80.269672][   T30] audit: type=1400 audit(1746973457.285:183): avc:  denied  { module_load } for  pid=5969 comm="syz.4.20" path="/2/bus" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   80.316279][   T24] usb 2-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   80.351071][   T24] usb 2-1: config 6 interface 146 has no altsetting 0
[   80.359783][   T24] usb 2-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad
[   80.374564][ T5943] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   80.381071][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.390440][   T24] usb 2-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下
[   80.406921][ T5865] usbhid 5-1:0.0: can't add hid device: -71
[   80.410249][   T24] usb 2-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷＝ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦
[   80.444046][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   80.451457][   T24] usb 2-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃
[   80.456000][ T5865] usb 5-1: USB disconnect, device number 2
[   80.554696][ T5989] siw: device registration error -23
[   80.701890][ T5943] usb 1-1: not running at top speed; connect to a high speed hub
[   80.703077][   T30] audit: type=1400 audit(1746973457.835:184): avc:  denied  { create } for  pid=5975 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   80.710657][ T5943] usb 1-1: config 6 has an invalid interface number: 146 but max is 2
[   80.738604][ T5943] usb 1-1: config 6 has an invalid descriptor of length 154, skipping remainder of the config
[   80.748983][ T5943] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 3
[   80.808271][   T30] audit: type=1400 audit(1746973457.925:185): avc:  denied  { getopt } for  pid=5975 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.827452][ T5943] usb 1-1: config 6 has no interface number 0
[   80.828859][ T5943] usb 1-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   80.966086][ T5943] usb 1-1: config 6 interface 146 has no altsetting 0
[   80.973771][   T30] audit: type=1400 audit(1746973457.925:186): avc:  denied  { read write } for  pid=5975 comm="syz.1.23" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   80.998750][   T30] audit: type=1400 audit(1746973457.925:187): avc:  denied  { open } for  pid=5975 comm="syz.1.23" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   81.028131][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'.
[   81.041646][ T5943] usb 1-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad
[   81.051346][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.069254][ T5943] usb 1-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下
[   81.115565][   T30] audit: type=1400 audit(1746973457.925:188): avc:  denied  { ioctl } for  pid=5975 comm="syz.1.23" path="socket:[8404]" dev="sockfs" ino=8404 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   81.150130][ T5943] usb 1-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷＝ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦
[   81.388961][ T5943] usb 1-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃
[   81.533566][ T6000] netlink: 'syz.4.28': attribute type 10 has an invalid length.
[   81.543242][ T6001] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   81.563590][ T6000] team0: Port device wlan1 added
[   81.809048][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'.
[   81.861072][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   81.946826][ T5943] usb 1-1: USB disconnect, device number 3
[   82.012287][ T5867] usb 5-1: Using ep0 maxpacket: 32
[   82.053750][ T5867] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   82.074505][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.129682][ T5867] usb 5-1: config 0 descriptor??
[   82.356375][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[   82.399259][ T5867] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[   82.441227][ T5867] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[   82.646015][ T6011] tmpfs: Bad value for 'mpol'
[   83.726222][ T6008] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   83.900488][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'.
[   83.911302][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'.
[   83.984782][   T24] usb 2-1: USB disconnect, device number 2
[   84.061030][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.145694][ T5893] usb 1-1: config 0 has an invalid interface number: 244 but max is 0
[   85.154681][ T5893] usb 1-1: config 0 has no interface number 0
[   85.161638][ T5893] usb 1-1: config 0 interface 244 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024
[   85.172407][ T5893] usb 1-1: config 0 interface 244 has no altsetting 0
[   85.182174][ T5893] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=50.70
[   85.191772][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.231924][ T6031] vxfs: WRONG superblock magic 00000000 at 1
[   85.238665][ T6031] vxfs: WRONG superblock magic 00000000 at 8
[   85.244970][ T6031] vxfs: can't find superblock.
[   85.288171][ T5893] usb 1-1: config 0 descriptor??
[   85.307491][ T6012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   85.420768][ T6034] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.602625][ T5893] usb 1-1: string descriptor 0 read error: -71
[   85.652609][ T5893] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[   85.688758][ T5893] dw2102: su3000_power_ctrl: 1, initialized 0
[   85.705757][ T5893] dvb-usb: bulk message failed: -22 (2/0)
[   85.762698][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.794525][ T5893] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[   85.805604][ T5893] usb 1-1: media controller created
[   85.814792][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   85.820704][ T5893] dw2102: i2c transfer failed.
[   85.995422][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   85.995440][   T30] audit: type=1400 audit(1746973463.015:202): avc:  denied  { create } for  pid=6035 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.024877][   T30] audit: type=1400 audit(1746973463.015:203): avc:  denied  { ioctl } for  pid=6035 comm="syz.0.40" path="socket:[8490]" dev="sockfs" ino=8490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.057002][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   86.140257][   T30] audit: type=1400 audit(1746973463.015:204): avc:  denied  { bind } for  pid=6035 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.164385][   T30] audit: type=1400 audit(1746973463.015:205): avc:  denied  { write } for  pid=6035 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   86.172447][ T5893] dw2102: i2c transfer failed.
[   86.217598][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   86.280409][ T5893] dw2102: i2c transfer failed.
[   86.586756][   T30] audit: type=1400 audit(1746973463.445:206): avc:  denied  { create } for  pid=6035 comm="syz.0.40" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   86.628008][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   86.677973][ T5893] dw2102: i2c transfer failed.
[   86.730884][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   86.779559][ T5893] dw2102: i2c transfer failed.
[   86.826178][ T5893] dvb-usb: bulk message failed: -22 (6/0)
[   86.875610][ T5893] dw2102: i2c transfer failed.
[   86.934505][ T5893] dvb-usb: MAC address: 02:02:02:02:02:02
[   86.970660][   T30] audit: type=1400 audit(1746973464.095:207): avc:  denied  { unlink } for  pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   87.130449][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.232538][ T5893] dvb-usb: bulk message failed: -22 (3/0)
[   87.259564][ T5893] dw2102: command 0x0e transfer failed.
[   87.278453][ T6052] netlink: 'syz.0.41': attribute type 10 has an invalid length.
[   87.297807][ T5893] dvb-usb: bulk message failed: -22 (3/0)
[   87.444224][ T5893] dw2102: command 0x0e transfer failed.
[   87.601901][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.630292][ T6060] xt_hashlimit: size too large, truncated to 1048576
[   87.796618][ T5893] dvb-usb: bulk message failed: -22 (3/0)
[   87.807958][   T30] audit: type=1400 audit(1746973464.725:208): avc:  denied  { name_bind } for  pid=6051 comm="syz.1.43" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   87.847061][ T5893] dw2102: command 0x0e transfer failed.
[   87.927742][   T30] audit: type=1400 audit(1746973464.725:209): avc:  denied  { node_bind } for  pid=6051 comm="syz.1.43" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   87.950337][ T5893] dvb-usb: bulk message failed: -22 (3/0)
[   87.950380][ T5893] dw2102: command 0x0e transfer failed.
[   87.950391][ T5893] dvb-usb: bulk message failed: -22 (1/0)
[   87.950401][ T5893] dw2102: command 0x51 transfer failed.
[   87.950408][ T5893] dvb-usb: bulk message failed: -22 (5/0)
[   87.950418][ T5893] dw2102: i2c probe for address 0x68 failed.
[   87.950427][ T5893] dvb-usb: bulk message failed: -22 (5/0)
[   87.950437][ T5893] dw2102: i2c probe for address 0x69 failed.
[   87.950445][ T5893] dvb-usb: bulk message failed: -22 (5/0)
[   87.950454][ T5893] dw2102: i2c probe for address 0x6a failed.
[   87.950462][ T5893] dw2102: probing for demodulator failed. Is the external power switched on?
[   87.950474][ T5893] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[   88.093144][ T6062] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   88.783246][   T30] audit: type=1400 audit(1746973464.755:210): avc:  denied  { setopt } for  pid=6051 comm="syz.1.43" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.012713][ T5893] rc_core: IR keymap rc-tt-1500 not found
[   89.321734][ T5893] Registered IR keymap rc-empty
[   89.330441][ T5893] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[   89.343193][ T5893] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6
[   89.356253][ T5893] dvb-usb: schedule remote query interval to 250 msecs.
[   89.363355][ T5893] dw2102: su3000_power_ctrl: 0, initialized 1
[   89.369418][ T5893] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[   89.382887][ T5893] usb 1-1: USB disconnect, device number 4
[   89.885275][ T6075] xt_hashlimit: size too large, truncated to 1048576
[   90.110005][ T6078] xt_hashlimit: size too large, truncated to 1048576
[   90.332321][ T6067] siw: device registration error -23
[   90.691318][ T6081] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.618454][ T6086] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   92.036187][ T5893] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[   92.801187][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.104067][ T5893] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   93.121111][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.137458][ T5893] usb 1-1: Product: syz
[   93.141987][ T5893] usb 1-1: Manufacturer: syz
[   93.147407][ T5893] usb 1-1: SerialNumber: syz
[   93.225419][ T6102] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   93.546243][ T5893] usb 1-1: config 0 descriptor??
[   93.547680][ T6104] input: syz0 as /devices/virtual/input/input7
[   93.846232][ T5893] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22
[   94.656854][ T6106] xt_connbytes: Forcing CT accounting to be enabled
[   94.663817][ T6106] Cannot find set identified by id 0 to match
[   94.683076][ T6109] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.797243][   T30] audit: type=1326 audit(1746973471.925:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   94.809466][ T5893] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   94.838069][   T30] audit: type=1326 audit(1746973471.965:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   95.032181][   T30] audit: type=1326 audit(1746973471.995:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   95.055317][   T30] audit: type=1326 audit(1746973471.995:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   95.300977][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'.
[   95.432738][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'.
[   95.822574][   T30] audit: type=1326 audit(1746973471.995:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   95.962730][   T30] audit: type=1326 audit(1746973473.095:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   96.014997][   T30] audit: type=1326 audit(1746973473.095:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   96.059191][ T1205] usb 1-1: USB disconnect, device number 5
[   96.065521][   T30] audit: type=1326 audit(1746973473.095:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   96.112204][   T30] audit: type=1326 audit(1746973473.225:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   96.135744][   T30] audit: type=1326 audit(1746973473.225:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0febd8e969 code=0x7ffc0000
[   97.164497][ T6138] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   97.244047][ T5865] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   97.412278][ T5865] usb 4-1: not running at top speed; connect to a high speed hub
[   97.431326][ T5865] usb 4-1: config 6 has an invalid interface number: 146 but max is 2
[   97.439735][ T5865] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[   97.467475][ T5865] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[   97.487078][ T5865] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   97.499285][ T5865] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 3
[   97.538918][ T6147] xt_hashlimit: size too large, truncated to 1048576
[   97.660315][ T6153] xt_hashlimit: size too large, truncated to 1048576
[   98.446927][ T5865] usb 4-1: config 6 has no interface number 0
[   98.453334][ T5865] usb 4-1: config 6 interface 146 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   98.733853][ T5865] usb 4-1: config 6 interface 146 has no altsetting 0
[   98.776041][ T5865] usb 4-1: New USB device found, idVendor=13d3, idProduct=f84d, bcdDevice=4f.ad
[   98.828579][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.851484][ T6165] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   98.884147][ T5865] usb 4-1: Product: 貆笠렒သῠG㯈跞襈矜墢왓ꄂ㬣ى㚞絬姇ᡜꆐ洛덊宋뽞Ӈ׹挓鬩㑈יּ뭰ᐥ菚㐭馇滸鼛呂≚下
[   99.067049][ T6168] overlay: ./file0 is not a directory
[   99.212324][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   99.231010][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'.
[   99.607716][ T5865] usb 4-1: Manufacturer: ཮ʏ헮刿𥉉죅쾻ჰ☒А滋輱ȝ㬜黖넗풉酙ꑶಖ〧냰⥿嗉꼥᷌⨞ᦍ⌷뀐壭ⓢﮫ횀۱䠱⢢ꍯ耢ꛌ⮵쓯쮳ړ뀞䶷룉㿞ₛ๕臃鯎땼沼Ὑ궨돎໅ꢭ십꽒ஶ苦婗ꥶ痃돩鞓텦桟⨡䦏枷＝ണ㮪簇ೄ껨踰䲶渲앯䋬௚諦
[   99.637323][ T5865] usb 4-1: SerialNumber: ᫉㍰ƀ鬖⹮쳰ꚛ㏒⼆㕓肹ᜪ爧㕘뗄飖饗뿇䚡딘ﻃ媪ᚊ䕳ູ牔擳鶟뀑൨㸂婱嚛㻵턟堈曁뇌㕦嵣꙾誀鷒멯㍦蕖咃幃䴃ᎄ櫹쥄ኾ쓗㩭粮쯱䍓豷빅뛞쪀﷘שׂ큏恉᥵꼓绰￿夾됉껙қ䵱鶡섋ị퍃
[  100.511763][ T5127] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  100.520615][ T5127] Bluetooth: hci0: Injecting HCI hardware error event
[  100.528738][ T5127] Bluetooth: hci0: hardware error 0x00
[  100.900380][ T6183] xt_hashlimit: size too large, truncated to 1048576
[  100.952765][    C0] ------------[ cut here ]------------
[  100.958507][    C0] WARNING: CPU: 0 PID: 6182 at net/mac80211/tx.c:5041 __ieee80211_beacon_get+0x14f4/0x1720
[  100.968554][    C0] Modules linked in:
[  100.972555][    C0] CPU: 0 UID: 0 PID: 6182 Comm: syz.0.74 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  100.984402][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  100.994507][    C0] RIP: 0010:__ieee80211_beacon_get+0x14f4/0x1720
[  101.000848][    C0] Code: 24 89 df 89 ee e8 8c c7 ce f6 40 38 eb 72 a2 e8 62 cd ce f6 4c 89 e7 e8 ba 85 29 f7 45 31 e4 e9 9b fe ff ff e8 4d cd ce f6 90 <0f> 0b 90 e9 3e f6 ff ff 48 89 c6 48 c7 c7 80 09 52 90 48 89 44 24
[  101.020515][    C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246
[  101.026603][    C0] RAX: 0000000000000000 RBX: ffff88807fd0a9d0 RCX: ffffffff8aec4bd1
[  101.034595][    C0] RDX: ffff88803204a440 RSI: ffffffff8aec5593 RDI: 0000000000000001
[  101.042594][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  101.050590][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000007c28
[  101.058592][    C0] R13: ffff888049cf4800 R14: 0000000000000041 R15: ffff88807fd0a500
[  101.066582][    C0] FS:  00007f4cbdd786c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000
[  101.075550][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  101.082150][    C0] CR2: 000000110c3a2bc7 CR3: 000000006422d000 CR4: 00000000003526f0
[  101.090139][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  101.098132][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  101.106119][    C0] Call Trace:
[  101.109391][    C0]  <IRQ>
[  101.112494][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  101.117439][    C0]  ieee80211_beacon_get_tim+0xa6/0x280
[  101.122921][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  101.129012][    C0]  mac80211_hwsim_beacon_tx+0x4dc/0xa40
[  101.134580][    C0]  __iterate_interfaces+0x2e2/0x650
[  101.139786][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  101.145860][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  101.151931][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  101.157735][    C0]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  101.164780][    C0]  mac80211_hwsim_beacon+0x105/0x200
[  101.170061][    C0]  __hrtimer_run_queues+0x1ff/0xad0
[  101.175274][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  101.181014][    C0]  ? read_tsc+0x9/0x20
[  101.185082][    C0]  hrtimer_run_softirq+0x17d/0x350
[  101.190190][    C0]  handle_softirqs+0x216/0x8e0
[  101.194964][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  101.200248][    C0]  __irq_exit_rcu+0x109/0x170
[  101.204963][    C0]  irq_exit_rcu+0x9/0x30
[  101.209219][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  101.214873][    C0]  </IRQ>
[  101.217805][    C0]  <TASK>
[  101.220732][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  101.226728][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  101.233154][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8e 28 f6 48 89 df e8 7e e2 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 d5 4e 19 f6 65 8b 05 1e 84 34 08 85 c0 74 16 5b
[  101.252867][    C0] RSP: 0018:ffffc9000398f818 EFLAGS: 00000246
[  101.258939][    C0] RAX: 0000000000000006 RBX: ffff888032233040 RCX: 0000000000000006
[  101.266940][    C0] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0
[  101.274922][    C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001
[  101.282915][    C0] R10: ffffffff9084f617 R11: 0000000000000000 R12: 0000000000000002
[  101.290897][    C0] R13: ffff888032232eb0 R14: ffff888032233080 R15: ffff888032232a28
[  101.298889][    C0]  __unix_dgram_recvmsg+0x326/0xee0
[  101.304098][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  101.309816][    C0]  ? irqentry_exit+0x3b/0x90
[  101.314422][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.319621][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  101.324595][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.329792][    C0]  ? iovec_from_user+0xbb/0x140
[  101.334650][    C0]  unix_dgram_recvmsg+0xd0/0x110
[  101.339587][    C0]  ____sys_recvmsg+0x5f6/0x6b0
[  101.344382][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  101.349667][    C0]  ? kfree+0x252/0x4d0
[  101.353743][    C0]  ___sys_recvmsg+0x114/0x1a0
[  101.358413][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  101.363635][    C0]  ? __pfx___might_resched+0x10/0x10
[  101.368920][    C0]  do_recvmmsg+0x2fe/0x740
[  101.373351][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  101.378351][    C0]  ? lock_acquire+0x179/0x350
[  101.383101][    C0]  ? do_futex+0x122/0x350
[  101.387490][    C0]  ? __x64_sys_futex+0x1e0/0x4c0
[  101.392498][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  101.397568][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  101.403174][    C0]  ? rcu_is_watching+0x12/0xc0
[  101.407990][    C0]  do_syscall_64+0xcd/0x260
[  101.412563][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.418500][    C0] RIP: 0033:0x7f4cbcf8e969
[  101.422965][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.442709][    C0] RSP: 002b:00007f4cbdd78038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  101.451201][    C0] RAX: ffffffffffffffda RBX: 00007f4cbd1b6080 RCX: 00007f4cbcf8e969
[  101.459239][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  101.467311][    C0] RBP: 00007f4cbd010ab1 R08: 0000000000000000 R09: 0000000000000000
[  101.475363][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  101.483368][    C0] R13: 0000000000000000 R14: 00007f4cbd1b6080 R15: 00007ffcf91acdf8
[  101.491367][    C0]  </TASK>
[  101.494376][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  101.501641][    C0] CPU: 0 UID: 0 PID: 6182 Comm: syz.0.74 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) 
[  101.513411][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  101.523436][    C0] Call Trace:
[  101.526687][    C0]  <IRQ>
[  101.529506][    C0]  dump_stack_lvl+0x3d/0x1f0
[  101.534073][    C0]  panic+0x71c/0x800
[  101.537944][    C0]  ? __pfx_panic+0x10/0x10
[  101.542336][    C0]  ? show_trace_log_lvl+0x29b/0x3e0
[  101.547513][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  101.552602][    C0]  ? __ieee80211_beacon_get+0x14f4/0x1720
[  101.558296][    C0]  check_panic_on_warn+0xab/0xb0
[  101.563210][    C0]  __warn+0xf6/0x3c0
[  101.567076][    C0]  ? __ieee80211_beacon_get+0x14f4/0x1720
[  101.572774][    C0]  report_bug+0x3c3/0x580
[  101.577076][    C0]  ? __ieee80211_beacon_get+0x14f4/0x1720
[  101.582771][    C0]  handle_bug+0x184/0x210
[  101.587075][    C0]  exc_invalid_op+0x17/0x50
[  101.591553][    C0]  asm_exc_invalid_op+0x1a/0x20
[  101.596373][    C0] RIP: 0010:__ieee80211_beacon_get+0x14f4/0x1720
[  101.602677][    C0] Code: 24 89 df 89 ee e8 8c c7 ce f6 40 38 eb 72 a2 e8 62 cd ce f6 4c 89 e7 e8 ba 85 29 f7 45 31 e4 e9 9b fe ff ff e8 4d cd ce f6 90 <0f> 0b 90 e9 3e f6 ff ff 48 89 c6 48 c7 c7 80 09 52 90 48 89 44 24
[  101.622254][    C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246
[  101.628289][    C0] RAX: 0000000000000000 RBX: ffff88807fd0a9d0 RCX: ffffffff8aec4bd1
[  101.636231][    C0] RDX: ffff88803204a440 RSI: ffffffff8aec5593 RDI: 0000000000000001
[  101.644172][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  101.652127][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000007c28
[  101.660069][    C0] R13: ffff888049cf4800 R14: 0000000000000041 R15: ffff88807fd0a500
[  101.668015][    C0]  ? __ieee80211_beacon_get+0xb31/0x1720
[  101.673626][    C0]  ? __ieee80211_beacon_get+0x14f3/0x1720
[  101.679322][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  101.684249][    C0]  ieee80211_beacon_get_tim+0xa6/0x280
[  101.689692][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  101.695737][    C0]  mac80211_hwsim_beacon_tx+0x4dc/0xa40
[  101.701271][    C0]  __iterate_interfaces+0x2e2/0x650
[  101.706446][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  101.712487][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  101.718524][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  101.724301][    C0]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  101.731299][    C0]  mac80211_hwsim_beacon+0x105/0x200
[  101.736554][    C0]  __hrtimer_run_queues+0x1ff/0xad0
[  101.741729][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  101.747418][    C0]  ? read_tsc+0x9/0x20
[  101.751477][    C0]  hrtimer_run_softirq+0x17d/0x350
[  101.756580][    C0]  handle_softirqs+0x216/0x8e0
[  101.761322][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  101.766584][    C0]  __irq_exit_rcu+0x109/0x170
[  101.771232][    C0]  irq_exit_rcu+0x9/0x30
[  101.775447][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  101.781053][    C0]  </IRQ>
[  101.783956][    C0]  <TASK>
[  101.786858][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  101.792821][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  101.799209][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8e 28 f6 48 89 df e8 7e e2 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 d5 4e 19 f6 65 8b 05 1e 84 34 08 85 c0 74 16 5b
[  101.818801][    C0] RSP: 0018:ffffc9000398f818 EFLAGS: 00000246
[  101.824849][    C0] RAX: 0000000000000006 RBX: ffff888032233040 RCX: 0000000000000006
[  101.832797][    C0] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0
[  101.840737][    C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001
[  101.848678][    C0] R10: ffffffff9084f617 R11: 0000000000000000 R12: 0000000000000002
[  101.856623][    C0] R13: ffff888032232eb0 R14: ffff888032233080 R15: ffff888032232a28
[  101.864577][    C0]  __unix_dgram_recvmsg+0x326/0xee0
[  101.869755][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  101.875447][    C0]  ? irqentry_exit+0x3b/0x90
[  101.880021][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.885192][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  101.890107][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  101.895279][    C0]  ? iovec_from_user+0xbb/0x140
[  101.900107][    C0]  unix_dgram_recvmsg+0xd0/0x110
[  101.905022][    C0]  ____sys_recvmsg+0x5f6/0x6b0
[  101.909763][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  101.915026][    C0]  ? kfree+0x252/0x4d0
[  101.919070][    C0]  ___sys_recvmsg+0x114/0x1a0
[  101.923717][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  101.928890][    C0]  ? __pfx___might_resched+0x10/0x10
[  101.934150][    C0]  do_recvmmsg+0x2fe/0x740
[  101.938537][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  101.943464][    C0]  ? lock_acquire+0x179/0x350
[  101.948128][    C0]  ? do_futex+0x122/0x350
[  101.952466][    C0]  ? __x64_sys_futex+0x1e0/0x4c0
[  101.957388][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  101.962389][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  101.967907][    C0]  ? rcu_is_watching+0x12/0xc0
[  101.972649][    C0]  do_syscall_64+0xcd/0x260
[  101.977133][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.982999][    C0] RIP: 0033:0x7f4cbcf8e969
[  101.987392][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.006982][    C0] RSP: 002b:00007f4cbdd78038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  102.015384][    C0] RAX: ffffffffffffffda RBX: 00007f4cbd1b6080 RCX: 00007f4cbcf8e969
[  102.023332][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  102.031276][    C0] RBP: 00007f4cbd010ab1 R08: 0000000000000000 R09: 0000000000000000
[  102.039226][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  102.047171][    C0] R13: 0000000000000000 R14: 00007f4cbd1b6080 R15: 00007ffcf91acdf8
[  102.055124][    C0]  </TASK>
[  102.058310][    C0] Kernel Offset: disabled
[  102.062609][    C0] Rebooting in 86400 seconds..