last executing test programs:

20.047034229s ago: executing program 2 (id=59):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x22008080, 0x1})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x8a0000, &(0x7f00000001c0)='\x01')
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r10, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x64, r10, 0x4, 0x70bd30, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040000)
write$tun(r1, &(0x7f0000001180)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @generic="df4df745d4a0"}}, 0xe)

18.141188986s ago: executing program 2 (id=62):
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0x5c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x237, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280), 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0xf0, 0x3}, 0x3}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x40}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGRAB(r8, 0x40044590, 0x0)
ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

15.091719615s ago: executing program 4 (id=68):
r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="3def18d9fbf5136ad0054ca1beff3f0c705a13d6fbe1b4655b3604a2c171569f13", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRES16, @ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x8, 0xb4, &(0x7f0000000380)=""/180, 0x40f00, 0x16, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xd, 0xfffffffc, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000480)=[{0x1, 0x4, 0xb, 0x7}], 0x10, 0x6, @void, @value}, 0x94)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$alg(r1, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}, {&(0x7f0000000600)="49ec2cbce9e617852354767c302946c928426697b4f271507cae1352321d7684b2609af4a28faf7a902855618e830b0151f21a352d4448cf4af9c2d25b15ec39746df5f5a1d7ce8926c5609faec8a19c4c3929bc74adeb7d", 0x58}], 0x3, 0x0, 0x0, 0x40c4001}, 0x800)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000280)={0x0, 0x0, "a4cd91", 0x9})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)

14.234325387s ago: executing program 0 (id=69):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
gettid()
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1e00, 0x700, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)
socket$inet_udp(0x2, 0x2, 0x0)

12.86416318s ago: executing program 1 (id=70):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pread64(r2, &(0x7f0000000080)=""/194, 0xc2, 0x81)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@textreal={0x8, &(0x7f00000001c0)="0f3566b8090001000f23d00f21f86635300000000f23f8c1ee7e66b9170b00000f3265c7072ec3f30fbc5107670f35ba4000b02aee64642e64d8c7ba4200ec", 0x3f}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
fcntl$notify(r4, 0x402, 0x5)
r5 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x3})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
brk(0x80000000007)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = syz_open_dev$usbfs(0x0, 0x20000000001ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000480)={0xa1, 0x0, 0x1200, 0x291b, 0x0, 0x0, 0x0})

11.879699366s ago: executing program 0 (id=71):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c2c57c5664e7b404075d50685eaefc5a5e0400000000"], 0x48)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20)
close(r3)

10.545496526s ago: executing program 3 (id=73):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @local}})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x6185, 0x4)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4)
connect$inet(r0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe000, 0x0, &(0x7f0000ff2000/0xe000)=nil)
syz_emit_ethernet(0x7b, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "69ea00", 0x4, 0x2f, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x1, 0x0, [], "87"}}}}}}}, 0x0)
r4 = getpid()
process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='.+binderfs/binder0\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='f\'\x00')

10.235603443s ago: executing program 4 (id=74):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c2c57c5664e7b404075d50685eaefc5a5e0400000000"], 0x48)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20)
close(r3)

10.05612114s ago: executing program 3 (id=75):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000380))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
readv(r4, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x9c0})
shutdown(r6, 0x1)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_CONTINUE(r7, 0x8010aa02, &(0x7f0000000000)={{&(0x7f0000fe5000/0x2000)=nil, 0x2000}, 0x1})
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffbfdff000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x8001, 0x0)
write$vga_arbiter(r9, &(0x7f0000000400)=@target={'target ', {'PCI:', '7', ':', '4', ':', '1b', '.', '12'}}, 0x15)

9.090842095s ago: executing program 0 (id=76):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xb)
write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef)
splice(r5, 0x0, r7, 0x0, 0x80, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000080)={@host})
close_range(r0, 0xffffffffffffffff, 0x0)

9.03243932s ago: executing program 3 (id=77):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000310a00000000000002000000b7080000000000007b8af8ff00000000b7080000010020007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184500000000000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x73, 0x7, &(0x7f00000004c0)=""/7, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x5, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x1, 0xb}, {0x1, 0x3, 0xf}, {0x4, 0x2, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x1d}, {0x0, 0x5, 0x10, 0x5}, {0x5, 0x4, 0xc, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xf, 0xc}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
dup(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0)
pipe(&(0x7f0000000240))

8.997912178s ago: executing program 1 (id=78):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

8.950453474s ago: executing program 4 (id=79):
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x46}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=""/70)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_open_pts(0xffffffffffffffff, 0x40000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
fstat(0xffffffffffffffff, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xf0, 0xfffffffd, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0)
connect$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20000408}}, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)

8.917497902s ago: executing program 2 (id=80):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
eventfd(0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x2]}, &(0x7f0000000100)=0x6)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)}, &(0x7f00000011c0)=0x10)
r3 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x2, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)

7.21675118s ago: executing program 3 (id=81):
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0)

7.214861142s ago: executing program 4 (id=82):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @local}, 0xfffffffffffffd99)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = gettid()
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='ceph\x00', 0x0)
tkill(r6, 0xb)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5775}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)

7.040004064s ago: executing program 0 (id=83):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f00000000c0), 0xfdef)
splice(r5, 0x0, r6, 0x0, 0x80, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000080)={@host})
close_range(r0, 0xffffffffffffffff, 0x0)

4.676526654s ago: executing program 3 (id=84):
r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="3def18d9fbf5136ad0054ca1beff3f0c705a13d6fbe1b4655b3604a2c171569f13", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRES16, @ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x8, 0xb4, &(0x7f0000000380)=""/180, 0x40f00, 0x16, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xd, 0xfffffffc, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000480)=[{0x1, 0x4, 0xb, 0x7}], 0x10, 0x6, @void, @value}, 0x94)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$alg(r1, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}, {&(0x7f0000000600)="49ec2cbce9e617852354767c302946c928426697b4f271507cae1352321d7684b2609af4a28faf7a902855618e830b0151f21a352d4448cf4af9c2d25b15ec39746df5f5a1d7ce8926c5609faec8a19c4c3929bc74adeb7d", 0x58}], 0x3, 0x0, 0x0, 0x40c4001}, 0x800)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000280)={0x0, 0x0, "a4cd91", 0x9})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)

4.675671408s ago: executing program 1 (id=85):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r0 = inotify_init1(0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0xa, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008020}, 0x0)

4.555295185s ago: executing program 0 (id=86):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c2c57c5664e7b404075d50685eaefc5a5e0400000000"], 0x48)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20)
close(r3)

4.553460099s ago: executing program 2 (id=87):
socket$inet_mptcp(0x2, 0x1, 0x106)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x21, r4, 0x0, 0x9)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$radio(&(0x7f0000002480), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000002640)={0x4, "fbf873bc12b7344985ed5c23577aeb40430ff3c72642920e94b8915eb4a7ecfd"})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r7, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0)

3.594994424s ago: executing program 4 (id=88):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x401, 0x488000)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f0000000300)=0x10, 0x80000)
connect$tipc(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

3.524979398s ago: executing program 2 (id=89):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
connect$unix(r2, 0x0, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
dup2(r4, r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000004000100000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x15)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x8400, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x400)
statx(r4, &(0x7f00000005c0)='./file0\x00', 0x6000, 0x4, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010002000000000002000600517c5411b514481b7290e2d0fe3cd9d42acad7e4bc739b02658cd950aded13dee0f42239", @ANYRES64=r5, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32, @ANYBLOB="100005000000000020000d0000000000"], 0x3c, 0x2)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000030601010000000000000000050000090500010007000000050001000700000c4a49af0007000000"], 0x2c}}, 0x4c040)
getsockopt(r6, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="462f99547e39b548feb4c9c7eda2cd17e8c203a08f8e7bf587ffcf180f5d51a7a99597090000009af7a6e224f2d569484c5aa4b641d312ffee31b3d301e13fb5ba35eb2101f91252e98176000000000000"], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
pread64(r0, &(0x7f0000000180)=""/81, 0x51, 0x0)

2.657012779s ago: executing program 4 (id=90):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c2c57c5664e7b404075d50685eaefc5a5e0400000000"], 0x48)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20)
close(r3)

2.313186156s ago: executing program 1 (id=91):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x8, 0xf, 0x2, 0x3, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
rt_sigsuspend(&(0x7f0000000000)={[0xa]}, 0x8)

1.011273412s ago: executing program 1 (id=92):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffffff7f0200000005003e00130000000400d1"], 0x20}, 0x1, 0x0, 0x0, 0x40086}, 0xc0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3], 0x28}}, 0x0)
r4 = syz_open_dev$cec(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x90, @mcast1, 0x7}}}, 0x30)
socket$unix(0x1, 0x0, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x24, 0x1, 0x16000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280)}, 0x40)

892.114761ms ago: executing program 2 (id=93):
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = getpgid(r1)
sched_setscheduler(r4, 0x1, &(0x7f0000000000)=0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x2e0, 0x0, 0x180, 0x378, 0x378, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@broadcast, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x36, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c)
unlink(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00')
r7 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)

89.44414ms ago: executing program 0 (id=94):
syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$getflags(r3, 0x401)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
ustat(0xfffffffeffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000017f82677000000000000000900000000030000009c020000000200000000004db69d690021000000050000000000001bd869b59363b3ea69f36369100f5419eb334869845394409076035e15fa150f573f8ef2db905cfd8b3f5efa06ed3d7a965332d54c39ec3e22154c394cb881121f6374c1fb"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}})

65.587935ms ago: executing program 1 (id=95):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70800003e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000000400000000000000ffff000018270000", @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\a'], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000002200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[0x1], &(0x7f0000001000), 0x10, 0xc00000, @void, @value}, 0x94)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="1f59cae5639cf15b04e0d625d96f0e6d5b5ac726b2c5590b57e7a61c0950f033a94c40da6183afb9321768ea8396fd428ff2860cae2d8713376468de8f0b92a502fa001fb7caa4cf48cfc89e753d76b163fd607c7907bc14d6560c08a667b105424a54bfcc3f564bffa5115ccb7923e0aac334f027399c59bdfa9fe668963cbd08be04d24f7981fa096b448f426f73637f649fb1ae81e36f3a70372c5bd2801916fdbee325", 0xa5, 0xfffffffffffffffd)
r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c", 0xb4, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6, r7}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sha512-avx2\x00'}})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab", 0xe)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="2f0000000000000004", @ANYRES32, @ANYBLOB="b28fb8c79569c23d997bc677b2872367b10bd2c3031a5fd57e720abcdfb6f3cd0a12768c61fa7f8e92b3e208680e7fa027d6ae815a919425122d9458a4659dd5cc6e50e85b61734daa9e00d30f5fa385440e8409196c3ed93fcbb97f13e54011f0617832a0264129054029"], 0x20)

0s ago: executing program 3 (id=96):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffe9)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={r4, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x983b}}, 0x1, 0x2}, 0x90)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1008, 0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601})
r5 = socket$kcm(0x2, 0x0, 0x2)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x4)
mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=rdma,port=0x00000\x00\x00\x00\x000004e22,rq=0x0000000000000001,sq=0x0000000000000001,timeowt=0x0000000000000004,\x00'])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts.
[   66.365359][   T29] audit: type=1400 audit(1733896586.113:88): avc:  denied  { mounton } for  pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   66.371505][ T5802] cgroup: Unknown subsys name 'net'
[   66.388134][   T29] audit: type=1400 audit(1733896586.113:89): avc:  denied  { mount } for  pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   66.415713][   T29] audit: type=1400 audit(1733896586.143:90): avc:  denied  { unmount } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   66.593805][ T5802] cgroup: Unknown subsys name 'cpuset'
[   66.602185][ T5802] cgroup: Unknown subsys name 'rlimit'
[   66.720008][   T29] audit: type=1400 audit(1733896586.463:91): avc:  denied  { setattr } for  pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   66.752555][   T29] audit: type=1400 audit(1733896586.463:92): avc:  denied  { create } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.780519][   T29] audit: type=1400 audit(1733896586.463:93): avc:  denied  { write } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.803069][   T29] audit: type=1400 audit(1733896586.463:94): avc:  denied  { read } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.823764][   T29] audit: type=1400 audit(1733896586.463:95): avc:  denied  { mounton } for  pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   66.824439][ T5804] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   66.849021][   T29] audit: type=1400 audit(1733896586.463:96): avc:  denied  { mount } for  pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   66.881594][   T29] audit: type=1400 audit(1733896586.503:97): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   67.823296][ T5802] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.460861][   T29] kauditd_printk_skb: 5 callbacks suppressed
[   71.460884][   T29] audit: type=1400 audit(1733896591.203:103): avc:  denied  { create } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.554513][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.564188][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.572442][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.578437][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.582556][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.588272][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.598549][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.601474][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.619274][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.626450][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.634902][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.637332][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.645382][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.650460][   T29] audit: type=1400 audit(1733896591.203:104): avc:  denied  { read write } for  pid=5813 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   71.658680][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.681940][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.687190][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.695204][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.703425][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.708905][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.716875][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.724273][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.729342][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.737021][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.743402][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.750454][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.757000][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.765656][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.771663][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.779009][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.792788][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.821974][   T29] audit: type=1400 audit(1733896591.203:105): avc:  denied  { open } for  pid=5813 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   71.849176][   T29] audit: type=1400 audit(1733896591.223:106): avc:  denied  { ioctl } for  pid=5813 comm="syz-executor" path="socket:[3999]" dev="sockfs" ino=3999 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.879068][   T29] audit: type=1400 audit(1733896591.533:107): avc:  denied  { read } for  pid=5815 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   71.903711][   T29] audit: type=1400 audit(1733896591.543:108): avc:  denied  { open } for  pid=5814 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   71.927678][   T29] audit: type=1400 audit(1733896591.553:109): avc:  denied  { mounton } for  pid=5814 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   72.200911][   T29] audit: type=1400 audit(1733896591.943:110): avc:  denied  { module_request } for  pid=5825 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   72.313427][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   72.335458][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   72.344233][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   72.429943][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   72.519624][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   72.534819][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.543278][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.550720][ T5815] bridge_slave_0: entered allmulticast mode
[   72.557964][ T5815] bridge_slave_0: entered promiscuous mode
[   72.590328][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.597586][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.606102][ T5815] bridge_slave_1: entered allmulticast mode
[   72.613204][ T5815] bridge_slave_1: entered promiscuous mode
[   72.634696][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.641966][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.649220][ T5825] bridge_slave_0: entered allmulticast mode
[   72.656134][ T5825] bridge_slave_0: entered promiscuous mode
[   72.690617][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.700486][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.707961][ T5812] bridge_slave_0: entered allmulticast mode
[   72.715757][ T5812] bridge_slave_0: entered promiscuous mode
[   72.722807][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.729928][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.738000][ T5825] bridge_slave_1: entered allmulticast mode
[   72.745276][ T5825] bridge_slave_1: entered promiscuous mode
[   72.761775][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.768958][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.779031][ T5813] bridge_slave_0: entered allmulticast mode
[   72.785931][ T5813] bridge_slave_0: entered promiscuous mode
[   72.794023][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.801259][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.808480][ T5813] bridge_slave_1: entered allmulticast mode
[   72.815508][ T5813] bridge_slave_1: entered promiscuous mode
[   72.829919][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.837403][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.844750][ T5812] bridge_slave_1: entered allmulticast mode
[   72.852254][ T5812] bridge_slave_1: entered promiscuous mode
[   72.885072][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[   72.892082][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[   72.906777][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.926770][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.957340][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.968571][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.982996][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.994436][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.012877][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.042911][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.070671][ T5825] team0: Port device team_slave_0 added
[   73.106057][ T5815] team0: Port device team_slave_0 added
[   73.115004][ T5815] team0: Port device team_slave_1 added
[   73.123066][ T5825] team0: Port device team_slave_1 added
[   73.135419][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.142675][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.151657][ T5814] bridge_slave_0: entered allmulticast mode
[   73.158329][ T5814] bridge_slave_0: entered promiscuous mode
[   73.168230][ T5813] team0: Port device team_slave_0 added
[   73.176672][ T5812] team0: Port device team_slave_0 added
[   73.196349][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.203653][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.211070][ T5814] bridge_slave_1: entered allmulticast mode
[   73.218026][ T5814] bridge_slave_1: entered promiscuous mode
[   73.238469][ T5813] team0: Port device team_slave_1 added
[   73.254787][ T5812] team0: Port device team_slave_1 added
[   73.275322][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.284319][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.311305][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.348543][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.355597][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.381846][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.394012][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.402620][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.429609][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.442529][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.449505][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.476418][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.488271][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.495346][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.521323][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.539367][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.555417][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.565326][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.591827][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.616269][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.626203][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.633255][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.659788][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.672391][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.679370][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.705531][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.773874][ T5813] hsr_slave_0: entered promiscuous mode
[   73.783367][ T5813] hsr_slave_1: entered promiscuous mode
[   73.798948][ T5825] hsr_slave_0: entered promiscuous mode
[   73.805781][ T5825] hsr_slave_1: entered promiscuous mode
[   73.812658][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.820581][ T5825] Cannot create hsr debugfs directory
[   73.829493][ T5815] hsr_slave_0: entered promiscuous mode
[   73.835827][ T5815] hsr_slave_1: entered promiscuous mode
[   73.842962][ T5824] Bluetooth: hci0: command tx timeout
[   73.842966][ T5830] Bluetooth: hci2: command tx timeout
[   73.843367][ T5830] Bluetooth: hci3: command tx timeout
[   73.849656][ T5819] Bluetooth: hci4: command tx timeout
[   73.854612][ T5830] Bluetooth: hci1: command tx timeout
[   73.871524][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.879079][ T5815] Cannot create hsr debugfs directory
[   73.896428][ T5814] team0: Port device team_slave_0 added
[   73.904862][ T5814] team0: Port device team_slave_1 added
[   73.971237][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.978216][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.005108][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.037585][ T5812] hsr_slave_0: entered promiscuous mode
[   74.046742][ T5812] hsr_slave_1: entered promiscuous mode
[   74.052932][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.060497][ T5812] Cannot create hsr debugfs directory
[   74.066931][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.074179][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.100256][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.269030][ T5814] hsr_slave_0: entered promiscuous mode
[   74.277929][ T5814] hsr_slave_1: entered promiscuous mode
[   74.285280][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.293104][ T5814] Cannot create hsr debugfs directory
[   74.400610][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.413141][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.437967][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.464455][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.532680][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.542543][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.556134][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.578985][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.660320][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.672065][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.690218][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.699829][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.779802][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.795906][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.826077][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.834318][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.847811][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.879650][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.888855][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.899397][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.918923][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.928556][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.949435][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   74.987090][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   75.005912][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.013224][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.025057][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.032185][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.067879][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.075656][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.087595][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.094752][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.171913][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.219601][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.255219][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   75.277962][   T29] audit: type=1400 audit(1733896595.023:111): avc:  denied  { sys_module } for  pid=5813 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   75.309922][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.317067][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.349994][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.396808][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.403946][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.428024][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   75.485635][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.492899][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.512382][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.519524][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.584981][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.612896][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.662483][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.675244][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.689806][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.769901][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   75.807523][ T5813] veth0_vlan: entered promiscuous mode
[   75.819324][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.826510][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.838852][ T5825] veth0_vlan: entered promiscuous mode
[   75.876505][ T5825] veth1_vlan: entered promiscuous mode
[   75.886597][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.893767][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.916083][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.924634][ T5830] Bluetooth: hci1: command tx timeout
[   75.930080][ T5830] Bluetooth: hci4: command tx timeout
[   75.936131][ T5830] Bluetooth: hci3: command tx timeout
[   75.941373][ T5819] Bluetooth: hci0: command tx timeout
[   75.942580][ T5831] Bluetooth: hci2: command tx timeout
[   75.956816][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.967781][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.984653][ T5813] veth1_vlan: entered promiscuous mode
[   76.048076][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.072724][ T5813] veth0_macvtap: entered promiscuous mode
[   76.108108][ T5813] veth1_macvtap: entered promiscuous mode
[   76.135329][ T5825] veth0_macvtap: entered promiscuous mode
[   76.184942][ T5825] veth1_macvtap: entered promiscuous mode
[   76.241690][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.253434][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.276071][ T5812] veth0_vlan: entered promiscuous mode
[   76.295364][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.307154][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.316462][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.332896][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.348106][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.360722][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.374404][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.390206][ T5812] veth1_vlan: entered promiscuous mode
[   76.397246][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.408779][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.419988][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.438053][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.460976][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.469727][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.479642][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.489427][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.553718][ T5814] veth0_vlan: entered promiscuous mode
[   76.596297][ T5814] veth1_vlan: entered promiscuous mode
[   76.640520][ T5812] veth0_macvtap: entered promiscuous mode
[   76.674215][ T5815] veth0_vlan: entered promiscuous mode
[   76.697741][ T5812] veth1_macvtap: entered promiscuous mode
[   76.712713][ T5815] veth1_vlan: entered promiscuous mode
[   76.713093][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.736247][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.765845][ T5814] veth0_macvtap: entered promiscuous mode
[   76.786738][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.799523][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.810526][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.821997][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.834846][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.848634][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.859367][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.869982][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.880524][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.893886][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.904062][ T5815] veth0_macvtap: entered promiscuous mode
[   76.921806][ T5814] veth1_macvtap: entered promiscuous mode
[   76.927757][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.942346][ T5815] veth1_macvtap: entered promiscuous mode
[   76.949445][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.950251][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.966699][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.977879][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.986796][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.036084][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.047212][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.057538][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.068101][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.078420][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.088908][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.099900][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.114913][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.123870][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.135219][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.146216][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.156699][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.168410][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.178568][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.189140][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.200194][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.216193][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.225266][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.248052][ T5814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.258946][   T29] audit: type=1400 audit(1733896597.003:112): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/root/syzkaller.wtlNDA/syz-tmp" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   77.285455][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.291105][   T29] audit: type=1400 audit(1733896597.003:113): avc:  denied  { mount } for  pid=5825 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   77.294380][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.323058][   T29] audit: type=1400 audit(1733896597.013:114): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.oAx3iy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   77.325138][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.351583][   T29] audit: type=1400 audit(1733896597.013:115): avc:  denied  { mount } for  pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   77.391410][   T29] audit: type=1400 audit(1733896597.013:116): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.oAx3iy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   77.419324][   T29] audit: type=1400 audit(1733896597.013:117): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.oAx3iy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   77.447772][   T29] audit: type=1400 audit(1733896597.033:118): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   77.468055][   T29] audit: type=1400 audit(1733896597.133:119): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   77.471035][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.508505][   T29] audit: type=1400 audit(1733896597.133:120): avc:  denied  { mount } for  pid=5813 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   77.540259][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.560225][   T29] audit: type=1400 audit(1733896597.133:121): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   77.560908][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.594806][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.607403][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.618749][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.629322][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.639195][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.649988][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.661942][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.673810][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.685313][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.696079][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.706782][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.716842][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.727554][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.737450][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.747946][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.759061][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.774265][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.793496][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.807104][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.821736][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.440337][ T5831] Bluetooth: hci0: command tx timeout
[   78.445908][ T5831] Bluetooth: hci2: command tx timeout
[   78.451586][ T5831] Bluetooth: hci3: command tx timeout
[   78.457067][ T5831] Bluetooth: hci4: command tx timeout
[   78.462559][ T5831] Bluetooth: hci1: command tx timeout
[   79.445714][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.455116][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.540041][ T5915] Bluetooth: MGMT ver 1.23
[   80.062719][ T5916] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   80.113858][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.125885][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.213460][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.311385][ T5919] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.320914][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.411207][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   80.595262][ T5831] Bluetooth: hci4: command tx timeout
[   80.606798][ T5831] Bluetooth: hci3: command tx timeout
[   80.612947][ T5831] Bluetooth: hci2: command tx timeout
[   80.613190][ T5819] Bluetooth: hci0: command tx timeout
[   80.618941][ T5830] Bluetooth: hci1: command tx timeout
[   80.656914][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.676556][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.731645][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.917172][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.941271][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.985249][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.045658][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.057435][ T5928] input: syz0 as /devices/virtual/input/input5
[   83.309283][ T5944] syz.4.5 (5944) used greatest stack depth: 21152 bytes left
[   83.336125][   T29] kauditd_printk_skb: 52 callbacks suppressed
[   83.336149][   T29] audit: type=1400 audit(1733896602.473:174): avc:  denied  { mount } for  pid=5941 comm="syz.3.11" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.629821][   T29] audit: type=1400 audit(1733896602.493:175): avc:  denied  { mount } for  pid=5941 comm="syz.3.11" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   83.817604][   T29] audit: type=1400 audit(1733896603.563:176): avc:  denied  { create } for  pid=5953 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.528595][ T5959] Zero length message leads to an empty skb
[   84.997296][   T29] audit: type=1400 audit(1733896603.563:177): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   85.021262][   T29] audit: type=1400 audit(1733896603.563:178): avc:  denied  { setopt } for  pid=5953 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.041084][   T29] audit: type=1400 audit(1733896603.833:179): avc:  denied  { write } for  pid=5939 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   85.062038][   T29] audit: type=1400 audit(1733896603.833:180): avc:  denied  { read write } for  pid=5939 comm="syz.1.2" name="vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   85.193273][   T29] audit: type=1400 audit(1733896603.833:181): avc:  denied  { open } for  pid=5939 comm="syz.1.2" path="/dev/vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   85.216841][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.281512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.326704][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.441724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.574898][   T29] audit: type=1400 audit(1733896603.983:182): avc:  denied  { read } for  pid=5953 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   85.601555][   T29] audit: type=1400 audit(1733896603.993:183): avc:  denied  { ioctl } for  pid=5939 comm="syz.1.2" path="/dev/vbi5" dev="devtmpfs" ino=981 ioctlcmd=0x565d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   85.692990][ T5969] usb usb8: usbfs: process 5969 (syz.1.16) did not claim interface 0 before use
[   85.713504][ T5972] input: syz0 as /devices/virtual/input/input6
[   85.861015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.046584][ T5978] nbd: must specify at least one socket
[   86.607032][ T5978] infiniband syz2: set active
[   86.612289][ T5978] infiniband syz2: added team_slave_1
[   86.833138][ T5978] RDS/IB: syz2: added
[   86.838492][ T5978] smc: adding ib device syz2 with port count 1
[   86.845131][ T5978] smc:    ib device syz2 port 1 has pnetid 
[   87.481037][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.490858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   87.499157][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   88.548240][  T970] cfg80211: failed to load regulatory.db
[   90.721111][   T29] kauditd_printk_skb: 11 callbacks suppressed
[   90.721157][   T29] audit: type=1400 audit(1733896609.843:195): avc:  denied  { create } for  pid=6003 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   91.010321][   T29] audit: type=1400 audit(1733896610.383:196): avc:  denied  { getopt } for  pid=6003 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   91.043920][   T29] audit: type=1400 audit(1733896610.393:197): avc:  denied  { bind } for  pid=6003 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   91.201632][  T970] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.285429][   T29] audit: type=1400 audit(1733896611.033:198): avc:  denied  { create } for  pid=6008 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   91.467301][   T29] audit: type=1400 audit(1733896611.053:199): avc:  denied  { ioctl } for  pid=6008 comm="syz.1.24" path="socket:[8488]" dev="sockfs" ino=8488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   91.495100][   T29] audit: type=1400 audit(1733896611.063:200): avc:  denied  { open } for  pid=6011 comm="syz.2.25" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   91.641352][  T970] usb 1-1: Using ep0 maxpacket: 16
[   91.824015][   T29] audit: type=1400 audit(1733896611.573:201): avc:  denied  { create } for  pid=6000 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   92.530945][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.561528][   T29] audit: type=1400 audit(1733896611.573:202): avc:  denied  { create } for  pid=6000 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   92.913398][ T6013] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22'.
[   92.922600][  T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.954941][   T29] audit: type=1400 audit(1733896612.653:203): avc:  denied  { ioctl } for  pid=6000 comm="syz.3.22" path="socket:[8076]" dev="sockfs" ino=8076 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   93.034830][  T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.080052][  T970] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[   93.110465][  T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.130995][   T29] audit: type=1400 audit(1733896612.803:204): avc:  denied  { create } for  pid=6023 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   94.335187][  T970] usb 1-1: config 0 descriptor??
[   94.344857][  T970] usb 1-1: can't set config #0, error -71
[   94.581270][  T970] usb 1-1: USB disconnect, device number 2
[   95.827885][ T6045] nbd: must specify at least one socket
[   95.839913][ T6045] rdma_rxe: rxe_newlink: failed to add team_slave_1
[   95.999337][   T29] kauditd_printk_skb: 7 callbacks suppressed
[   95.999361][   T29] audit: type=1400 audit(1733896615.143:212): avc:  denied  { read } for  pid=6038 comm="syz.2.30" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.266576][   T29] audit: type=1400 audit(1733896615.283:213): avc:  denied  { ioctl } for  pid=6038 comm="syz.2.30" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   96.880287][   T29] audit: type=1400 audit(1733896615.283:214): avc:  denied  { ioctl } for  pid=6038 comm="syz.2.30" path="socket:[8111]" dev="sockfs" ino=8111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.031326][   T29] audit: type=1400 audit(1733896616.123:215): avc:  denied  { read } for  pid=6040 comm="syz.3.31" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.188239][   T29] audit: type=1400 audit(1733896616.123:216): avc:  denied  { open } for  pid=6040 comm="syz.3.31" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.211569][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.218666][   T29] audit: type=1400 audit(1733896616.123:217): avc:  denied  { ioctl } for  pid=6040 comm="syz.3.31" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.243433][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.250792][   T29] audit: type=1400 audit(1733896616.903:218): avc:  denied  { create } for  pid=6055 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   97.320489][   T29] audit: type=1400 audit(1733896616.903:219): avc:  denied  { listen } for  pid=6055 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   97.341460][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.406293][   T29] audit: type=1400 audit(1733896617.043:220): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   97.426244][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.471141][   T29] audit: type=1400 audit(1733896617.123:221): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   97.572177][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.968767][ T5818] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[   97.978040][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.032075][ T5818] usb 4-1: config 0 descriptor??
[   98.051085][ T5818] usb 4-1: Invalid firmware size=18.
[   99.027979][ T6059] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[   99.034865][ T6059] PKCS7: Only support pkcs7_signedData type
[   99.104101][   T25] usb 4-1: USB disconnect, device number 2
[  100.185596][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'.
[  101.109912][ T6081] mmap: syz.1.40 (6081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  101.151116][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  101.151136][   T29] audit: type=1400 audit(1733896620.903:235): avc:  denied  { write } for  pid=6096 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  101.176524][    C0] vkms_vblank_simulate: vblank timer overrun
[  101.646888][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.672679][   T29] audit: type=1400 audit(1733896621.393:236): avc:  denied  { create } for  pid=6096 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.692598][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.240310][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'.
[  102.241060][   T29] audit: type=1400 audit(1733896621.983:237): avc:  denied  { write } for  pid=6096 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  102.300709][   T29] audit: type=1400 audit(1733896621.983:238): avc:  denied  { nlmsg_write } for  pid=6096 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  103.145906][   T29] audit: type=1400 audit(1733896622.333:239): avc:  denied  { create } for  pid=6112 comm="syz.2.45" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.169373][ T6081] libceph: resolve '0.0' (ret=-3): failed
[  103.202801][ T6117] orangefs_mount: mount request failed with -4
[  103.751121][   T29] audit: type=1400 audit(1733896622.343:240): avc:  denied  { mounton } for  pid=6112 comm="syz.2.45" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.852507][   T29] audit: type=1400 audit(1733896622.403:241): avc:  denied  { write } for  pid=6112 comm="syz.2.45" name="file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.025542][   T29] audit: type=1400 audit(1733896622.403:242): avc:  denied  { open } for  pid=6112 comm="syz.2.45" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.672814][   T29] audit: type=1400 audit(1733896623.003:243): avc:  denied  { unlink } for  pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.695828][   T29] audit: type=1400 audit(1733896623.523:244): avc:  denied  { getopt } for  pid=6123 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.892505][ T6133] netlink: 76 bytes leftover after parsing attributes in process `syz.2.48'.
[  104.902307][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[  105.787796][ T6146] syz.0.51[6146] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.788321][ T6146] syz.0.51[6146] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.800552][ T6146] syz.0.51[6146] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.298601][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  106.298622][   T29] audit: type=1400 audit(1733896625.573:251): avc:  denied  { write } for  pid=6142 comm="syz.0.51" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  106.340643][   T29] audit: type=1400 audit(1733896625.573:252): avc:  denied  { open } for  pid=6142 comm="syz.0.51" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  106.876236][   T29] audit: type=1400 audit(1733896626.623:253): avc:  denied  { create } for  pid=6156 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.167336][   T29] audit: type=1400 audit(1733896626.833:254): avc:  denied  { bind } for  pid=6156 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  107.736706][ T6167] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.54'.
[  107.871153][   T29] audit: type=1400 audit(1733896627.513:255): avc:  denied  { ioctl } for  pid=6162 comm="syz.4.54" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  107.896339][    C0] vkms_vblank_simulate: vblank timer overrun
[  108.455054][ T6158] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  108.970817][ T6171] bridge0: port 3(erspan0) entered blocking state
[  108.978025][ T6171] bridge0: port 3(erspan0) entered disabled state
[  108.990184][ T6171] erspan0: entered allmulticast mode
[  109.010773][ T6171] erspan0: entered promiscuous mode
[  109.023860][ T6171] bridge0: port 3(erspan0) entered blocking state
[  109.030951][ T6171] bridge0: port 3(erspan0) entered forwarding state
[  109.053699][   T29] audit: type=1400 audit(1733896628.783:256): avc:  denied  { ioctl } for  pid=6175 comm="syz.0.57" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8759 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  109.201526][ T5830] Bluetooth: hci0: command 0x0401 tx timeout
[  109.587608][   T29] audit: type=1400 audit(1733896629.193:257): avc:  denied  { read write } for  pid=6178 comm="syz.3.56" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.923262][   T29] audit: type=1400 audit(1733896629.203:258): avc:  denied  { open } for  pid=6178 comm="syz.3.56" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  109.972568][   T29] audit: type=1400 audit(1733896629.253:259): avc:  denied  { append } for  pid=6178 comm="syz.3.56" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.561232][   T29] audit: type=1400 audit(1733896630.043:260): avc:  denied  { create } for  pid=6186 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  111.212452][ T6196] syz.3.61[6196] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.212945][ T6196] syz.3.61[6196] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.224978][ T6196] syz.3.61[6196] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.291541][ T6207] syz.0.63[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.291664][ T6207] syz.0.63[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.291774][ T6207] syz.0.63[6207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  113.727315][ T6210] serio: Serial port ptm0
[  113.806141][ T6203] No control pipe specified
[  113.925010][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  113.925031][   T29] audit: type=1400 audit(1733896633.673:262): avc:  denied  { write } for  pid=6200 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  114.140643][ T6215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.885114][   T29] audit: type=1400 audit(1733896633.983:263): avc:  denied  { read } for  pid=6212 comm="syz.0.65" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  115.071104][   T29] audit: type=1400 audit(1733896633.983:264): avc:  denied  { open } for  pid=6212 comm="syz.0.65" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  115.119643][   T29] audit: type=1400 audit(1733896633.993:265): avc:  denied  { ioctl } for  pid=6212 comm="syz.0.65" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  115.236126][   T29] audit: type=1400 audit(1733896634.613:266): avc:  denied  { ioctl } for  pid=6200 comm="syz.2.62" path="socket:[8817]" dev="sockfs" ino=8817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  115.261166][   T29] audit: type=1400 audit(1733896634.623:267): avc:  denied  { bind } for  pid=6200 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  115.280397][   T29] audit: type=1400 audit(1733896634.623:268): avc:  denied  { connect } for  pid=6200 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  115.300015][   T29] audit: type=1400 audit(1733896634.623:269): avc:  denied  { write } for  pid=6200 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  116.132317][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805b99a400: rx timeout, send abort
[  116.144396][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805b99a400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session.
[  118.214565][ T6246] syz.3.72[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.215073][ T6246] syz.3.72[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.227100][ T6246] syz.3.72[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.722871][ T6236] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  118.836292][   T29] audit: type=1400 audit(1733896638.583:270): avc:  denied  { setcurrent } for  pid=6248 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  118.921066][   T29] audit: type=1401 audit(1733896638.603:271): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  120.048759][ T5830] Bluetooth: hci0: command 0x0401 tx timeout
[  120.056597][   T29] audit: type=1400 audit(1733896639.243:272): avc:  denied  { shutdown } for  pid=6253 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  120.677706][ T6271] syz.0.76[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.677814][ T6271] syz.0.76[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.689446][ T6271] syz.0.76[6271] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.452880][   T29] audit: type=1400 audit(1733896641.203:273): avc:  denied  { setopt } for  pid=6262 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  121.468744][ T5869] IPVS: starting estimator thread 0...
[  122.151013][ T6275] IPVS: using max 25 ests per chain, 60000 per kthread
[  122.949993][   T29] audit: type=1400 audit(1733896642.693:274): avc:  denied  { read } for  pid=6278 comm="syz.3.81" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  123.934413][   T29] audit: type=1400 audit(1733896642.693:275): avc:  denied  { open } for  pid=6278 comm="syz.3.81" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  124.178477][ T6289] ceph: No mds server is up or the cluster is laggy
[  124.212812][ T6294] syz.0.83[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.212921][ T6294] syz.0.83[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.224261][ T6294] syz.0.83[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.252143][   T46] libceph: connect (1)[c::]:6789 error -101
[  124.421733][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  124.715506][   T46] libceph: connect (1)[c::]:6789 error -101
[  124.747725][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  125.185667][ T6309] Unsupported ieee802154 address type: 0
[  125.502121][   T29] audit: type=1400 audit(1733896644.933:276): avc:  denied  { create } for  pid=6299 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  125.523170][   T29] audit: type=1400 audit(1733896644.933:277): avc:  denied  { bind } for  pid=6299 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  125.544754][   T29] audit: type=1400 audit(1733896644.953:278): avc:  denied  { unlink } for  pid=6299 comm="syz.2.87" name="#1" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  127.410440][ T6326] befs: (nbd2): No write support. Marking filesystem read-only
[  127.422629][ T6326] syz.2.89: attempt to access beyond end of device
[  127.422629][ T6326] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  128.260532][ T6302] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  128.508589][ T6336] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  128.520982][ T6336] Cannot find add_set index 0 as target
[  129.113498][ T5830] Bluetooth: hci0: command 0x0401 tx timeout
[  129.687663][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[  234.870753][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  234.870806][    C0] rcu: 	1-...!: (1 GPs behind) idle=f08c/1/0x4000000000000000 softirq=14477/14486 fqs=0
[  234.871617][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6345/3:b..l
[  234.871683][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=9641, q=455 ncpus=2)
[  234.871711][    C0] Sending NMI from CPU 0 to CPUs 1:
[  234.871772][    C1] NMI backtrace for cpu 1
[  234.871799][    C1] CPU: 1 UID: 0 PID: 6339 Comm: syz.0.94 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  234.871822][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  234.871834][    C1] RIP: 0010:lock_release+0x204/0x6f0
[  234.871883][    C1] Code: 00 00 4d 8d b7 d8 0a 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 70 04 00 00 <45> 8b af d8 0a 00 00 45 85 ed 0f 84 01 03 00 00 48 8d 4c 24 50 44
[  234.871900][    C1] RSP: 0018:ffffc90000a18cb8 EFLAGS: 00000046
[  234.871921][    C1] RAX: 0000000000000000 RBX: 1ffff92000143199 RCX: 0000000000000001
[  234.871934][    C1] RDX: 1ffff1100f5925e3 RSI: ffffffff8b6cdb20 RDI: ffffffff8bd1d280
[  234.871947][    C1] RBP: 0000000000000007 R08: 0000000000000000 R09: fffffbfff20be2ba
[  234.871959][    C1] R10: ffffffff905f15d7 R11: 0000000000000003 R12: ffffffff8e1bb500
[  234.871977][    C1] R13: ffff88805bfb9800 R14: ffff88807ac92f18 R15: ffff88807ac92440
[  234.871993][    C1] FS:  00007fcbe0ede6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  234.872013][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.872026][    C1] CR2: 0000001b2f10eff8 CR3: 000000001291a000 CR4: 00000000003526f0
[  234.872043][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.872055][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  234.872067][    C1] Call Trace:
[  234.872074][    C1]  <NMI>
[  234.872084][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[  234.872124][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  234.872145][    C1]  ? nmi_handle+0x1ac/0x5d0
[  234.872168][    C1]  ? lock_release+0x204/0x6f0
[  234.872187][    C1]  ? default_do_nmi+0x6a/0x160
[  234.872217][    C1]  ? exc_nmi+0x170/0x1e0
[  234.872242][    C1]  ? end_repeat_nmi+0xf/0x53
[  234.872272][    C1]  ? lock_release+0x204/0x6f0
[  234.872291][    C1]  ? lock_release+0x204/0x6f0
[  234.872311][    C1]  ? lock_release+0x204/0x6f0
[  234.872330][    C1]  </NMI>
[  234.872336][    C1]  <IRQ>
[  234.872342][    C1]  ? advance_sched+0x6d2/0xc60
[  234.872364][    C1]  ? __pfx_lock_release+0x10/0x10
[  234.872383][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  234.872411][    C1]  ? lock_acquire+0x2f/0xb0
[  234.872430][    C1]  ? advance_sched+0x679/0xc60
[  234.872448][    C1]  advance_sched+0x6d7/0xc60
[  234.872471][    C1]  ? __pfx_advance_sched+0x10/0x10
[  234.872487][    C1]  __hrtimer_run_queues+0x20a/0xae0
[  234.872519][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  234.872544][    C1]  ? read_tsc+0x9/0x20
[  234.872573][    C1]  hrtimer_interrupt+0x392/0x8e0
[  234.872599][    C1]  ? irq_work_single+0x13a/0x260
[  234.872626][    C1]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  234.872651][    C1]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  234.872673][    C1]  </IRQ>
[  234.872678][    C1]  <TASK>
[  234.872685][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.872709][    C1] RIP: 0010:console_flush_all+0x9a4/0xc60
[  234.872740][    C1] Code: 00 e8 d0 15 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e 66 20 00 48 85 db 0f 85 55 01 00 00 e8 10 64 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 65 1e 83
[  234.872757][    C1] RSP: 0018:ffffc9000bfbef88 EFLAGS: 00000287
[  234.872772][    C1] RAX: ffffffff8ee91af8 RBX: 0000000000000000 RCX: ffffc9000c379000
[  234.872784][    C1] RDX: 0000000000080000 RSI: ffffffff81799f70 RDI: 0000000000000007
[  234.872796][    C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  234.872807][    C1] R10: 0000000000000000 R11: 00000000000000c5 R12: ffffffff8ee91af8
[  234.872819][    C1] R13: ffffffff8ee91aa0 R14: ffffc9000bfbf018 R15: dffffc0000000000
[  234.872835][    C1]  ? console_flush_all+0x9a0/0xc60
[  234.872862][    C1]  ? console_flush_all+0x9a0/0xc60
[  234.872889][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  234.872917][    C1]  ? printk_percpu_data_ready+0x9/0x20
[  234.872940][    C1]  ? nbcon_get_cpu_emergency_nesting+0x3b/0x50
[  234.872976][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  234.873002][    C1]  console_unlock+0xd9/0x210
[  234.873027][    C1]  ? __pfx_console_unlock+0x10/0x10
[  234.873051][    C1]  ? lock_acquire+0x2f/0xb0
[  234.873071][    C1]  ? vprintk+0x7f/0xa0
[  234.873096][    C1]  ? __down_trylock_console_sem+0xb0/0x140
[  234.873120][    C1]  vprintk_emit+0x424/0x6f0
[  234.873144][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  234.873170][    C1]  ? __pfx_lock_release+0x10/0x10
[  234.873189][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  234.873217][    C1]  vprintk+0x7f/0xa0
[  234.873243][    C1]  _printk+0xc8/0x100
[  234.873261][    C1]  ? __pfx__printk+0x10/0x10
[  234.873282][    C1]  ? ___ratelimit+0x24c/0x570
[  234.873302][    C1]  ? __pfx____ratelimit+0x10/0x10
[  234.873324][    C1]  __nla_validate_parse+0x753/0x2880
[  234.873352][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  234.873381][    C1]  ? rtnl_link_ops_get+0x17b/0x2c0
[  234.873408][    C1]  ? __pfx_lock_release+0x10/0x10
[  234.873428][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  234.873457][    C1]  __nla_parse+0x40/0x60
[  234.873477][    C1]  rtnl_newlink+0xf18/0x1ce0
[  234.873503][    C1]  ? hlock_class+0x4e/0x130
[  234.873531][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  234.873558][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  234.873578][    C1]  ? cred_has_capability.isra.0+0x192/0x2f0
[  234.873604][    C1]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  234.873629][    C1]  ? find_held_lock+0x2d/0x110
[  234.873655][    C1]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  234.873680][    C1]  ? __pfx_lock_release+0x10/0x10
[  234.873700][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  234.873729][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  234.873754][    C1]  rtnetlink_rcv_msg+0x95b/0xea0
[  234.873784][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.873816][    C1]  netlink_rcv_skb+0x16b/0x440
[  234.873841][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.873868][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.873898][    C1]  ? netlink_deliver_tap+0x1ae/0xd30
[  234.873922][    C1]  netlink_unicast+0x53c/0x7f0
[  234.873947][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  234.873978][    C1]  netlink_sendmsg+0x8b8/0xd70
[  234.874004][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.874032][    C1]  ____sys_sendmsg+0xaaf/0xc90
[  234.874056][    C1]  ? copy_msghdr_from_user+0x10b/0x160
[  234.874084][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.874110][    C1]  ___sys_sendmsg+0x135/0x1e0
[  234.874138][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.874173][    C1]  ? __pfx_lock_release+0x10/0x10
[  234.874193][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  234.874223][    C1]  ? __fget_files+0x206/0x3a0
[  234.874249][    C1]  __sys_sendmsg+0x16e/0x220
[  234.874277][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  234.874304][    C1]  ? __x64_sys_futex+0x1e1/0x4c0
[  234.874330][    C1]  do_syscall_64+0xcd/0x250
[  234.874353][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.874377][    C1] RIP: 0033:0x7fcbe017ff19
[  234.874394][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.874411][    C1] RSP: 002b:00007fcbe0ede058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.874428][    C1] RAX: ffffffffffffffda RBX: 00007fcbe0345fa0 RCX: 00007fcbe017ff19
[  234.874440][    C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007
[  234.874452][    C1] RBP: 00007fcbe01f3cc8 R08: 0000000000000000 R09: 0000000000000000
[  234.874464][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.874475][    C1] R13: 0000000000000000 R14: 00007fcbe0345fa0 R15: 00007ffcbfe0a6f8
[  234.874492][    C1]  </TASK>
[  234.874752][    C0] task:syz.1.95        state:R  running task     stack:26080 pid:6345  tgid:6340  ppid:5815   flags:0x00004002
[  234.874831][    C0] Call Trace:
[  234.874839][    C0]  <TASK>
[  234.874852][    C0]  __schedule+0xe58/0x5ad0
[  234.874884][    C0]  ? lock_acquire.part.0+0x11b/0x380
[  234.874916][    C0]  ? __pfx___schedule+0x10/0x10
[  234.874953][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  234.874980][    C0]  preempt_schedule_common+0x44/0xc0
[  234.875006][    C0]  preempt_schedule_thunk+0x1a/0x30
[  234.875036][    C0]  _raw_spin_unlock+0x3e/0x50
[  234.875059][    C0]  filemap_map_pages+0xe4e/0x16b0
[  234.875089][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  234.875126][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  234.875155][    C0]  ? do_pte_missing+0xce7/0x3e00
[  234.875183][    C0]  ? lock_acquire+0x2f/0xb0
[  234.875206][    C0]  ? do_pte_missing+0xce7/0x3e00
[  234.875234][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  234.875257][    C0]  do_pte_missing+0xda6/0x3e00
[  234.875295][    C0]  __handle_mm_fault+0x103c/0x2a40
[  234.875327][    C0]  ? find_held_lock+0x2d/0x110
[  234.875359][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  234.875386][    C0]  ? follow_page_pte+0x3c3/0x1b20
[  234.875412][    C0]  ? __pfx_lock_release+0x10/0x10
[  234.875448][    C0]  ? follow_page_pte+0x3f7/0x1b20
[  234.875480][    C0]  handle_mm_fault+0x3fa/0xaa0
[  234.875512][    C0]  __get_user_pages+0x8d9/0x3b50
[  234.875547][    C0]  ? __pfx_mt_find+0x10/0x10
[  234.875574][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  234.875601][    C0]  ? __pfx___get_user_pages+0x10/0x10
[  234.875636][    C0]  ? __mm_populate+0x21d/0x380
[  234.875668][    C0]  populate_vma_page_range+0x27f/0x3a0
[  234.875697][    C0]  ? __pfx_populate_vma_page_range+0x10/0x10
[  234.875727][    C0]  ? __pfx_find_vma_intersection+0x10/0x10
[  234.875764][    C0]  ? vm_mmap_pgoff+0x25b/0x360
[  234.875796][    C0]  __mm_populate+0x1d6/0x380
[  234.875824][    C0]  ? __pfx___mm_populate+0x10/0x10
[  234.875852][    C0]  ? up_write+0x1b2/0x520
[  234.875883][    C0]  vm_mmap_pgoff+0x293/0x360
[  234.875915][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  234.875946][    C0]  ? __x64_sys_futex+0x1e1/0x4c0
[  234.875966][    C0]  ? __x64_sys_futex+0x1ea/0x4c0
[  234.875993][    C0]  ksys_mmap_pgoff+0x7d/0x5c0
[  234.876016][    C0]  ? rcu_is_watching+0x12/0xc0
[  234.876050][    C0]  __x64_sys_mmap+0x125/0x190
[  234.876081][    C0]  do_syscall_64+0xcd/0x250
[  234.876110][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.876137][    C0] RIP: 0033:0x7f2bf397ff19
[  234.876154][    C0] RSP: 002b:00007f2bf4802058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  234.876180][    C0] RAX: ffffffffffffffda RBX: 00007f2bf3b46080 RCX: 00007f2bf397ff19
[  234.876199][    C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
[  234.876215][    C0] RBP: 00007f2bf39f3cc8 R08: ffffffffffffffff R09: 0000000000000000
[  234.876230][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  234.876245][    C0] R13: 0000000000000000 R14: 00007f2bf3b46080 R15: 00007ffe62aed138
[  234.876274][    C0]  </TASK>
[  234.876284][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g9641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  234.876311][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  234.876321][    C0] rcu: RCU grace-period kthread stack dump:
[  234.876329][    C0] task:rcu_preempt     state:R  running task     stack:28336 pid:17    tgid:17    ppid:2      flags:0x00004000
[  234.876421][    C0] Call Trace:
[  234.876429][    C0]  <TASK>
[  234.876441][    C0]  __schedule+0xe58/0x5ad0
[  234.876464][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  234.876501][    C0]  ? __pfx___schedule+0x10/0x10
[  234.876526][    C0]  ? schedule+0x298/0x350
[  234.876548][    C0]  ? __pfx_lock_release+0x10/0x10
[  234.876577][    C0]  ? lock_acquire+0x2f/0xb0
[  234.876600][    C0]  ? schedule+0x1fd/0x350
[  234.876626][    C0]  schedule+0xe7/0x350
[  234.876650][    C0]  schedule_timeout+0x124/0x280
[  234.876683][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  234.876722][    C0]  ? __pfx_process_timeout+0x10/0x10
[  234.876758][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  234.876783][    C0]  ? prepare_to_swait_event+0xf3/0x470
[  234.876814][    C0]  rcu_gp_fqs_loop+0x1eb/0xb00
[  234.876844][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  234.876869][    C0]  ? rcu_gp_init+0xc82/0x1630
[  234.876900][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  234.876930][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  234.876957][    C0]  rcu_gp_kthread+0x271/0x380
[  234.876984][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  234.877013][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  234.877040][    C0]  ? __kthread_parkme+0x148/0x220
[  234.877075][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  234.877102][    C0]  kthread+0x2c1/0x3a0
[  234.877130][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.877153][    C0]  ? __pfx_kthread+0x10/0x10
[  234.877183][    C0]  ret_from_fork+0x45/0x80
[  234.877205][    C0]  ? __pfx_kthread+0x10/0x10
[  234.877235][    C0]  ret_from_fork_asm+0x1a/0x30
[  234.877282][    C0]  </TASK>
[  234.877290][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  234.877299][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  234.877325][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  234.877341][    C0] Workqueue: events_unbound toggle_allocation_gate
[  234.877370][    C0] RIP: 0010:smp_call_function_many_cond+0x462/0x1300
[  234.877403][    C0] Code: 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0d 0c 00 f3 90 41 0f b6 04 24 40 38 c5 7c 08 <84> c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 89 c5 89 c6 e8
[  234.877424][    C0] RSP: 0018:ffffc90000ab7998 EFLAGS: 00000206
[  234.877442][    C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc
[  234.877457][    C0] RDX: ffff88801da92440 RSI: ffffffff818df5d6 RDI: 0000000000000005
[  234.877473][    C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  234.877487][    C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949
[  234.877502][    C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40
[  234.877517][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  234.877539][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.877555][    C0] CR2: 000000110c262909 CR3: 000000000df7e000 CR4: 00000000003526f0
[  234.877570][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.877584][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  234.877598][    C0] Call Trace:
[  234.877605][    C0]  <IRQ>
[  234.877614][    C0]  ? rcu_check_gp_kthread_starvation+0x31b/0x450
[  234.877646][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  234.877678][    C0]  ? rcu_sched_clock_irq+0x247a/0x3310
[  234.877724][    C0]  ? timekeeping_advance+0x72e/0xa90
[  234.877747][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  234.877780][    C0]  ? __asan_memcpy+0x3c/0x60
[  234.877812][    C0]  ? rcu_is_watching+0x12/0xc0
[  234.877847][    C0]  ? update_process_times+0x178/0x2d0
[  234.877876][    C0]  ? __pfx_update_process_times+0x10/0x10
[  234.877903][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  234.877939][    C0]  ? update_wall_time+0x1c/0x40
[  234.877965][    C0]  ? tick_nohz_handler+0x376/0x530
[  234.878000][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  234.878034][    C0]  ? __hrtimer_run_queues+0x5fb/0xae0
[  234.878072][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  234.878101][    C0]  ? read_tsc+0x9/0x20
[  234.878138][    C0]  ? hrtimer_interrupt+0x392/0x8e0
[  234.878180][    C0]  ? __sysvec_apic_timer_interrupt+0x10f/0x400
[  234.878209][    C0]  ? sysvec_apic_timer_interrupt+0x9f/0xc0
[  234.878233][    C0]  </IRQ>
[  234.878241][    C0]  <TASK>
[  234.878250][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  234.878286][    C0]  ? smp_call_function_many_cond+0x47c/0x1300
[  234.878316][    C0]  ? smp_call_function_many_cond+0x456/0x1300
[  234.878347][    C0]  ? smp_call_function_many_cond+0x462/0x1300
[  234.878379][    C0]  ? smp_call_function_many_cond+0x456/0x1300
[  234.878411][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  234.878446][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  234.878474][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  234.878506][    C0]  text_poke_bp_batch+0x22b/0x760
[  234.878542][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  234.878571][    C0]  ? __jump_label_patch+0x1db/0x400
[  234.878607][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  234.878647][    C0]  text_poke_finish+0x30/0x40
[  234.878676][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  234.878709][    C0]  jump_label_update+0x1d7/0x400
[  234.878749][    C0]  static_key_enable_cpuslocked+0x1b7/0x270
[  234.878783][    C0]  static_key_enable+0x1a/0x20
[  234.878814][    C0]  toggle_allocation_gate+0xfc/0x260
[  234.878840][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  234.878866][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[  234.878899][    C0]  ? process_one_work+0x921/0x1ba0
[  234.878925][    C0]  ? lock_acquire+0x2f/0xb0
[  234.878948][    C0]  ? process_one_work+0x921/0x1ba0
[  234.878976][    C0]  process_one_work+0x9c5/0x1ba0
[  234.879009][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  234.879041][    C0]  ? __pfx_process_one_work+0x10/0x10
[  234.879064][    C0]  ? rcu_is_watching+0x12/0xc0
[  234.879101][    C0]  ? assign_work+0x1a0/0x250
[  234.879127][    C0]  worker_thread+0x6c8/0xf00
[  234.879159][    C0]  ? __kthread_parkme+0x148/0x220
[  234.879191][    C0]  ? __pfx_worker_thread+0x10/0x10
[  234.879215][    C0]  kthread+0x2c1/0x3a0
[  234.879243][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.879265][    C0]  ? __pfx_kthread+0x10/0x10
[  234.879295][    C0]  ret_from_fork+0x45/0x80
[  234.879316][    C0]  ? __pfx_kthread+0x10/0x10
[  234.879346][    C0]  ret_from_fork_asm+0x1a/0x30
[  234.879389][    C0]  </TASK>
[  377.840255][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [kworker/u8:2:35]
[  377.840306][    C0] Modules linked in:
[  377.840329][    C0] irq event stamp: 1471816
[  377.840340][    C0] hardirqs last  enabled at (1471815): [<ffffffff8b28e24b>] irqentry_exit+0x3b/0x90
[  377.840386][    C0] hardirqs last disabled at (1471816): [<ffffffff8b28c9ce>] sysvec_apic_timer_interrupt+0xe/0xc0
[  377.840415][    C0] softirqs last  enabled at (1471814): [<ffffffff815c517b>] handle_softirqs+0x5bb/0x8f0
[  377.840458][    C0] softirqs last disabled at (1471789): [<ffffffff815c5649>] __irq_exit_rcu+0x109/0x170
[  377.840496][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  377.840524][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  377.840546][    C0] Workqueue: events_unbound toggle_allocation_gate
[  377.840579][    C0] RIP: 0010:write_comp_data+0x11/0x90
[  377.840610][    C0] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 ef d4 69 7e <65> 8b 05 f0 d4 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00
[  377.840632][    C0] RSP: 0018:ffffc90000ab7990 EFLAGS: 00000202
[  377.840652][    C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc
[  377.840668][    C0] RDX: ffff88801da92440 RSI: 0000000000000000 RDI: 0000000000000005
[  377.840683][    C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  377.840697][    C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949
[  377.840711][    C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40
[  377.840727][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  377.840749][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.840765][    C0] CR2: 000000110c262909 CR3: 000000000df7e000 CR4: 00000000003526f0
[  377.840780][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  377.840799][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  377.840814][    C0] Call Trace:
[  377.840822][    C0]  <IRQ>
[  377.840834][    C0]  ? watchdog_timer_fn+0x570/0x7d0
[  377.840866][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  377.840894][    C0]  ? __hrtimer_run_queues+0x5fb/0xae0
[  377.840935][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  377.840964][    C0]  ? read_tsc+0x9/0x20
[  377.841005][    C0]  ? hrtimer_interrupt+0x392/0x8e0
[  377.841048][    C0]  ? __sysvec_apic_timer_interrupt+0x10f/0x400
[  377.841078][    C0]  ? sysvec_apic_timer_interrupt+0x9f/0xc0
[  377.841103][    C0]  </IRQ>
[  377.841110][    C0]  <TASK>
[  377.841119][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  377.841157][    C0]  ? smp_call_function_many_cond+0x47c/0x1300
[  377.841192][    C0]  ? write_comp_data+0x11/0x90
[  377.841218][    C0]  smp_call_function_many_cond+0x47c/0x1300
[  377.841251][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  377.841285][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  377.841314][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  377.841346][    C0]  text_poke_bp_batch+0x22b/0x760
[  377.841382][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  377.841411][    C0]  ? __jump_label_patch+0x1db/0x400
[  377.841448][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  377.841494][    C0]  text_poke_finish+0x30/0x40
[  377.841527][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  377.841560][    C0]  jump_label_update+0x1d7/0x400
[  377.841598][    C0]  static_key_enable_cpuslocked+0x1b7/0x270
[  377.841631][    C0]  static_key_enable+0x1a/0x20
[  377.841666][    C0]  toggle_allocation_gate+0xfc/0x260
[  377.841693][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  377.841718][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[  377.841753][    C0]  ? process_one_work+0x921/0x1ba0
[  377.841780][    C0]  ? lock_acquire+0x2f/0xb0
[  377.841803][    C0]  ? process_one_work+0x921/0x1ba0
[  377.841832][    C0]  process_one_work+0x9c5/0x1ba0
[  377.841866][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  377.841898][    C0]  ? __pfx_process_one_work+0x10/0x10
[  377.841921][    C0]  ? rcu_is_watching+0x12/0xc0
[  377.841959][    C0]  ? assign_work+0x1a0/0x250
[  377.841985][    C0]  worker_thread+0x6c8/0xf00
[  377.842018][    C0]  ? __kthread_parkme+0x148/0x220
[  377.842051][    C0]  ? __pfx_worker_thread+0x10/0x10
[  377.842075][    C0]  kthread+0x2c1/0x3a0
[  377.842103][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.842126][    C0]  ? __pfx_kthread+0x10/0x10
[  377.842157][    C0]  ret_from_fork+0x45/0x80
[  377.842178][    C0]  ? __pfx_kthread+0x10/0x10
[  377.842208][    C0]  ret_from_fork_asm+0x1a/0x30
[  377.842254][    C0]  </TASK>
[  377.842264][    C0] Sending NMI from CPU 0 to CPUs 1:
[  377.842293][    C1] NMI backtrace for cpu 1
[  377.842302][    C1] CPU: 1 UID: 0 PID: 6339 Comm: syz.0.94 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  377.842323][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  377.842334][    C1] RIP: 0010:__lock_acquire+0x5d/0x3c40
[  377.842356][    C1] Code: 41 48 c7 84 24 98 00 00 00 54 6f 94 8d 48 c7 84 24 a0 00 00 00 20 68 76 81 48 89 44 24 10 48 8d 84 24 90 00 00 00 48 c1 e8 03 <48> 89 44 24 18 48 89 c6 48 b8 00 00 00 00 00 fc ff df 48 8d 14 06
[  377.842373][    C1] RSP: 0018:ffffc90000a18b48 EFLAGS: 00000806
[  377.842387][    C1] RAX: 1ffff9200014317b RBX: 0000000000000001 RCX: 0000000000000002
[  377.842399][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1bb500
[  377.842411][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  377.842422][    C1] R10: ffffffff905f15d7 R11: 0000000000000003 R12: ffffffff8e1bb500
[  377.842434][    C1] R13: ffffffff8e1bb500 R14: 0000000000000000 R15: 0000000000000000
[  377.842446][    C1] FS:  00007fcbe0ede6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  377.842465][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.842478][    C1] CR2: 0000001b2f10eff8 CR3: 000000001291a000 CR4: 00000000003526f0
[  377.842490][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  377.842501][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  377.842512][    C1] Call Trace:
[  377.842519][    C1]  <NMI>
[  377.842526][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[  377.842558][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  377.842577][    C1]  ? nmi_handle+0x1ac/0x5d0
[  377.842602][    C1]  ? __lock_acquire+0x5d/0x3c40
[  377.842622][    C1]  ? default_do_nmi+0x6a/0x160
[  377.842648][    C1]  ? exc_nmi+0x170/0x1e0
[  377.842674][    C1]  ? end_repeat_nmi+0xf/0x53
[  377.842705][    C1]  ? __lock_acquire+0x5d/0x3c40
[  377.842725][    C1]  ? __lock_acquire+0x5d/0x3c40
[  377.842745][    C1]  ? __lock_acquire+0x5d/0x3c40
[  377.842768][    C1]  </NMI>
[  377.842773][    C1]  <IRQ>
[  377.842783][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  377.842804][    C1]  ? lock_acquire.part.0+0x11b/0x380
[  377.842826][    C1]  lock_acquire.part.0+0x11b/0x380
[  377.842846][    C1]  ? advance_sched+0x679/0xc60
[  377.842869][    C1]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  377.842890][    C1]  ? rcu_is_watching+0x12/0xc0
[  377.842915][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  377.842941][    C1]  ? advance_sched+0x679/0xc60
[  377.842958][    C1]  ? lock_acquire+0x2f/0xb0
[  377.842976][    C1]  ? advance_sched+0x679/0xc60
[  377.842994][    C1]  advance_sched+0x67f/0xc60
[  377.843011][    C1]  ? advance_sched+0x679/0xc60
[  377.843032][    C1]  ? __pfx_advance_sched+0x10/0x10
[  377.843049][    C1]  __hrtimer_run_queues+0x20a/0xae0
[  377.843077][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  377.843102][    C1]  ? read_tsc+0x9/0x20
[  377.843128][    C1]  hrtimer_interrupt+0x392/0x8e0
[  377.843155][    C1]  ? irq_work_single+0x13a/0x260
[  377.843181][    C1]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  377.843204][    C1]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  377.843225][    C1]  </IRQ>
[  377.843231][    C1]  <TASK>
[  377.843237][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  377.843262][    C1] RIP: 0010:console_flush_all+0x9a4/0xc60
[  377.843290][    C1] Code: 00 e8 d0 15 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 8e 66 20 00 48 85 db 0f 85 55 01 00 00 e8 10 64 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 65 1e 83
[  377.843307][    C1] RSP: 0018:ffffc9000bfbef88 EFLAGS: 00000287
[  377.843321][    C1] RAX: ffffffff8ee91af8 RBX: 0000000000000000 RCX: ffffc9000c379000
[  377.843334][    C1] RDX: 0000000000080000 RSI: ffffffff81799f70 RDI: 0000000000000007
[  377.843346][    C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  377.843357][    C1] R10: 0000000000000000 R11: 00000000000000c5 R12: ffffffff8ee91af8
[  377.843369][    C1] R13: ffffffff8ee91aa0 R14: ffffc9000bfbf018 R15: dffffc0000000000
[  377.843385][    C1]  ? console_flush_all+0x9a0/0xc60
[  377.843412][    C1]  ? console_flush_all+0x9a0/0xc60
[  377.843439][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  377.843466][    C1]  ? printk_percpu_data_ready+0x9/0x20
[  377.843489][    C1]  ? nbcon_get_cpu_emergency_nesting+0x3b/0x50
[  377.843518][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  377.843546][    C1]  console_unlock+0xd9/0x210
[  377.843570][    C1]  ? __pfx_console_unlock+0x10/0x10
[  377.843594][    C1]  ? lock_acquire+0x2f/0xb0
[  377.843614][    C1]  ? vprintk+0x7f/0xa0
[  377.843639][    C1]  ? __down_trylock_console_sem+0xb0/0x140
[  377.843662][    C1]  vprintk_emit+0x424/0x6f0
[  377.843687][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  377.843715][    C1]  ? __pfx_lock_release+0x10/0x10
[  377.843735][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  377.843763][    C1]  vprintk+0x7f/0xa0
[  377.843789][    C1]  _printk+0xc8/0x100
[  377.843808][    C1]  ? __pfx__printk+0x10/0x10
[  377.843828][    C1]  ? ___ratelimit+0x24c/0x570
[  377.843848][    C1]  ? __pfx____ratelimit+0x10/0x10
[  377.843870][    C1]  __nla_validate_parse+0x753/0x2880
[  377.843898][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  377.843917][    C1]  ? rtnl_link_ops_get+0x17b/0x2c0
[  377.843945][    C1]  ? __pfx_lock_release+0x10/0x10
[  377.843964][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  377.843993][    C1]  __nla_parse+0x40/0x60
[  377.844013][    C1]  rtnl_newlink+0xf18/0x1ce0
[  377.844040][    C1]  ? hlock_class+0x4e/0x130
[  377.844068][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  377.844096][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  377.844116][    C1]  ? cred_has_capability.isra.0+0x192/0x2f0
[  377.844142][    C1]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  377.844167][    C1]  ? find_held_lock+0x2d/0x110
[  377.844193][    C1]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  377.844219][    C1]  ? __pfx_lock_release+0x10/0x10
[  377.844238][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  377.844267][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  377.844292][    C1]  rtnetlink_rcv_msg+0x95b/0xea0
[  377.844319][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  377.844350][    C1]  netlink_rcv_skb+0x16b/0x440
[  377.844375][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  377.844401][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.844431][    C1]  ? netlink_deliver_tap+0x1ae/0xd30
[  377.844456][    C1]  netlink_unicast+0x53c/0x7f0
[  377.844480][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  377.844507][    C1]  netlink_sendmsg+0x8b8/0xd70
[  377.844533][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.844560][    C1]  ____sys_sendmsg+0xaaf/0xc90
[  377.844584][    C1]  ? copy_msghdr_from_user+0x10b/0x160
[  377.844612][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  377.844638][    C1]  ___sys_sendmsg+0x135/0x1e0
[  377.844669][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  377.844705][    C1]  ? __pfx_lock_release+0x10/0x10
[  377.844726][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  377.844757][    C1]  ? __fget_files+0x206/0x3a0
[  377.844780][    C1]  __sys_sendmsg+0x16e/0x220
[  377.844808][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  377.844835][    C1]  ? __x64_sys_futex+0x1e1/0x4c0
[  377.844859][    C1]  do_syscall_64+0xcd/0x250
[  377.844882][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.844905][    C1] RIP: 0033:0x7fcbe017ff19
[  377.844923][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.844939][    C1] RSP: 002b:00007fcbe0ede058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.844956][    C1] RAX: ffffffffffffffda RBX: 00007fcbe0345fa0 RCX: 00007fcbe017ff19
[  377.844969][    C1] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007
[  377.844980][    C1] RBP: 00007fcbe01f3cc8 R08: 0000000000000000 R09: 0000000000000000
[  377.844992][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.845003][    C1] R13: 0000000000000000 R14: 00007fcbe0345fa0 R15: 00007ffcbfe0a6f8
[  377.845021][    C1]  </TASK>
[  377.845290][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  377.845304][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G             L     6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  377.845335][    C0] Tainted: [L]=SOFTLOCKUP
[  377.845343][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  377.845357][    C0] Workqueue: events_unbound toggle_allocation_gate
[  377.845382][    C0] Call Trace:
[  377.845389][    C0]  <IRQ>
[  377.845398][    C0]  dump_stack_lvl+0x3d/0x1f0
[  377.845427][    C0]  panic+0x71d/0x800
[  377.845466][    C0]  ? __pfx_panic+0x10/0x10
[  377.845496][    C0]  ? __pfx__printk+0x10/0x10
[  377.845523][    C0]  ? __irq_work_queue_local+0xdd/0x460
[  377.845551][    C0]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  377.845573][    C0]  ? irq_work_queue+0x2a/0x80
[  377.845598][    C0]  ? watchdog_timer_fn+0x5f2/0x7d0
[  377.845626][    C0]  ? watchdog_timer_fn+0x5e5/0x7d0
[  377.845658][    C0]  watchdog_timer_fn+0x603/0x7d0
[  377.845689][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  377.845720][    C0]  __hrtimer_run_queues+0x5fb/0xae0
[  377.845757][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  377.845786][    C0]  ? read_tsc+0x9/0x20
[  377.845822][    C0]  hrtimer_interrupt+0x392/0x8e0
[  377.845863][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  377.845892][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  377.845916][    C0]  </IRQ>
[  377.845923][    C0]  <TASK>
[  377.845932][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  377.845960][    C0] RIP: 0010:write_comp_data+0x11/0x90
[  377.845986][    C0] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 ef d4 69 7e <65> 8b 05 f0 d4 69 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00
[  377.846007][    C0] RSP: 0018:ffffc90000ab7990 EFLAGS: 00000202
[  377.846024][    C0] RAX: 0000000000000001 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc
[  377.846046][    C0] RDX: ffff88801da92440 RSI: 0000000000000000 RDI: 0000000000000005
[  377.846060][    C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  377.846074][    C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949
[  377.846088][    C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40
[  377.846110][    C0]  ? smp_call_function_many_cond+0x47c/0x1300
[  377.846145][    C0]  smp_call_function_many_cond+0x47c/0x1300
[  377.846176][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  377.846210][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  377.846238][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  377.846270][    C0]  text_poke_bp_batch+0x22b/0x760
[  377.846305][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  377.846333][    C0]  ? __jump_label_patch+0x1db/0x400
[  377.846369][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  377.846408][    C0]  text_poke_finish+0x30/0x40
[  377.846437][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  377.846474][    C0]  jump_label_update+0x1d7/0x400
[  377.846508][    C0]  static_key_enable_cpuslocked+0x1b7/0x270
[  377.846542][    C0]  static_key_enable+0x1a/0x20
[  377.846572][    C0]  toggle_allocation_gate+0xfc/0x260
[  377.846598][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  377.846624][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[  377.846656][    C0]  ? process_one_work+0x921/0x1ba0
[  377.846680][    C0]  ? lock_acquire+0x2f/0xb0
[  377.846706][    C0]  ? process_one_work+0x921/0x1ba0
[  377.846734][    C0]  process_one_work+0x9c5/0x1ba0
[  377.846767][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  377.846796][    C0]  ? __pfx_process_one_work+0x10/0x10
[  377.846819][    C0]  ? rcu_is_watching+0x12/0xc0
[  377.846855][    C0]  ? assign_work+0x1a0/0x250
[  377.846880][    C0]  worker_thread+0x6c8/0xf00
[  377.846912][    C0]  ? __kthread_parkme+0x148/0x220
[  377.846943][    C0]  ? __pfx_worker_thread+0x10/0x10
[  377.846967][    C0]  kthread+0x2c1/0x3a0
[  377.846994][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.847016][    C0]  ? __pfx_kthread+0x10/0x10
[  377.847046][    C0]  ret_from_fork+0x45/0x80
[  377.847067][    C0]  ? __pfx_kthread+0x10/0x10
[  377.847096][    C0]  ret_from_fork_asm+0x1a/0x30
[  377.847139][    C0]  </TASK>
[  378.927125][    C0] Shutting down cpus with NMI
[  378.927364][    C0] Kernel Offset: disabled