last executing test programs:

3m5.470620313s ago: executing program 0 (id=3220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x61ea, 0x10, 0x2}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r8 = memfd_create(&(0x7f00000008c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r8, &(0x7f0000000540)=[{&(0x7f0000000880)="eb", 0x1}], 0x1, 0x7ffffd, 0x8)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
sendfile(r10, r8, 0x0, 0x2000081)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000200)={0x460000, 0x0, 0x8}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000040)={0x7, 'ip6_vti0\x00', {0x7f}, 0x6})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, &(0x7f00000001c0))

3m2.175858628s ago: executing program 0 (id=3230):
socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x238, &(0x7f0000000380)={0x0, 0x80fd, 0x400, 0x3, 0x265}, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000280)={0x6, 0x6, 0x2, 0x87, 0xfffffffd, 0x40})
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@add_del={0x2, 0x0})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x2041, 0x1})
io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

3m1.118388218s ago: executing program 0 (id=3232):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x82004)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8)
sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c)

2m53.139607715s ago: executing program 0 (id=3245):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

2m47.266558491s ago: executing program 0 (id=3256):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[])
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010", @ANYRES16=r0, @ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0xd0, 0x300, 0x1b8, 0x1b8, 0xd0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x1}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast1, @empty, [0xffffff00, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffff00], 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x67, 0x3, 0x5, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@dst={{0x48}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x46, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x6}})
write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff5, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x5, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0xc7, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0x800, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x8, 0x9, 0x800, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x802, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x9, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000000, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x3, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)="4f525f1af43876e17212c725d35923e788274abfbc3207d86fc5f94a179acc7f5d19ba6274b3004b349db4b321e337448f320d8dd862f034108f6d6f518fe12880fb9f13cd631b58dff6e20a203fab759c7557a6d27bea867452c53877e06451131d5076f645fd01cf2347c158afb620920fda0360356e3e402f9142a4f8aa283a2e0965fab691bbb4c33d35eb15e809529f30caec66ad73705c8b152026d1497284be80c82a82f18185f03df9809755d4a5ab511a", 0xb5, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000049000000000000000c3c0000ea9102d9a7b26f04e28590070986c27d5d0a0300a97687671e8f60c60172f2609e9a69dca2e79572bedecd32a06b20bd0c41401fe82c86db887f679f8c00000000550000005520472041371eadf74e481beae2a759e7841f8eca55224270c2812ee5566101c654a31ccc9666b074566ee17eb1ae384108c1d8f9e4d507ffc2320139ca68c84bf837c9002687c9338d6d34f3e0da8e51cdae28e6"], 0xaa})
ioctl$UI_DEV_CREATE(r2, 0x5501)

2m45.11296581s ago: executing program 0 (id=3263):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e20, 0x40007, @empty, 0x4}, 0x1c)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil)
clock_gettime(0xc, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
socket$inet6(0xa, 0x3, 0x1)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='3', 0x1}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0202, 0x91)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"629b5e348c01922d8948955f1b2af74a", <r4=>0x0, 0x0, {0x2, 0x8}, {0x9, 0x1}, 0x80000001, [0x5, 0xbf7e2f, 0x1000, 0xdcdc, 0x3, 0x8000000000000001, 0x2, 0x1a84, 0x3, 0x100000001, 0x4, 0x7fffffffffffffff, 0x5, 0x9, 0xa, 0x8]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={<r5=>0x0, "7564d24a1a00000000000000a785cee9"})
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x17, 0x400b, 0x2a17438e, 0x899e, 0x3, 0xffffdffb, 0x47, 0x9, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x880e, 0x0], 0x0, 0x4000007})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001240)={{r0}, r4, 0x4, @inherit={0x58, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xa, {0x0, 0x4ac, 0x6, 0xffffffffffffffc0, 0x3}, [0x2, 0x9]}}, @devid=r5})
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r7, 0x40045431, &(0x7f0000000040))
write$sndseq(r3, &(0x7f0000002280)=[{0x1, 0xe2, 0x9, 0x4, @tick=0x73, {0x48, 0x2}, {0x4, 0x40}, @control={0x7d, 0x7, 0x6}}, {0xe0, 0x4, 0x4, 0x5, @tick=0x8, {0xb, 0xda}, {0x5, 0x3}, @raw32={[0x9, 0x9, 0x1]}}, {0x2, 0x0, 0x7, 0x8, @time={0x9, 0x9}, {0x80, 0x4}, {0x3, 0x7}, @addr={0x5e, 0xf}}, {0x6, 0xc9, 0x2, 0x6, @time={0x9, 0x80000001}, {0x5, 0x24}, {0x0, 0x2}, @time=@time={0x2, 0xffffffff}}, {0x8, 0x6, 0xec, 0x5, @time={0x7ff, 0x40}, {0x9, 0x7f}, {0x4}, @addr={0x6, 0x7}}, {0x7, 0x8, 0x7, 0x5, @tick=0x5, {0x3, 0x2}, {0x6, 0x6}, @control={0x45, 0x2}}, {0x1d, 0xbf, 0x6e, 0x9, @tick=0x7, {0xe8, 0xa8}, {0x2, 0x1}, @connect={{0x2, 0x7}, {0x2, 0x8}}}, {0x1, 0x8, 0x4, 0x5d, @tick=0x2, {0xc, 0x1}, {0x0, 0x18}, @addr={0x0, 0x1f}}, {0x2, 0x7, 0xa4, 0x8, @tick=0x2, {0x68, 0x4}, {0x0, 0xf9}, @result={0xb81, 0xc4fd}}], 0xfc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2m33.787568189s ago: executing program 2 (id=3286):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

2m30.71275717s ago: executing program 2 (id=3293):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fanotify_init(0xf00, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

2m28.626373616s ago: executing program 32 (id=3263):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e20, 0x40007, @empty, 0x4}, 0x1c)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil)
clock_gettime(0xc, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
socket$inet6(0xa, 0x3, 0x1)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='3', 0x1}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0202, 0x91)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"629b5e348c01922d8948955f1b2af74a", <r4=>0x0, 0x0, {0x2, 0x8}, {0x9, 0x1}, 0x80000001, [0x5, 0xbf7e2f, 0x1000, 0xdcdc, 0x3, 0x8000000000000001, 0x2, 0x1a84, 0x3, 0x100000001, 0x4, 0x7fffffffffffffff, 0x5, 0x9, 0xa, 0x8]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000240)={<r5=>0x0, "7564d24a1a00000000000000a785cee9"})
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x17, 0x400b, 0x2a17438e, 0x899e, 0x3, 0xffffdffb, 0x47, 0x9, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x880e, 0x0], 0x0, 0x4000007})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001240)={{r0}, r4, 0x4, @inherit={0x58, &(0x7f0000000040)={0x1, 0x2, 0x0, 0xa, {0x0, 0x4ac, 0x6, 0xffffffffffffffc0, 0x3}, [0x2, 0x9]}}, @devid=r5})
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r7, 0x40045431, &(0x7f0000000040))
write$sndseq(r3, &(0x7f0000002280)=[{0x1, 0xe2, 0x9, 0x4, @tick=0x73, {0x48, 0x2}, {0x4, 0x40}, @control={0x7d, 0x7, 0x6}}, {0xe0, 0x4, 0x4, 0x5, @tick=0x8, {0xb, 0xda}, {0x5, 0x3}, @raw32={[0x9, 0x9, 0x1]}}, {0x2, 0x0, 0x7, 0x8, @time={0x9, 0x9}, {0x80, 0x4}, {0x3, 0x7}, @addr={0x5e, 0xf}}, {0x6, 0xc9, 0x2, 0x6, @time={0x9, 0x80000001}, {0x5, 0x24}, {0x0, 0x2}, @time=@time={0x2, 0xffffffff}}, {0x8, 0x6, 0xec, 0x5, @time={0x7ff, 0x40}, {0x9, 0x7f}, {0x4}, @addr={0x6, 0x7}}, {0x7, 0x8, 0x7, 0x5, @tick=0x5, {0x3, 0x2}, {0x6, 0x6}, @control={0x45, 0x2}}, {0x1d, 0xbf, 0x6e, 0x9, @tick=0x7, {0xe8, 0xa8}, {0x2, 0x1}, @connect={{0x2, 0x7}, {0x2, 0x8}}}, {0x1, 0x8, 0x4, 0x5d, @tick=0x2, {0xc, 0x1}, {0x0, 0x18}, @addr={0x0, 0x1f}}, {0x2, 0x7, 0xa4, 0x8, @tick=0x2, {0x68, 0x4}, {0x0, 0xf9}, @result={0xb81, 0xc4fd}}], 0xfc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2m27.837399981s ago: executing program 2 (id=3300):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)

2m27.689210107s ago: executing program 2 (id=3301):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140))
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r6])
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69eb0b00", 0x7, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0x0, 0x0, 0x6}, {}, 0x0, 0x3502, 0xa}, [@tfcpad={0x8, 0x16, 0x78}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x144}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240))

2m25.667358852s ago: executing program 2 (id=3305):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004881, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0)
io_submit(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m24.621630712s ago: executing program 2 (id=3309):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m20.23707942s ago: executing program 1 (id=3318):
syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000085000000020000000200"/28], 0x50)
r0 = syz_open_dev$media(&(0x7f00000001c0), 0x2, 0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x9)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940))
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xf7fd}, 0x1c)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000002a82, 0x0)
fadvise64(r5, 0x20000000009, 0x0, 0x2)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0)
getsockopt$packet_buf(r6, 0x107, 0x6, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x78, 0x60, 0x480, 0x3ff, 0x104e3, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x20000004}, {}, {0xf, 0x61, 0x7}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x800, 0x0, 0xfffffc00, 0x38, 0x400, 0x1, 0x200, 0x21, 0x0, 0x2, 0x7})
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22902, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x0)

2m18.891362679s ago: executing program 1 (id=3320):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

2m17.735204952s ago: executing program 1 (id=3322):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2m16.774717313s ago: executing program 1 (id=3325):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x3, 0xff)
add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240)="48b12300", 0x8, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000040000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x92, &(0x7f00000001c0)=""/146, 0x41000, 0xe}, 0x94)
r5 = dup(r4)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20000000)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x3, [0xbc8, 0x1df, 0x854, 0xc5e]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

2m15.801469915s ago: executing program 1 (id=3329):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r6 = gettid()
sched_setscheduler(r6, 0x1, &(0x7f0000000180)=0x3)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r5, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00')

2m11.564118489s ago: executing program 1 (id=3339):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x171)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x3000008, 0x12, r2, 0x66a4a000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = socket(0x11, 0xa, 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close_range(r3, r4, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, 0x0})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x38303553, 0x401}})
execve(0x0, 0x0, 0x0)

2m8.41934297s ago: executing program 33 (id=3309):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m55.438776129s ago: executing program 34 (id=3339):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x171)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x3000008, 0x12, r2, 0x66a4a000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r3 = socket(0x11, 0xa, 0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close_range(r3, r4, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, 0x0})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x2, @sdr={0x38303553, 0x401}})
execve(0x0, 0x0, 0x0)

50.638515311s ago: executing program 6 (id=3507):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102384, 0x18ff0)
userfaultfd(0x801)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000), 0x4)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000000c0), 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x121000, 0x0)
read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

46.373477876s ago: executing program 6 (id=3514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$addseals(r0, 0x409, 0x1)
getrandom(0x0, 0x0, 0xd86b31f1268e345c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
getrandom(&(0x7f0000000100)=""/116, 0x74, 0x3)
r1 = syz_open_dev$dri(0x0, 0x1f, 0x0)
syz_emit_ethernet(0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000004f000000000000aaff0235c52c67d6e50000000000000000000000000001860090780000040000000000000000fe1c571a000307bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a00000000000000000000004344bcee0b9c9cffadf6d4"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
setrlimit(0x8, &(0x7f0000000040)={0x80000000, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = io_uring_setup(0x4898, &(0x7f0000000680)={0x0, 0x21, 0x40, 0xfffffffc, 0x3ffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0xa541)
ioctl$USBDEVFS_RELEASE_PORT(r6, 0x4004550d, 0x0)
r7 = fcntl$dupfd(r4, 0x406, r3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x7})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064d2, &(0x7f0000000240)={0x0, 0x0})
sendmsg$NFT_BATCH(r0, 0x0, 0x20040040)

43.99744396s ago: executing program 6 (id=3521):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fanotify_init(0xf00, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

43.789986413s ago: executing program 6 (id=3522):
r0 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040))
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, 0x0)
r7 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8})
socket$l2tp(0x2, 0x2, 0x73)
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)

40.278407367s ago: executing program 6 (id=3531):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380))
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fanotify_init(0xf00, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

39.512805003s ago: executing program 3 (id=3534):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r5, 0x400, 0x1)
fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x0)
io_uring_setup(0x2655, &(0x7f0000000080)={0x0, 0xdf4, 0x1000, 0x5, 0x286, 0x0, r0})

39.326166871s ago: executing program 6 (id=3535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

38.628115589s ago: executing program 3 (id=3536):
fsopen(&(0x7f00000000c0)='cifs\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
socket(0x10, 0x2, 0x4)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
userfaultfd(0x80000)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200"], 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)='\f7', 0x2}, {&(0x7f00000004c0)="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", 0x1000}], 0x2)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)

36.138064444s ago: executing program 3 (id=3541):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)}, 0x20)
socket(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x31184c9bc76892e0}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_setup(0x1d48, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r5, 0x4)

34.98302666s ago: executing program 3 (id=3544):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

34.119414338s ago: executing program 3 (id=3546):
inotify_init()
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0)
timer_create(0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x5933, 0x1ff, 0x4, 0xfffffffffffffff7, 0x90000000000000, 0x64, 0x100, 0xfc}, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8})
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x4, {0xc, 0x1000, 0x9, 0x240}})

32.490303189s ago: executing program 3 (id=3551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

24.695702283s ago: executing program 35 (id=3535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

17.41853712s ago: executing program 36 (id=3551):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r4, 0x402, 0x5)
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18})
socket$nl_route(0x10, 0x3, 0x0)
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

15.04634776s ago: executing program 9 (id=3580):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x917)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000)
socket$inet_tcp(0x2, 0x1, 0x0)
capget(0x0, 0x0)
r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
keyctl$clear(0x7, r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0})

13.308415803s ago: executing program 9 (id=3580):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x917)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000)
socket$inet_tcp(0x2, 0x1, 0x0)
capget(0x0, 0x0)
r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
keyctl$clear(0x7, r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0})

11.881154423s ago: executing program 7 (id=3589):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c000180080010800400058004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x73, 0x0, 0xee00}, {0x8, 0x9, 0x81, 0x3a4, 0x4, 0x8, 0x6, 0x1}, {0x0, 0xffffffffffff98c9, 0x3ff, 0xffff}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x6, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x1, 0x6, 0x0, 0x1, 0x5}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x6c}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x0, {0x1, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r9, 0x700, 0x20, 0x2, 0x7fff, {{0x13, 0x4, 0x3, 0x9, 0x4c, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdc, [@broadcast]}]}}}}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x4, 0x2, 0x140}]}]}, 0x38}}, 0x0)

11.356587333s ago: executing program 9 (id=3580):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x917)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000)
socket$inet_tcp(0x2, 0x1, 0x0)
capget(0x0, 0x0)
r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
keyctl$clear(0x7, r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0})

10.018601952s ago: executing program 5 (id=3591):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000540)='./bus\x00', 0x114)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x10008e, 0x180000504)
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000540)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r8, 0x0}])
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000)

9.577852735s ago: executing program 9 (id=3580):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x917)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000)
socket$inet_tcp(0x2, 0x1, 0x0)
capget(0x0, 0x0)
r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
keyctl$clear(0x7, r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0})

8.60966046s ago: executing program 5 (id=3592):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

8.605330844s ago: executing program 7 (id=3593):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

8.603726064s ago: executing program 4 (id=3594):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

7.701420247s ago: executing program 7 (id=3595):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

7.042165757s ago: executing program 5 (id=3596):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)}, 0x20)
socket(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x31184c9bc76892e0}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_setup(0x1d48, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r4, 0x4)

6.966582628s ago: executing program 9 (id=3580):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, 0x0, 0x917)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000)
socket$inet_tcp(0x2, 0x1, 0x0)
capget(0x0, 0x0)
r4 = request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48)
keyctl$clear(0x7, r4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x41, 0x2, 0x6dd, 0x10, 0x200, 0x80, 0x1, 0x2, 0xffffffff, 0x20, 0x7, &(0x7f00000003c0)=[0x4, 0x5], 0x2, 0x0})

6.922814056s ago: executing program 8 (id=3567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timerfd_create(0x0, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x3000, r5, 0x0, 0x0, 0x407f0b00}])
dup3(r5, r3, 0x0)

5.952231048s ago: executing program 5 (id=3597):
socket$kcm(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x2, 0x0, 0x401}, {0x3, 0x0, 0xae}, {0x4}, {0x8, 0x0, 0x6}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0x400000000000b0}, {0x80, 0x0, 0x6}, {0xc, 0x0, 0x3d}, {0x40, 0x0, 0x6}, {}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x7}, {0x40, 0x0, 0x10f4}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8a}, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r6, 0x2285, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$sndseq(r7, 0x0, 0x0)
write$sndseq(r7, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x0, 0x5, 0xff, 0x0, @tick=0x4, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)

5.917677655s ago: executing program 4 (id=3598):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

5.845661559s ago: executing program 7 (id=3599):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

4.968853285s ago: executing program 7 (id=3600):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f209647ba0c9c0e89d3499577b7cfa68164680805008532aa825433f75748a0a3f71f981ea4e4fd0b5c", 0x2d}, {0x0}], 0x2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$selinux_access(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0xfffffffffffffdba, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40811)

4.019290312s ago: executing program 7 (id=3601):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r3, 0x402, 0x5)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000002c0)={0x8, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x4000, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x4, 0x5, 0x7, 0x0, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x192, 0x9, 0x7, 0xfcc4], 0x6}})
ftruncate(0xffffffffffffffff, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(&(0x7f0000000040)='ceph\x00', 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
creat(&(0x7f0000000580)='./bus\x00', 0x0)
rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

3.692766214s ago: executing program 8 (id=3567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timerfd_create(0x0, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x3000, r5, 0x0, 0x0, 0x407f0b00}])
dup3(r5, r3, 0x0)

3.118405263s ago: executing program 4 (id=3602):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fanotify_init(0xf00, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084)

2.47722612s ago: executing program 5 (id=3603):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x88c0)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x4c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4004090)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0)

2.239984308s ago: executing program 4 (id=3604):
r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x94}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1.416685932s ago: executing program 8 (id=3567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timerfd_create(0x0, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x3000, r5, 0x0, 0x0, 0x407f0b00}])
dup3(r5, r3, 0x0)

891.511303ms ago: executing program 4 (id=3605):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', <r0=>0x0, 0x700, 0x1, 0x8, 0x7, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0xa9, 0x0, 0x8, [0x7, 0x9f6, 0x5, 0x80000000, 0x2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x9a, [@private=0xa010101, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xb, [{@empty, 0x10001}, {@broadcast, 0x3800}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0xff}]}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2014042, &(0x7f00000004c0)={[{@subsystem='cpu'}, {@release_agent={'release_agent', 0x3d, './cgroup'}}, {@subsystem='freezer'}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, 'tunl0\x00'}}, {@subj_role={'subj_role', 0x3d, 'cpu'}}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'bpf\x00'}}]})
sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)
unshare(0x40020000)

816.057534ms ago: executing program 5 (id=3606):
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x9, 0x34f081)
syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
setpriority(0x2, 0x0, 0x7fffff7ffffffffb)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x0, 0x0, 0x0})
sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000))
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

0s ago: executing program 4 (id=3607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x235, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f909, 0x8000, '\x00', @p_u32=0x0}})
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e)
listen(r4, 0x3)
r5 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100}, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r4, 0x0})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, 0x0, 0x0)
syz_usb_connect(0x6, 0x36, &(0x7f0000001a00)=ANY=[@ANYRES32=r8, @ANYRESDEC=r8, @ANYBLOB="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", @ANYRES16=r8], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

kernel console output (not intermixed with test programs):

400 audit(2000000192.205:2223): avc:  denied  { write } for  pid=20461 comm="syz.1.3109" lport=51282 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1592.543994][T20472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1592.560120][   T30] audit: type=1400 audit(2000000192.486:2224): avc:  denied  { kexec_image_load } for  pid=20471 comm="syz.2.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 1593.253761][T20479] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3113'.
[ 1593.341208][   T30] audit: type=1400 audit(2000000193.085:2225): avc:  denied  { write } for  pid=20475 comm="syz.4.3113" name="protocols" dev="proc" ino=4026533367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1593.721756][T20484] input: syz0 as /devices/virtual/input/input36
[ 1593.765868][T20484] SET target dimension over the limit!
[ 1594.670472][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1594.670484][   T30] audit: type=1400 audit(2000000194.450:2229): avc:  denied  { bind } for  pid=20485 comm="syz.2.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1595.680859][   T30] audit: type=1400 audit(2000000194.591:2230): avc:  denied  { bind } for  pid=20493 comm="syz.4.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1596.288281][T20502] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1596.288281][T20502]    program syz.1.3118 not setting count and/or reply_len properly
[ 1597.167057][T20511] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1597.324413][T20511] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1597.339569][T20511] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1598.045922][T20511] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1598.069419][T20511] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1598.149302][T20511] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1598.172336][T20511] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[ 1598.187577][T20511] kvm: requested 115657 ns i8254 timer period limited to 200000 ns
[ 1598.197585][T20511] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1598.211293][T20511] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[ 1599.932339][T20549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1600.205240][T20553] overlayfs: failed to resolve './file2': -2
[ 1600.812520][T20558] hub 9-0:1.0: USB hub found
[ 1600.819163][T20558] hub 9-0:1.0: 1 port detected
[ 1601.623975][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'.
[ 1601.633373][T20568] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3132'.
[ 1602.082815][T20566] netlink: zone id is out of range
[ 1602.122128][T20566] netlink: zone id is out of range
[ 1602.127355][T20566] netlink: zone id is out of range
[ 1602.136280][T20566] netlink: zone id is out of range
[ 1602.161674][T20566] netlink: zone id is out of range
[ 1602.167224][T20566] netlink: zone id is out of range
[ 1602.168009][T20570] batadv_slave_0: entered promiscuous mode
[ 1602.179383][T20566] netlink: zone id is out of range
[ 1602.194737][T20566] netlink: zone id is out of range
[ 1602.223407][T20566] netlink: zone id is out of range
[ 1602.249877][T20570] batman_adv: batadv0: Adding interface: macvtap1
[ 1602.264803][T20570] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1602.391142][T20570] batman_adv: batadv0: Interface activated: macvtap1
[ 1603.213868][T20583] lo: Caught tx_queue_len zero misconfig
[ 1604.248100][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 120 seconds
[ 1604.259025][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 120 seconds
[ 1604.270083][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 120 seconds
[ 1604.292243][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 120 seconds
[ 1604.414458][T20598] overlay: filesystem on ./file0 not supported as upperdir
[ 1604.753157][T20600] xt_hashlimit: max too large, truncated to 1048576
[ 1604.784992][   T30] audit: type=1400 audit(2000000203.917:2231): avc:  denied  { write } for  pid=20592 comm="syz.1.3138" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1605.569015][T20609] overlayfs: failed to resolve './file2': -2
[ 1606.987196][   T30] audit: type=1400 audit(2000000205.975:2232): avc:  denied  { remove_name } for  pid=20623 comm="syz.0.3144" name="binder1" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1607.023752][   T30] audit: type=1400 audit(2000000205.975:2233): avc:  denied  { unlink } for  pid=20623 comm="syz.0.3144" name="binder1" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1608.130137][   T30] audit: type=1400 audit(2000000207.041:2234): avc:  denied  { create } for  pid=20632 comm="syz.0.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1608.378965][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3146'.
[ 1608.401080][   T30] audit: type=1400 audit(2000000207.275:2235): avc:  denied  { ioctl } for  pid=20631 comm="syz.3.3146" path="socket:[67824]" dev="sockfs" ino=67824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1608.520127][   T30] audit: type=1400 audit(2000000207.275:2236): avc:  denied  { bind } for  pid=20631 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1608.605621][   T30] audit: type=1400 audit(2000000207.275:2237): avc:  denied  { setopt } for  pid=20631 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1608.700210][T20643] dummy0: entered promiscuous mode
[ 1608.991245][T20642] dummy0: left promiscuous mode
[ 1610.556310][T20656] overlayfs: failed to clone upperpath
[ 1610.573853][T20656] overlayfs: failed to resolve './file2': -2
[ 1611.071330][T20658] lo: entered allmulticast mode
[ 1611.363093][T20664] misc userio: Invalid payload size
[ 1611.370569][T20664] misc userio: No port type given on /dev/userio
[ 1612.128419][T20675] overlayfs: failed to clone upperpath
[ 1612.151927][T20675] overlayfs: failed to resolve './file2': -2
[ 1612.572978][T20676] netlink: 'syz.3.3155': attribute type 2 has an invalid length.
[ 1612.605152][T20676] !: entered promiscuous mode
[ 1612.636791][T20676] netlink: 'syz.3.3155': attribute type 2 has an invalid length.
[ 1612.952266][T20684] batadv_slave_0: entered promiscuous mode
[ 1613.450634][T20677] batadv_slave_0: left promiscuous mode
[ 1613.828636][   T30] audit: type=1400 audit(2000000212.373:2238): avc:  denied  { create } for  pid=20678 comm="syz.4.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1613.922091][   T30] audit: type=1400 audit(2000000212.373:2239): avc:  denied  { listen } for  pid=20678 comm="syz.4.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1613.947560][   T30] audit: type=1400 audit(2000000212.373:2240): avc:  denied  { connect } for  pid=20678 comm="syz.4.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1615.187464][T20704] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1615.713654][T20705] input: syz0 as /devices/virtual/input/input37
[ 1615.849815][T15513] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1616.404724][T15513] usb 2-1: device descriptor read/64, error -71
[ 1616.525115][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1616.661280][T15513] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1616.728881][T20720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3166'.
[ 1616.783503][T20722] wireguard0: entered promiscuous mode
[ 1616.789020][T20722] wireguard0: entered allmulticast mode
[ 1616.826436][T20724] netlink: 'syz.3.3167': attribute type 12 has an invalid length.
[ 1616.896491][T15513] usb 2-1: device descriptor read/64, error -71
[ 1617.025132][T15513] usb usb2-port1: attempt power cycle
[ 1617.105757][T16713] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1617.399005][T15513] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1617.601315][T15513] usb 2-1: device descriptor read/8, error -71
[ 1617.912384][T15513] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1617.956504][T15513] usb 2-1: device descriptor read/8, error -71
[ 1618.073796][T15513] usb usb2-port1: unable to enumerate USB device
[ 1618.079143][T20734] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1618.079143][T20734]    program syz.0.3169 not setting count and/or reply_len properly
[ 1618.331958][T16713] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1618.340729][T16713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1618.377935][T16713] usb 5-1: config 0 has no interfaces?
[ 1618.490238][T16713] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1618.499490][T16713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1618.990748][T16713] usb 5-1: config 0 descriptor??
[ 1620.258722][   T30] audit: type=1400 audit(2000000218.397:2241): avc:  denied  { getopt } for  pid=20760 comm="syz.0.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1620.372427][   T30] audit: type=1400 audit(2000000218.397:2242): avc:  denied  { map } for  pid=20760 comm="syz.0.3176" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1621.155371][   T10] usb 5-1: USB disconnect, device number 50
[ 1621.999570][T20781] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1622.072981][   T30] audit: type=1400 audit(2000000220.062:2243): avc:  denied  { bind } for  pid=20775 comm="syz.4.3179" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1622.106596][   T30] audit: type=1400 audit(2000000220.062:2244): avc:  denied  { name_bind } for  pid=20775 comm="syz.4.3179" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1622.183549][   T30] audit: type=1400 audit(2000000220.062:2245): avc:  denied  { node_bind } for  pid=20775 comm="syz.4.3179" saddr=fc00::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1622.213441][T20783] input: syz0 as /devices/virtual/input/input38
[ 1622.349678][   T30] audit: type=1326 audit(2000000220.071:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1622.395033][   T30] audit: type=1326 audit(2000000220.071:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1623.022663][   T30] audit: type=1326 audit(2000000220.071:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1623.054464][   T30] audit: type=1326 audit(2000000220.071:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1623.237647][   T30] audit: type=1326 audit(2000000220.080:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1623.912786][T20798] dummy0: entered promiscuous mode
[ 1624.428290][T20807] dvmrp9: entered allmulticast mode
[ 1624.874606][T20797] dummy0: left promiscuous mode
[ 1626.628561][T20832] hub 9-0:1.0: USB hub found
[ 1626.634332][T20832] hub 9-0:1.0: 1 port detected
[ 1626.762379][T20836] overlayfs: conflicting options: nfs_export=on,index=off
[ 1626.897386][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1626.897418][   T30] audit: type=1400 audit(2000000224.552:2253): avc:  denied  { create } for  pid=20828 comm="syz.1.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1626.990691][   T30] audit: type=1400 audit(2000000224.561:2254): avc:  denied  { setopt } for  pid=20828 comm="syz.1.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1627.078474][   T30] audit: type=1400 audit(2000000224.570:2255): avc:  denied  { ioctl } for  pid=20828 comm="syz.1.3194" path="socket:[68225]" dev="sockfs" ino=68225 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1627.178843][   T30] audit: type=1400 audit(2000000224.673:2256): avc:  denied  { firmware_load } for  pid=20828 comm="syz.1.3194" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 1627.568738][T20845] net_ratelimit: 11 callbacks suppressed
[ 1627.568748][T20845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1627.593218][T20844] hub 9-0:1.0: USB hub found
[ 1627.598255][T20844] hub 9-0:1.0: 1 port detected
[ 1627.684430][   T30] audit: type=1400 audit(2000000225.347:2257): avc:  denied  { connect } for  pid=20850 comm="syz.2.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1627.719420][   T30] audit: type=1400 audit(2000000225.375:2258): avc:  denied  { getopt } for  pid=20850 comm="syz.2.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1627.898907][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3199'.
[ 1628.364518][   T30] audit: type=1326 audit(2000000225.927:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1154f9c799 code=0x7ffc0000
[ 1628.418853][T20865] netlink: 'syz.2.3201': attribute type 1 has an invalid length.
[ 1628.475305][   T30] audit: type=1326 audit(2000000225.927:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1154f9c799 code=0x7ffc0000
[ 1628.521672][   T30] audit: type=1326 audit(2000000225.927:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1154f9c799 code=0x7ffc0000
[ 1628.549403][   T30] audit: type=1326 audit(2000000225.927:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1154f9c799 code=0x7ffc0000
[ 1628.597075][T20868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[ 1628.608746][T20865] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1631.049346][T20890] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3206'.
[ 1631.878355][T20905] tmpfs: Bad value for 'mpol'
[ 1633.661572][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1633.661587][   T30] audit: type=1400 audit(2000000230.931:2273): avc:  denied  { create } for  pid=20920 comm="syz.3.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1633.806361][   T30] audit: type=1400 audit(2000000230.959:2274): avc:  denied  { setopt } for  pid=20920 comm="syz.3.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1636.091729][T20943] syz.1.3221 (20943): drop_caches: 2
[ 1636.171666][   T30] audit: type=1400 audit(2000000232.727:2275): avc:  denied  { getopt } for  pid=20937 comm="syz.1.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1636.367556][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 150 seconds
[ 1636.378803][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 150 seconds
[ 1636.405292][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 150 seconds
[ 1636.428834][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 150 seconds
[ 1637.220094][   T30] audit: type=1400 audit(2000000234.252:2276): avc:  denied  { ioctl } for  pid=20958 comm="syz.3.3226" path="socket:[68406]" dev="sockfs" ino=68406 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1637.267183][T20959] pim6reg: entered allmulticast mode
[ 1638.165250][T20964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'.
[ 1640.051794][   T30] audit: type=1400 audit(2000000236.908:2277): avc:  denied  { connect } for  pid=20980 comm="syz.1.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1640.107118][   T30] audit: type=1400 audit(2000000236.955:2278): avc:  denied  { write } for  pid=20980 comm="syz.1.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1640.469634][T15513] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1641.118142][T15513] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1641.127145][T15513] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1641.137595][T15513] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1641.146939][T15513] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1641.168937][T15513] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1642.209120][T15513] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1642.223340][T15513] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1642.244700][T15513] usb 2-1: Product: syz
[ 1642.249027][T15513] usb 2-1: Manufacturer: syz
[ 1642.265263][T20984] Bluetooth: hci4: command 0x0406 tx timeout
[ 1642.350890][T21001] bridge2: entered promiscuous mode
[ 1642.356198][T21001] bridge2: entered allmulticast mode
[ 1642.461306][   T30] audit: type=1400 audit(2000000239.153:2279): avc:  denied  { write } for  pid=20997 comm="syz.3.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1642.673939][T15513] cdc_wdm 2-1:1.0: skipping garbage
[ 1642.682034][T15513] cdc_wdm 2-1:1.0: skipping garbage
[ 1642.716178][T15513] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1642.722268][T15513] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1643.666293][   T30] audit: type=1400 audit(2000000240.294:2280): avc:  denied  { read write } for  pid=20980 comm="syz.1.3223" name="cdc-wdm0" dev="devtmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1644.272638][   T30] audit: type=1400 audit(2000000240.294:2281): avc:  denied  { open } for  pid=20980 comm="syz.1.3223" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[ 1644.301977][    C0] cdc_wdm 2-1:1.0: Unexpected error -71
[ 1644.308685][    C0] wdm_int_callback: 4335 callbacks suppressed
[ 1644.308699][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1644.321312][    C0] wdm_int_callback: 4335 callbacks suppressed
[ 1644.321324][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1644.334734][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1644.341335][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1644.350341][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1644.356945][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1644.365825][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1644.372434][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1644.379114][   T10] usb 2-1: USB disconnect, device number 26
[ 1644.385098][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1644.385119][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1644.385134][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1645.023089][   T30] audit: type=1326 audit(2000000241.557:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21017 comm="syz.2.3240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1154f9c799 code=0x0
[ 1648.151331][T21049] overlay: filesystem on ./file0 not supported as upperdir
[ 1648.435610][T21052] Can't find ip_set type bitmap:ip
[ 1648.499492][T21047] ceph: No mds server is up or the cluster is laggy
[ 1648.522103][T15513] libceph: connect (1)[c::]:6789 error -13
[ 1648.799754][T15513] libceph: mon0 (1)[c::]:6789 connect error
[ 1650.042082][T21071] overlay: filesystem on ./file0 not supported as upperdir
[ 1650.194514][T21074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3250'.
[ 1650.490913][T21072] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3250'.
[ 1650.978871][T21073] Can't find ip_set type bitmap:ip
[ 1651.683486][T21079] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1652.832884][   T30] audit: type=1400 audit(2000000247.946:2283): avc:  denied  { bind } for  pid=21078 comm="syz.2.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1653.103099][   T30] audit: type=1400 audit(2000000248.713:2284): avc:  denied  { write } for  pid=21078 comm="syz.2.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1653.222497][T21090] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1653.222497][T21090]    program syz.1.3254 not setting count and/or reply_len properly
[ 1653.678285][T21102] input: syz0 as /devices/virtual/input/input39
[ 1653.946252][   T30] audit: type=1400 audit(2000000249.901:2285): avc:  denied  { ioctl } for  pid=21104 comm="syz.3.3258" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=67547 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1656.243131][T21138] CUSE: info not properly terminated
[ 1656.501409][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'.
[ 1657.041210][   T30] audit: type=1400 audit(2000000252.801:2286): avc:  denied  { ioctl } for  pid=21141 comm="syz.1.3266" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1657.735952][T21148] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1659.511559][   T30] audit: type=1326 audit(2000000255.102:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21159 comm="syz.1.3270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74d9b9c799 code=0x0
[ 1660.429837][T21172] bridge0: left promiscuous mode
[ 1661.373498][T21178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3276'.
[ 1661.759205][   T30] audit: type=1400 audit(2000000257.206:2288): avc:  denied  { shutdown } for  pid=21180 comm="syz.3.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1661.874701][T21189] netlink: 'syz.3.3277': attribute type 2 has an invalid length.
[ 1663.380965][   T30] audit: type=1400 audit(2000000258.731:2289): avc:  denied  { setopt } for  pid=21197 comm="syz.1.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1663.385597][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'.
[ 1663.465992][   T30] audit: type=1400 audit(2000000258.731:2290): avc:  denied  { map } for  pid=21197 comm="syz.1.3280" path="socket:[68771]" dev="sockfs" ino=68771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1663.731075][   T30] audit: type=1400 audit(2000000258.731:2291): avc:  denied  { read } for  pid=21197 comm="syz.1.3280" path="socket:[68771]" dev="sockfs" ino=68771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1664.989503][   T30] audit: type=1400 audit(2000000259.526:2292): avc:  denied  { connect } for  pid=21200 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1665.989824][T21210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1666.299923][T21220] overlay: filesystem on ./file0 not supported as upperdir
[ 1666.831397][T21222] Can't find ip_set type bitmap:ip
[ 1667.313831][   T30] audit: type=1326 audit(2000000262.370:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1667.792374][T21234] netlink: 'syz.1.3285': attribute type 1 has an invalid length.
[ 1667.858382][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3285'.
[ 1667.902850][   T30] audit: type=1326 audit(2000000262.370:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1668.190394][   T30] audit: type=1326 audit(2000000262.389:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1668.273033][T21234] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1668.307887][   T30] audit: type=1326 audit(2000000262.389:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1668.540914][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 180 seconds
[ 1668.551688][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 180 seconds
[ 1668.562662][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 180 seconds
[ 1668.596464][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 180 seconds
[ 1668.617003][T21241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1668.639332][   T30] audit: type=1326 audit(2000000262.389:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1668.776328][   T30] audit: type=1326 audit(2000000262.389:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74d9b9c799 code=0x7ffc0000
[ 1670.108209][T21264] IPVS: Error connecting to the multicast addr
[ 1670.419864][T15513] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[ 1670.607986][T15513] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1670.624610][T21269] overlayfs: failed to clone upperpath
[ 1670.639075][T15513] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[ 1670.668493][T15513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.684356][T21270] overlayfs: failed to resolve './file2': -2
[ 1670.735771][T15513] usb 5-1: config 0 descriptor??
[ 1670.992010][T15513] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1672.688317][T15513] usb 5-1: USB disconnect, device number 51
[ 1672.732486][T21287] SELinux: security_context_str_to_sid (5ýÆÉ]ÖS9q#“�ë) failed with errno=-22
[ 1672.877604][T21291] xt_TCPMSS: Only works on TCP SYN packets
[ 1672.936445][T21291] sit1: entered allmulticast mode
[ 1673.060023][T20984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1673.073157][T20984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1673.084992][T20984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1673.092790][T20984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1673.100344][T20984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1673.122944][   T30] audit: type=1400 audit(2000000267.842:2299): avc:  denied  { mounton } for  pid=21294 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1673.168814][T21287] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1673.262014][T21303] 9p: Bad value for 'rfdno'
[ 1673.268302][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'.
[ 1673.287922][   T30] audit: type=1400 audit(2000000267.973:2300): avc:  denied  { create } for  pid=21296 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1673.308971][   T30] audit: type=1400 audit(2000000267.973:2301): avc:  denied  { write } for  pid=21296 comm="syz.2.3301" path="socket:[68892]" dev="sockfs" ino=68892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1673.458509][T21306] netlink: 'syz.3.3302': attribute type 13 has an invalid length.
[ 1673.504026][   T30] audit: type=1400 audit(2000000267.973:2302): avc:  denied  { read } for  pid=21296 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1673.562773][   T30] audit: type=1400 audit(2000000268.076:2303): avc:  denied  { write } for  pid=21299 comm="syz.3.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1674.051225][T21306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1674.724628][ T6193] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1674.743702][ T6193] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1674.777595][ T6193] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1674.797187][ T6193] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1675.278319][T13611] Bluetooth: hci5: command tx timeout
[ 1675.696553][   T30] audit: type=1400 audit(2000000269.937:2304): avc:  denied  { mount } for  pid=21328 comm="syz.2.3305" name="/" dev="rpc_pipefs" ino=68913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[ 1675.943792][T21343] dummy0: entered promiscuous mode
[ 1675.995076][T21294] chnl_net:caif_netlink_parms(): no params data found
[ 1676.141993][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3306'.
[ 1676.306337][T21294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1676.345596][T21294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1676.413617][T21294] bridge_slave_0: entered allmulticast mode
[ 1676.445870][T21294] bridge_slave_0: entered promiscuous mode
[ 1676.484669][T21294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1676.508700][T21294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1676.524034][T21294] bridge_slave_1: entered allmulticast mode
[ 1676.536384][T21294] bridge_slave_1: entered promiscuous mode
[ 1676.573193][T21342] dummy0: left promiscuous mode
[ 1676.619484][T21294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1676.757202][T21294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1677.303594][T21320] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1677.347526][T21294] team0: Port device team_slave_0 added
[ 1677.358263][T21294] team0: Port device team_slave_1 added
[ 1677.396379][T21294] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1677.403699][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1677.459754][T21294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1677.471641][T21294] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1677.482843][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1677.544396][T21320] usb 2-1: Using ep0 maxpacket: 8
[ 1677.624326][T21320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.724521][T21294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1677.735303][T21320] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00
[ 1677.745820][T21320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1677.803389][T21320] usb 2-1: config 0 descriptor??
[ 1678.004281][T13611] Bluetooth: hci5: command tx timeout
[ 1678.012559][   T30] audit: type=1400 audit(2000000272.294:2305): avc:  denied  { wake_alarm } for  pid=21365 comm="syz.3.3312" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1678.209008][T21320] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1678.257197][T21294] hsr_slave_0: entered promiscuous mode
[ 1678.274361][T21294] hsr_slave_1: entered promiscuous mode
[ 1678.287723][T21294] debugfs: 'hsr0' already exists in 'hsr'
[ 1678.297997][T21294] Cannot create hsr debugfs directory
[ 1678.537104][T21294] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1678.579439][T21294] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1678.606171][T21294] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1678.621892][T21294] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1678.659642][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'.
[ 1678.780071][   T30] audit: type=1400 audit(2000000273.043:2306): avc:  denied  { execmem } for  pid=21375 comm="syz.3.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1679.277998][   T30] audit: type=1400 audit(2000000273.136:2307): avc:  denied  { bind } for  pid=21369 comm="syz.4.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1679.369201][   T30] audit: type=1400 audit(2000000273.155:2308): avc:  denied  { ioctl } for  pid=21358 comm="syz.1.3310" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1679.538473][T21294] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1679.551150][   T30] audit: type=1400 audit(2000000273.155:2309): avc:  denied  { create } for  pid=21369 comm="syz.4.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1679.621633][T21294] 8021q: adding VLAN 0 to HW filter on device team0
[ 1679.660750][   T30] audit: type=1400 audit(2000000273.164:2310): avc:  denied  { read } for  pid=21294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1679.666491][T17538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1679.688437][T17538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1679.698293][   T30] audit: type=1400 audit(2000000273.164:2311): avc:  denied  { write } for  pid=21294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1679.744532][   T30] audit: type=1400 audit(2000000273.230:2312): avc:  denied  { map_create } for  pid=21375 comm="syz.3.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1679.766178][   T30] audit: type=1400 audit(2000000273.314:2313): avc:  denied  { read open } for  pid=21375 comm="syz.3.3314" path="net:[4026532849]" dev="nsfs" ino=4026532849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1679.791344][   T30] audit: type=1400 audit(2000000273.314:2314): avc:  denied  { create } for  pid=21375 comm="syz.3.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1679.812602][   T30] audit: type=1400 audit(2000000273.314:2315): avc:  denied  { write } for  pid=21375 comm="syz.3.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1679.916633][T17538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1679.923764][T17538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1680.153533][T13611] Bluetooth: hci5: command tx timeout
[ 1680.259365][T21294] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1680.438150][T20740] usb 2-1: USB disconnect, device number 27
[ 1681.147273][T21294] veth0_vlan: entered promiscuous mode
[ 1681.158281][T21294] veth1_vlan: entered promiscuous mode
[ 1681.197171][T21294] veth0_macvtap: entered promiscuous mode
[ 1681.223865][T21294] veth1_macvtap: entered promiscuous mode
[ 1681.358898][T21294] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1681.699461][T21294] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1681.716725][T17538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.797514][T17538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.819871][T17538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.844311][T17538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.909384][T17538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1681.926669][T17538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.126221][T17538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1682.143665][T17538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.209801][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1682.330531][T21427] netlink: 'syz.5.3296': attribute type 49 has an invalid length.
[ 1682.399454][T13611] Bluetooth: hci5: command tx timeout
[ 1683.266408][T21436] ISOFS: Unable to identify CD-ROM format.
[ 1683.497074][T21438] hub 9-0:1.0: USB hub found
[ 1683.502106][T21438] hub 9-0:1.0: 1 port detected
[ 1684.178743][   T30] kauditd_printk_skb: 69 callbacks suppressed
[ 1684.178774][   T30] audit: type=1400 audit(2000000278.169:2385): avc:  denied  { connect } for  pid=21444 comm="syz.1.3325" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1684.667631][   T30] audit: type=1400 audit(2000000278.187:2386): avc:  denied  { write } for  pid=21444 comm="syz.1.3325" path="socket:[70191]" dev="sockfs" ino=70191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1684.711661][   T30] audit: type=1400 audit(2000000278.187:2387): avc:  denied  { ioctl } for  pid=21444 comm="syz.1.3325" path="socket:[69611]" dev="sockfs" ino=69611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1684.993255][   T30] audit: type=1400 audit(2000000278.945:2388): avc:  denied  { unmount } for  pid=21294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1685.023809][   T30] audit: type=1400 audit(2000000278.973:2389): avc:  denied  { create } for  pid=21455 comm="syz.1.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1685.490912][   T30] audit: type=1400 audit(2000000279.413:2390): avc:  denied  { create } for  pid=21457 comm="syz.5.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1685.528255][   T30] audit: type=1400 audit(2000000279.432:2391): avc:  denied  { setopt } for  pid=21457 comm="syz.5.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1685.586440][   T30] audit: type=1400 audit(2000000279.432:2392): avc:  denied  { write } for  pid=21457 comm="syz.5.3330" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1685.712613][   T30] audit: type=1400 audit(2000000279.432:2393): avc:  denied  { ioctl } for  pid=21457 comm="syz.5.3330" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1686.270943][T21473] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1686.652375][   T30] audit: type=1400 audit(2000000279.619:2394): avc:  denied  { write } for  pid=21457 comm="syz.5.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1687.812799][T21488] trusted_key: encrypted_key: insufficient parameters specified
[ 1690.390186][   T30] kauditd_printk_skb: 19 callbacks suppressed
[ 1690.390198][   T30] audit: type=1400 audit(2000000283.998:2414): avc:  denied  { read write } for  pid=21501 comm="syz.4.3340" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1690.453005][   T30] audit: type=1400 audit(2000000283.998:2415): avc:  denied  { open } for  pid=21501 comm="syz.4.3340" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1690.481721][   T30] audit: type=1400 audit(2000000284.082:2416): avc:  denied  { watch_sb watch_reads } for  pid=21515 comm="syz.4.3343" path="/665/file0" dev="tmpfs" ino=3812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1690.556819][   T30] audit: type=1400 audit(2000000284.157:2417): avc:  denied  { write } for  pid=21515 comm="syz.4.3343" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1690.599327][T21518] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1690.680125][   T30] audit: type=1400 audit(2000000284.260:2418): avc:  denied  { write } for  pid=21519 comm="syz.5.3344" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1692.070556][T20738] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1692.242400][T20738] usb 5-1: Using ep0 maxpacket: 8
[ 1692.249209][T20738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.260137][T20738] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00
[ 1692.305808][T20738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.333379][T20738] usb 5-1: config 0 descriptor??
[ 1692.344675][T20738] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1692.575115][   T30] audit: type=1400 audit(2000000286.047:2419): avc:  denied  { read } for  pid=21529 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1692.609820][   T30] audit: type=1400 audit(2000000286.047:2420): avc:  denied  { open } for  pid=21529 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1692.610216][T20984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1692.645724][T20984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1692.654462][T20984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1692.664356][T20984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1692.683018][T20984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1692.706420][   T30] audit: type=1400 audit(2000000286.169:2421): avc:  denied  { mounton } for  pid=21529 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1692.813499][T21532] overlay: filesystem on ./file0 not supported as upperdir
[ 1692.825343][   T30] audit: type=1400 audit(2000000286.253:2422): avc:  denied  { unlink } for  pid=21523 comm="syz.5.3345" name="#70" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1692.875574][   T30] audit: type=1400 audit(2000000286.263:2423): avc:  denied  { mount } for  pid=21523 comm="syz.5.3345" name="/" dev="overlay" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1693.334807][T21529] chnl_net:caif_netlink_parms(): no params data found
[ 1693.874618][T21529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.886621][T21529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1693.908256][T21529] bridge_slave_0: entered allmulticast mode
[ 1693.917451][T21529] bridge_slave_0: entered promiscuous mode
[ 1693.936036][T21529] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1693.944317][T21529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1693.953889][T21529] bridge_slave_1: entered allmulticast mode
[ 1693.984631][T21529] bridge_slave_1: entered promiscuous mode
[ 1694.031659][T21529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1694.042875][T21529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1694.067742][T21529] team0: Port device team_slave_0 added
[ 1694.075248][T21529] team0: Port device team_slave_1 added
[ 1694.095934][T21529] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1694.103439][T21529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1694.129684][T21529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1694.141728][T21529] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1694.148767][T21529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1694.175421][T21529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1694.208239][T21529] hsr_slave_0: entered promiscuous mode
[ 1694.214463][T21529] hsr_slave_1: entered promiscuous mode
[ 1694.220856][T21529] debugfs: 'hsr0' already exists in 'hsr'
[ 1694.226636][T21529] Cannot create hsr debugfs directory
[ 1694.441816][T21529] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1694.467243][T21529] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1694.530157][T20740] usb 5-1: USB disconnect, device number 52
[ 1694.735650][T21529] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1694.872226][T20984] Bluetooth: hci6: command tx timeout
[ 1694.943263][T21529] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1695.184239][T21529] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1695.641743][T21529] 8021q: adding VLAN 0 to HW filter on device team0
[ 1695.658525][T19196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1695.665699][T19196] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1695.680306][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1695.687437][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1695.771012][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1695.771075][   T30] audit: type=1400 audit(2000000289.033:2430): avc:  denied  { create } for  pid=21565 comm="syz.3.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1695.828780][   T30] audit: type=1400 audit(2000000289.051:2431): avc:  denied  { write } for  pid=21565 comm="syz.3.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1696.202762][   T30] audit: type=1400 audit(2000000289.435:2432): avc:  denied  { read write } for  pid=21577 comm="syz.5.3354" name="sg0" dev="devtmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1696.251201][T21583] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1696.251201][T21583]    program syz.5.3354 not setting count and/or reply_len properly
[ 1696.354653][   T30] audit: type=1400 audit(2000000289.472:2433): avc:  denied  { ioctl } for  pid=21577 comm="syz.5.3354" path="/dev/sg0" dev="devtmpfs" ino=826 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1696.887990][T21529] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1697.134441][T20984] Bluetooth: hci6: command tx timeout
[ 1697.317378][T21320] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1697.346516][T21529] veth0_vlan: entered promiscuous mode
[ 1697.387874][T21529] veth1_vlan: entered promiscuous mode
[ 1697.435280][T21529] veth0_macvtap: entered promiscuous mode
[ 1697.456519][T21529] veth1_macvtap: entered promiscuous mode
[ 1697.479581][T21529] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1697.499505][T21320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1697.513402][T21529] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1697.520916][T21320] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1697.546745][T21320] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1697.565327][T21320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.583808][T21320] usb 6-1: Product: syz
[ 1697.593190][T17538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1697.603443][T21320] usb 6-1: Manufacturer: syz
[ 1697.613805][T17538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1697.622793][T21320] usb 6-1: SerialNumber: syz
[ 1697.642655][T17538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1697.649392][T21320] usb 6-1: config 0 descriptor??
[ 1697.656651][T17538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1697.936262][   T30] audit: type=1400 audit(2000000291.045:2434): avc:  denied  { name_bind } for  pid=21588 comm="syz.5.3356" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1698.403509][T11029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1698.531582][T11029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1698.618345][T21320] usb 6-1: USB disconnect, device number 2
[ 1698.734436][T21607] libceph: resolve 'c' (ret=-3): failed
[ 1699.218254][   T30] audit: type=1400 audit(2000000291.054:2435): avc:  denied  { node_bind } for  pid=21588 comm="syz.5.3356" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1699.264359][T17538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1699.272206][T17538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1699.309968][T20984] Bluetooth: hci6: command tx timeout
[ 1699.761423][T21613] overlayfs: failed to clone upperpath
[ 1699.778718][   T30] audit: type=1400 audit(2000000292.776:2436): avc:  denied  { wake_alarm } for  pid=21609 comm="syz.6.3346" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1699.839867][T21618] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3363'.
[ 1700.217301][   T30] audit: type=1400 audit(2000000292.813:2437): avc:  denied  { append } for  pid=21616 comm="syz.4.3363" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1700.256836][   T30] audit: type=1400 audit(2000000292.823:2438): avc:  denied  { ioctl } for  pid=21616 comm="syz.4.3363" path="socket:[71855]" dev="sockfs" ino=71855 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1700.353643][   T30] audit: type=1400 audit(2000000292.832:2439): avc:  denied  { write } for  pid=21616 comm="syz.4.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1700.675658][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 210 seconds
[ 1700.689889][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 210 seconds
[ 1700.706812][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 210 seconds
[ 1700.720137][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 210 seconds
[ 1701.173970][T21612] Process accounting resumed
[ 1701.226779][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1701.226803][   T30] audit: type=1400 audit(2000000294.133:2442): avc:  denied  { read write } for  pid=21641 comm="syz.6.3367" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1701.259924][   T30] audit: type=1400 audit(2000000294.161:2443): avc:  denied  { open } for  pid=21641 comm="syz.6.3367" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1701.380790][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3367'.
[ 1701.527889][T20984] Bluetooth: hci6: command tx timeout
[ 1702.019035][   T30] audit: type=1400 audit(2000000294.835:2444): avc:  denied  { create } for  pid=21648 comm="syz.5.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1702.316672][   T30] audit: type=1400 audit(2000000294.835:2445): avc:  denied  { setopt } for  pid=21648 comm="syz.5.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1702.342975][   T30] audit: type=1400 audit(2000000294.835:2446): avc:  denied  { connect } for  pid=21648 comm="syz.5.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1703.972502][   T30] audit: type=1400 audit(2000000296.697:2447): avc:  denied  { accept } for  pid=21663 comm="syz.5.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1704.254711][   T30] audit: type=1400 audit(2000000296.706:2448): avc:  denied  { read } for  pid=21663 comm="syz.5.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1704.387842][   T30] audit: type=1400 audit(2000000296.772:2449): avc:  denied  { write } for  pid=21663 comm="syz.5.3372" path="socket:[71386]" dev="sockfs" ino=71386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1704.435682][   T30] audit: type=1400 audit(2000000297.062:2450): avc:  denied  { ioctl } for  pid=21667 comm="syz.4.3373" path="socket:[71929]" dev="sockfs" ino=71929 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1704.469285][   T30] audit: type=1400 audit(2000000297.174:2451): avc:  denied  { connect } for  pid=21666 comm="syz.3.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1704.818766][T21680] hub 9-0:1.0: USB hub found
[ 1704.824228][T21680] hub 9-0:1.0: 1 port detected
[ 1704.994529][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'.
[ 1705.033193][T21684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3376'.
[ 1705.617346][T21690] IPv6: sit2: Disabled Multicast RS
[ 1706.028846][T21693] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3379'.
[ 1706.083869][T21693] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[ 1706.456435][T13611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1706.468293][T13611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1706.484548][T13611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1706.495675][T13611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1706.505839][T13611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1706.717957][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1706.717972][   T30] audit: type=1400 audit(2000000299.270:2454): avc:  denied  { map } for  pid=21692 comm="syz.6.3379" path="/dev/vbi5" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1707.095572][   T30] audit: type=1400 audit(2000000299.617:2455): avc:  denied  { write } for  pid=21703 comm="syz.3.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1707.450478][T21712] netlink: 'syz.6.3382': attribute type 1 has an invalid length.
[ 1707.772577][T21714] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[ 1707.906378][   T30] audit: type=1400 audit(2000000300.328:2456): avc:  denied  { getopt } for  pid=21707 comm="syz.6.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1709.340078][T13611] Bluetooth: hci7: command tx timeout
[ 1709.549894][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3384'.
[ 1709.559237][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'.
[ 1709.569598][T21724] netlink: 'syz.5.3384': attribute type 11 has an invalid length.
[ 1709.577839][T21724] netlink: 'syz.5.3384': attribute type 13 has an invalid length.
[ 1709.904313][T21694] chnl_net:caif_netlink_parms(): no params data found
[ 1710.045228][T21694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1710.059232][T21694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1710.072040][T21694] bridge_slave_0: entered allmulticast mode
[ 1710.085735][T21694] bridge_slave_0: entered promiscuous mode
[ 1710.107348][T21694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1710.115873][T21694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1710.125142][T21694] bridge_slave_1: entered allmulticast mode
[ 1710.132396][T21694] bridge_slave_1: entered promiscuous mode
[ 1710.168511][T21694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1710.223037][T21694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1710.273947][T21694] team0: Port device team_slave_0 added
[ 1710.281742][T21694] team0: Port device team_slave_1 added
[ 1710.308464][T21694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1710.341895][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1710.373521][T21694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1710.406309][T21694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1710.426766][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1710.610109][T21694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1711.584716][T20984] Bluetooth: hci7: command tx timeout
[ 1711.621161][T21754] netlink: 'syz.4.3389': attribute type 2 has an invalid length.
[ 1712.116919][T21694] hsr_slave_0: entered promiscuous mode
[ 1712.163921][T21694] hsr_slave_1: entered promiscuous mode
[ 1712.214272][T21694] debugfs: 'hsr0' already exists in 'hsr'
[ 1712.243706][T21694] Cannot create hsr debugfs directory
[ 1712.269128][T21760] input: syz0 as /devices/virtual/input/input40
[ 1712.287933][   T30] audit: type=1400 audit(2000000304.464:2457): avc:  denied  { ioctl } for  pid=21757 comm="syz.5.3390" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1712.469769][   T30] audit: type=1400 audit(2000000304.595:2458): avc:  denied  { read } for  pid=5161 comm="acpid" name="event4" dev="devtmpfs" ino=3162 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1712.658484][   T30] audit: type=1400 audit(2000000304.595:2459): avc:  denied  { open } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3162 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1712.816386][   T30] audit: type=1400 audit(2000000304.604:2460): avc:  denied  { ioctl } for  pid=5161 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3162 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1713.753436][T20984] Bluetooth: hci7: command tx timeout
[ 1713.822371][T21694] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1713.957706][T21694] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1714.102710][T21694] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1714.234400][   T30] audit: type=1400 audit(2000000306.317:2461): avc:  denied  { create } for  pid=21762 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1714.283248][T21694] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1714.361348][   T30] audit: type=1400 audit(2000000306.392:2462): avc:  denied  { remove_name } for  pid=21771 comm="syz.4.3393" name="binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1714.536234][   T30] audit: type=1400 audit(2000000306.392:2463): avc:  denied  { unlink } for  pid=21771 comm="syz.4.3393" name="binder1" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1714.941830][   T30] audit: type=1400 audit(2000000306.953:2464): avc:  denied  { lock } for  pid=21776 comm="syz.5.3395" path="socket:[72819]" dev="sockfs" ino=72819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1715.159806][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3395'.
[ 1715.629393][T21694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1715.708801][T21694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1715.750191][T17913] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1715.757303][T17913] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1715.897001][T17913] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1715.904140][T17913] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1715.976461][T20984] Bluetooth: hci7: command tx timeout
[ 1716.050035][T21792] netlink: 'syz.5.3397': attribute type 1 has an invalid length.
[ 1716.767028][T21804] overlayfs: failed to resolve './file2': -2
[ 1717.575311][T21805] Can't find ip_set type bitmap:ip
[ 1718.555057][T21796] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode
[ 1718.811334][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'.
[ 1719.380053][   T30] audit: type=1400 audit(2000000311.127:2465): avc:  denied  { read write } for  pid=21820 comm="syz.4.3401" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1719.409433][T21824] 9p: Bad value for 'rfdno'
[ 1719.550352][   T30] audit: type=1400 audit(2000000311.127:2466): avc:  denied  { open } for  pid=21820 comm="syz.4.3401" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1719.780460][   T30] audit: type=1400 audit(2000000311.127:2467): avc:  denied  { ioctl } for  pid=21820 comm="syz.4.3401" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1720.060130][   T30] audit: type=1400 audit(2000000311.155:2468): avc:  denied  { mounton } for  pid=21820 comm="syz.4.3401" path="/682/file0" dev="tmpfs" ino=3910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1720.618793][   T30] audit: type=1400 audit(2000000312.222:2469): avc:  denied  { create } for  pid=21826 comm="syz.5.3402" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1720.733938][   T30] audit: type=1400 audit(2000000312.231:2470): avc:  denied  { write } for  pid=21826 comm="syz.5.3402" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1720.902922][   T30] audit: type=1400 audit(2000000312.231:2471): avc:  denied  { open } for  pid=21826 comm="syz.5.3402" path="/22/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1721.120295][   T30] audit: type=1400 audit(2000000312.231:2472): avc:  denied  { bind } for  pid=21826 comm="syz.5.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1721.191532][   T30] audit: type=1400 audit(2000000312.231:2473): avc:  denied  { listen } for  pid=21826 comm="syz.5.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1721.223032][   T30] audit: type=1400 audit(2000000312.231:2474): avc:  denied  { accept } for  pid=21826 comm="syz.5.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1721.486109][T21694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1722.024255][T21855] dvmrp9: entered allmulticast mode
[ 1722.274887][T21694] veth0_vlan: entered promiscuous mode
[ 1722.291850][T21694] veth1_vlan: entered promiscuous mode
[ 1722.318312][T21694] veth0_macvtap: entered promiscuous mode
[ 1722.386010][T21694] veth1_macvtap: entered promiscuous mode
[ 1722.537637][T21694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1722.620824][T21694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1722.830925][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3405'.
[ 1722.978763][T19206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.039796][T19206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.168490][ T6193] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.195345][T21859] zonefs (nullb0) ERROR: Not a zoned block device
[ 1723.290330][ T7258] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.488584][ T7260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1723.496589][ T7260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1723.714399][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1723.733275][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1723.946694][T21312] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[ 1724.096644][T21876] fuse: Unknown parameter 'euid<00000000000000000000'
[ 1724.257989][T21878] overlayfs: failed to resolve './file2': -2
[ 1724.614211][T21312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1724.637088][T21312] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 1724.736200][T21312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.764951][T21312] usb 5-1: config 0 descriptor??
[ 1724.791232][T21312] dvb-usb: found a 'TeVii S662' in warm state.
[ 1724.817818][T21312] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1724.834888][T21312] dvb-usb: bulk message failed: -22 (2/0)
[ 1724.953006][T21312] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1724.974107][T21312] dvb-usb: TeVii S662 error while loading driver (-19)
[ 1725.319969][T21888] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1725.319969][T21888]    program syz.5.3411 not setting count and/or reply_len properly
[ 1725.513379][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 1725.513410][   T30] audit: type=1400 audit(2000000316.854:2492): avc:  denied  { map } for  pid=21864 comm="syz.4.3409" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1726.498637][   T30] audit: type=1400 audit(2000000317.780:2493): avc:  denied  { write } for  pid=21897 comm="syz.6.3412" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1726.837197][T21900] netlink: 'syz.6.3412': attribute type 2 has an invalid length.
[ 1727.079913][T21310] usb 5-1: USB disconnect, device number 53
[ 1727.556505][T21904] ceph: No mds server is up or the cluster is laggy
[ 1727.563487][T16713] libceph: connect (1)[c::]:6789 error -101
[ 1727.574101][T16713] libceph: mon0 (1)[c::]:6789 connect error
[ 1729.006512][T21900] ‚#{6c: entered promiscuous mode
[ 1729.268436][T21917] lo: entered allmulticast mode
[ 1729.548243][T21918] hub 9-0:1.0: USB hub found
[ 1729.566037][T21918] hub 9-0:1.0: 1 port detected
[ 1730.559476][T20984] Bluetooth: hci6: unexpected event 0x14 length: 20 > 6
[ 1730.678365][   T30] audit: type=1400 audit(2000000321.683:2494): avc:  denied  { open } for  pid=21929 comm="syz.6.3421" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1731.662545][T21943] netlink: 'syz.4.3419': attribute type 2 has an invalid length.
[ 1731.853148][   T30] audit: type=1400 audit(2000000322.618:2495): avc:  denied  { listen } for  pid=21938 comm="syz.4.3419" lport=46229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1732.285173][T21949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3424'.
[ 1732.702163][T21955] No such timeout policy "syz0"
[ 1732.732513][   T30] audit: type=1400 audit(2000000323.610:2496): avc:  denied  { bind } for  pid=21948 comm="syz.4.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1733.212232][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 240 seconds
[ 1733.223007][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 240 seconds
[ 1733.234468][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 240 seconds
[ 1733.245786][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 240 seconds
[ 1733.313619][   T30] audit: type=1400 audit(2000000323.610:2497): avc:  denied  { write } for  pid=21948 comm="syz.4.3425" path="socket:[74443]" dev="sockfs" ino=74443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1733.391304][T21947] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21947 comm=syz.5.3424
[ 1733.492589][T21960] fuse: Bad value for 'fd'
[ 1733.512095][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3426'.
[ 1734.165491][T21970] ceph: No mds server is up or the cluster is laggy
[ 1734.174021][T20740] libceph: connect (1)[c::]:6789 error -101
[ 1734.180974][T20740] libceph: mon0 (1)[c::]:6789 connect error
[ 1734.561542][T21977] random: crng reseeded on system resumption
[ 1734.579303][   T30] audit: type=1400 audit(2000000325.323:2498): avc:  denied  { write } for  pid=21968 comm="syz.5.3428" path="socket:[74456]" dev="sockfs" ino=74456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1734.788911][   T30] audit: type=1400 audit(2000000325.332:2499): avc:  denied  { read } for  pid=21968 comm="syz.5.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1734.873400][   T30] audit: type=1400 audit(2000000325.332:2500): avc:  denied  { read write } for  pid=21968 comm="syz.5.3428" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1734.995867][   T30] audit: type=1400 audit(2000000325.332:2501): avc:  denied  { ioctl open } for  pid=21968 comm="syz.5.3428" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1735.636149][   T30] audit: type=1400 audit(2000000325.473:2502): avc:  denied  { ioctl } for  pid=21968 comm="syz.5.3428" path="/dev/video8" dev="devtmpfs" ino=953 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1735.679062][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'.
[ 1735.752611][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'.
[ 1736.217046][T21987] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3430'.
[ 1736.592986][T22002] buffer_io_error: 18 callbacks suppressed
[ 1736.593019][T22002] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1736.607569][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1736.618178][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1737.094297][T21319] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1737.115805][T22002] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1737.119159][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.134285][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1737.174718][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.182191][T22002] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1737.185402][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1737.210562][T22002] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1737.218595][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.229280][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1737.247048][T22002] Buffer I/O error on dev loop9, logical block 1, async page read
[ 1737.256094][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.266752][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1737.288207][T21319] usb 8-1: config 112 has an invalid interface number: 140 but max is 2
[ 1737.302128][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.319696][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.330381][T22002] ldm_validate_partition_table(): Disk read failed.
[ 1737.338240][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.369184][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.375724][T21319] usb 8-1: config 112 has an invalid interface number: 55 but max is 2
[ 1737.388927][T21319] usb 8-1: config 112 has an invalid descriptor of length 1, skipping remainder of the config
[ 1737.392304][    C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1737.400245][T21319] usb 8-1: config 112 has no interface number 0
[ 1737.416616][T21319] usb 8-1: config 112 has no interface number 1
[ 1737.423771][T22002] Dev loop9: unable to read RDB block 0
[ 1737.431508][T21319] usb 8-1: config 112 interface 2 altsetting 1 endpoint 0x4 has an invalid bInterval 195, changing to 7
[ 1737.464873][T21319] usb 8-1: config 112 interface 2 altsetting 1 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1737.477370][T21319] usb 8-1: config 112 interface 2 altsetting 1 endpoint 0x8A has invalid maxpacket 512, setting to 64
[ 1737.509225][T22002]  loop9: unable to read partition table
[ 1737.532683][T22002] loop9: partition table beyond EOD, truncated
[ 1737.560747][T21319] usb 8-1: config 112 interface 2 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1737.572203][T21319] usb 8-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1737.732874][T21319] usb 8-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[ 1737.786301][T21319] usb 8-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 1737.932028][T21319] usb 8-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1738.055618][T21319] usb 8-1: config 112 interface 140 altsetting 139 endpoint 0x2 has an invalid bInterval 130, changing to 7
[ 1738.088540][T21319] usb 8-1: config 112 interface 140 altsetting 139 has a duplicate endpoint with address 0x8, skipping
[ 1738.112936][T21319] usb 8-1: config 112 interface 140 altsetting 139 has a duplicate endpoint with address 0x8, skipping
[ 1738.144865][T21319] usb 8-1: config 112 interface 55 altsetting 15 endpoint 0xF has invalid maxpacket 959, setting to 64
[ 1738.168573][T21319] usb 8-1: config 112 interface 55 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[ 1738.190542][T21319] usb 8-1: config 112 interface 55 altsetting 15 has a duplicate endpoint with address 0xA, skipping
[ 1738.218221][T21319] usb 8-1: config 112 interface 55 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 1738.257676][T21319] usb 8-1: config 112 interface 2 has no altsetting 0
[ 1738.274848][T21319] usb 8-1: config 112 interface 140 has no altsetting 0
[ 1738.288160][T21319] usb 8-1: config 112 interface 55 has no altsetting 0
[ 1738.305754][T21319] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1057, bcdDevice=b5.ac
[ 1738.324950][T21319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.458744][T21319] usb 8-1: Product: syz
[ 1738.511584][T21319] usb 8-1: Manufacturer: syz
[ 1738.567305][T21319] usb 8-1: SerialNumber: syz
[ 1738.575485][   T30] audit: type=1400 audit(2000000329.085:2503): avc:  denied  { mounton } for  pid=22017 comm="syz.4.3436" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1738.602936][T22024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1738.990945][   T30] audit: type=1400 audit(2000000329.431:2504): avc:  denied  { connect } for  pid=22025 comm="syz.5.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1739.173681][T22034] netlink: 'syz.5.3438': attribute type 13 has an invalid length.
[ 1739.202362][   T30] audit: type=1400 audit(2000000329.440:2505): avc:  denied  { ioctl } for  pid=22025 comm="syz.5.3438" path="socket:[74529]" dev="sockfs" ino=74529 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1739.490912][   T30] audit: type=1400 audit(2000000329.440:2506): avc:  denied  { ioctl } for  pid=22025 comm="syz.5.3438" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1739.537728][   T30] audit: type=1400 audit(2000000329.450:2507): avc:  denied  { write } for  pid=22025 comm="syz.5.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1740.193206][T22044] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3440'.
[ 1740.236409][   T30] audit: type=1400 audit(2000000330.592:2508): avc:  denied  { nlmsg_write } for  pid=22038 comm="syz.4.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1740.500001][T21319] option 8-1:112.140: GSM modem (1-port) converter detected
[ 1740.585499][T21319] usb 8-1: USB disconnect, device number 2
[ 1740.639900][T21319] option 8-1:112.140: device disconnected
[ 1741.927439][T22034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1741.935036][T22034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1742.214013][   T30] audit: type=1400 audit(2000000332.491:2509): avc:  denied  { mount } for  pid=22049 comm="syz.4.3443" name="/" dev="ramfs" ino=74579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1742.888424][T22034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1742.917460][   T30] audit: type=1400 audit(2000000333.146:2510): avc:  denied  { bind } for  pid=22058 comm="syz.6.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1742.983720][   T30] audit: type=1400 audit(2000000333.146:2511): avc:  denied  { name_bind } for  pid=22058 comm="syz.6.3445" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1743.021989][T22034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1743.076911][   T30] audit: type=1400 audit(2000000333.146:2512): avc:  denied  { node_bind } for  pid=22058 comm="syz.6.3445" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1743.965310][ T7260] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.974457][ T7260] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1743.983743][T22079] lo: entered allmulticast mode
[ 1743.989121][ T7260] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1744.003755][ T7260] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1744.082391][T22081] pim6reg: entered allmulticast mode
[ 1744.099362][   T30] audit: type=1400 audit(2000000334.250:2513): avc:  denied  { create } for  pid=22082 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1744.122322][   T30] audit: type=1400 audit(2000000334.250:2514): avc:  denied  { listen } for  pid=22082 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1744.393478][   T30] audit: type=1400 audit(2000000334.279:2515): avc:  denied  { create } for  pid=22082 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1744.929166][   T30] audit: type=1400 audit(2000000334.587:2516): avc:  denied  { ioctl } for  pid=22082 comm="syz.3.3448" path="socket:[74610]" dev="sockfs" ino=74610 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1745.357146][   T30] audit: type=1400 audit(2000000335.439:2517): avc:  denied  { ioctl } for  pid=22090 comm="syz.6.3450" path="socket:[75001]" dev="sockfs" ino=75001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1745.424865][T22091] dummy0: entered promiscuous mode
[ 1746.077622][T20738] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1746.097569][T22090] dummy0: left promiscuous mode
[ 1746.693660][T20738] usb 6-1: Using ep0 maxpacket: 8
[ 1746.713054][T20738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1746.724109][T20738] usb 6-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00
[ 1746.734271][T20738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1746.746792][T20738] usb 6-1: config 0 descriptor??
[ 1746.757006][T20738] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1747.032883][T22107] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3456'.
[ 1747.087332][   T30] audit: type=1400 audit(2000000337.058:2518): avc:  denied  { create } for  pid=22108 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1747.148562][   T30] audit: type=1400 audit(2000000337.077:2519): avc:  denied  { getopt } for  pid=22108 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1748.113558][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3456'.
[ 1748.123870][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1748.665811][   T30] audit: type=1400 audit(2000000338.527:2520): avc:  denied  { unmount } for  pid=21529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1748.785809][   T30] audit: type=1400 audit(2000000338.649:2521): avc:  denied  { read } for  pid=22118 comm="syz.6.3458" name="binder0" dev="binder" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1748.876289][T22121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3457'.
[ 1749.108152][   T30] audit: type=1400 audit(2000000338.667:2522): avc:  denied  { open } for  pid=22118 comm="syz.6.3458" path="/dev/binderfs/binder0" dev="binder" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1749.717714][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1749.717729][   T30] audit: type=1400 audit(2000000339.519:2526): avc:  denied  { mounton } for  pid=22118 comm="syz.6.3458" path="/18/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1749.718956][T22127] No source specified
[ 1749.768941][T21320] usb 6-1: USB disconnect, device number 3
[ 1750.032135][T22136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3461'.
[ 1750.051490][T22136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3461'.
[ 1750.494700][   T30] audit: type=1400 audit(2000000340.249:2527): avc:  denied  { setcurrent } for  pid=22134 comm="syz.5.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1750.522542][   T30] audit: type=1400 audit(2000000340.268:2528): avc:  denied  { ioctl } for  pid=22137 comm="syz.7.3463" path="socket:[75068]" dev="sockfs" ino=75068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1750.538813][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3458'.
[ 1751.105005][T22149] Cannot find add_set index 65532 as target
[ 1751.562681][   T30] audit: type=1400 audit(2000000340.876:2529): avc:  denied  { execute } for  pid=22146 comm="syz.5.3465" name="file1" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1751.764698][   T30] audit: type=1400 audit(2000000341.278:2530): avc:  denied  { connect } for  pid=22137 comm="syz.7.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1752.618791][   T30] audit: type=1400 audit(2000000342.233:2531): avc:  denied  { setopt } for  pid=22153 comm="syz.3.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1754.104144][   T30] audit: type=1400 audit(2000000343.580:2532): avc:  denied  { kexec_image_load } for  pid=22171 comm="syz.4.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[ 1754.191583][   T30] audit: type=1400 audit(2000001111.615:2533): avc:  denied  { append } for  pid=22171 comm="syz.4.3470" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1754.453203][T22180] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3471'.
[ 1754.467157][T22180] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3471'.
[ 1754.584586][   T30] audit: type=1400 audit(2000001111.961:2534): avc:  denied  { ioctl } for  pid=22178 comm="syz.7.3471" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75791 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1754.863781][   T30] audit: type=1400 audit(2000001112.391:2535): avc:  denied  { setopt } for  pid=22182 comm="syz.6.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1755.147317][T22189] netlink: 'syz.7.3473': attribute type 13 has an invalid length.
[ 1755.155398][T22189] netlink: 'syz.7.3473': attribute type 17 has an invalid length.
[ 1755.963156][T22189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1756.345690][T22206] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1756.345690][T22206]    program syz.7.3477 not setting count and/or reply_len properly
[ 1756.778526][T22209] ALSA: mixer_oss: invalid OSS volume ''
[ 1757.217278][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1757.217293][   T30] audit: type=1400 audit(2000001114.890:2537): avc:  denied  { create } for  pid=22213 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1757.245133][   T30] audit: type=1400 audit(2000001114.911:2538): avc:  denied  { ioctl } for  pid=22213 comm="syz.5.3479" path="socket:[75916]" dev="sockfs" ino=75916 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1757.805632][   T30] audit: type=1400 audit(2000001114.911:2539): avc:  denied  { bind } for  pid=22213 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1758.546604][T22222] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3481'.
[ 1759.894361][T17538] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.904242][   T30] audit: type=1400 audit(2000001117.715:2540): avc:  denied  { getopt } for  pid=22218 comm="syz.7.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1760.563609][T22243] xt_hashlimit: size too large, truncated to 1048576
[ 1761.334404][T22238] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1761.334404][T22238]    program syz.5.3485 not setting count and/or reply_len properly
[ 1761.931382][T22259] dummy0: entered promiscuous mode
[ 1762.480210][T22260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1762.532610][T22254] dummy0: left promiscuous mode
[ 1763.766517][   T30] audit: type=1400 audit(2000001121.767:2541): avc:  denied  { setopt } for  pid=22272 comm="syz.5.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1763.857590][   T30] audit: type=1400 audit(2000001121.767:2542): avc:  denied  { connect } for  pid=22272 comm="syz.5.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1763.969129][T22280] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3493'.
[ 1764.283030][T22286] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1764.505495][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 270 seconds
[ 1764.525078][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 270 seconds
[ 1764.544591][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 270 seconds
[ 1764.555777][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 270 seconds
[ 1765.695341][T20984] Bluetooth: hci7: command tx timeout
[ 1765.850732][   T30] audit: type=1400 audit(2000001891.943:2543): avc:  denied  { mount } for  pid=22310 comm="syz.7.3496" name="/" dev="autofs" ino=76046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1765.919427][   T30] audit: type=1400 audit(2000001891.943:2544): avc:  denied  { shutdown } for  pid=22310 comm="syz.7.3496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1766.955154][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'.
[ 1766.964492][T22332] bridge_slave_1: left allmulticast mode
[ 1766.970609][T22332] bridge_slave_1: left promiscuous mode
[ 1766.978649][T22332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.463045][T22332] bridge_slave_0: left allmulticast mode
[ 1767.468743][T22332] bridge_slave_0: left promiscuous mode
[ 1767.474611][T22332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.488106][T22335] netlink: 'syz.6.3499': attribute type 1 has an invalid length.
[ 1767.540503][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3499'.
[ 1767.701678][T22340] 9p: Bad value for 'wfdno'
[ 1767.767648][T22335] Bluetooth: MGMT ver 1.23
[ 1767.826692][T22348] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1767.891373][   T30] audit: type=1400 audit(2000001894.012:2545): avc:  denied  { watch } for  pid=22341 comm="syz.5.3502" path="/46" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1768.043137][T22348] netdevsim netdevsim5: Direct firmware load for /
[ 1768.043137][T22348]  failed with error -2
[ 1768.073498][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3499'.
[ 1768.273510][T22348] netdevsim netdevsim5: Falling back to sysfs fallback for: /
[ 1768.273510][T22348] 
[ 1768.316575][   T30] audit: type=1400 audit(2000001894.495:2546): avc:  denied  { firmware_load } for  pid=22341 comm="syz.5.3502" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1769.984949][   T30] audit: type=1400 audit(2000001896.280:2547): avc:  denied  { unmount } for  pid=21694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1770.399115][   T30] audit: type=1400 audit(2000001896.689:2548): avc:  denied  { create } for  pid=22369 comm="syz.7.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1770.712300][   T30] audit: type=1400 audit(2000001896.689:2549): avc:  denied  { ioctl } for  pid=22369 comm="syz.7.3506" path="socket:[76856]" dev="sockfs" ino=76856 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1770.841911][   T30] audit: type=1400 audit(2000001897.193:2550): avc:  denied  { setopt } for  pid=22374 comm="syz.4.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1771.280144][T22379] CUSE: info not properly terminated
[ 1772.067110][   T30] audit: type=1400 audit(2000001898.358:2551): avc:  denied  { setopt } for  pid=22381 comm="syz.7.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1772.175367][T22388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3509'.
[ 1772.194505][T22388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3509'.
[ 1774.235753][T22376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1774.389154][T22397] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1774.688200][T22400] xt_hashlimit: size too large, truncated to 1048576
[ 1775.170288][   T30] audit: type=1400 audit(2000001901.729:2552): avc:  denied  { append } for  pid=22396 comm="syz.6.3514" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1775.408113][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'.
[ 1775.465245][   T30] audit: type=1400 audit(2000001901.771:2553): avc:  denied  { ioctl } for  pid=22394 comm="syz.3.3512" path="socket:[76992]" dev="sockfs" ino=76992 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1775.622604][T22397] hsr_slave_1 (unregistering): left promiscuous mode
[ 1775.776735][T22416] overlayfs: missing 'lowerdir'
[ 1776.010560][T22417] overlayfs: failed to resolve './file2': -2
[ 1776.444795][T22419] Can't find ip_set type bitmap:ip
[ 1776.528849][T22413] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3516'.
[ 1776.841085][T22428] overlay: filesystem on ./file0 not supported as upperdir
[ 1776.988334][T22433] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1776.988334][T22433]    program syz.4.3518 not setting count and/or reply_len properly
[ 1777.204954][T22438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1777.280362][T22442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3523'.
[ 1777.289468][T22442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3523'.
[ 1778.151566][T22448] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1778.207264][T22448] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1779.046428][   T30] audit: type=1400 audit(2000001904.847:2554): avc:  denied  { write } for  pid=22445 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1779.725542][T22462] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1779.725542][T22462]    program syz.4.3527 not setting count and/or reply_len properly
[ 1779.764965][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'.
[ 1779.814508][T22460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1780.323913][T22464] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3529'.
[ 1780.645347][   T30] audit: type=1400 audit(2000001907.377:2555): avc:  denied  { connect } for  pid=22465 comm="syz.7.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1780.743934][T22476] overlayfs: missing 'lowerdir'
[ 1780.824455][T22477] overlayfs: failed to resolve './file2': -2
[ 1781.121676][   T30] audit: type=1400 audit(2000001907.388:2556): avc:  denied  { write } for  pid=22465 comm="syz.7.3532" path="socket:[76302]" dev="sockfs" ino=76302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1781.369062][T22482] input: syz1 as /devices/virtual/input/input41
[ 1782.279302][   T30] audit: type=1400 audit(2000001909.089:2557): avc:  denied  { mounton } for  pid=22494 comm="syz.4.3537" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[ 1783.668465][T22510] hub 9-0:1.0: USB hub found
[ 1783.673402][T22510] hub 9-0:1.0: 1 port detected
[ 1784.108546][T22515] overlayfs: missing 'workdir'
[ 1784.184355][T22516] overlayfs: failed to resolve './file2': -2
[ 1784.817795][ T5803] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1784.989139][ T5803] usb 5-1: Using ep0 maxpacket: 8
[ 1785.001135][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1785.019776][ T5803] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00
[ 1785.039529][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.066010][ T5803] usb 5-1: config 0 descriptor??
[ 1785.102222][ T5803] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1785.263318][   T30] audit: type=1400 audit(2000001912.280:2558): avc:  denied  { create } for  pid=22529 comm="syz.7.3543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[ 1785.359913][T22533] block device autoloading is deprecated and will be removed.
[ 1786.335336][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'.
[ 1786.345454][T22544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1786.452980][T22539] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1786.452980][T22539]    program syz.7.3545 not setting count and/or reply_len properly
[ 1787.234745][   T30] audit: type=1400 audit(2000001914.086:2559): avc:  denied  { setopt } for  pid=22547 comm="syz.5.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1787.279709][   T30] audit: type=1400 audit(2000001914.454:2560): avc:  denied  { setopt } for  pid=22549 comm="syz.7.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1787.534318][ T5803] usb 5-1: USB disconnect, device number 54
[ 1788.280024][T22571] hub 9-0:1.0: USB hub found
[ 1788.286482][T22571] hub 9-0:1.0: 1 port detected
[ 1788.623620][T22577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3552'.
[ 1789.436209][T22583] overlayfs: missing 'workdir'
[ 1789.511395][T22584] overlayfs: failed to resolve './file2': -2
[ 1789.927625][T22587] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3554'.
[ 1790.269978][T22593] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3555'.
[ 1791.241083][T22605] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1791.241083][T22605]    program syz.7.3558 not setting count and/or reply_len properly
[ 1792.676066][T20984] Bluetooth: hci7: unexpected event 0x04 length: 245 > 10
[ 1792.676168][T20984] Bluetooth: hci7: connection err: -111
[ 1792.701994][   T30] audit: type=1400 audit(2000001919.588:2561): avc:  denied  { create } for  pid=22609 comm="syz.7.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1793.689829][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 300 seconds
[ 1793.700643][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 300 seconds
[ 1793.712222][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 300 seconds
[ 1793.724683][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 300 seconds
[ 1793.839688][T22611] fuse: Bad value for 'fd'
[ 1794.404224][T22621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1795.222708][   T30] audit: type=1400 audit(2000002178.796:2562): avc:  denied  { read write } for  pid=22629 comm="syz.4.3563" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1795.276310][   T30] audit: type=1400 audit(2000002178.796:2563): avc:  denied  { read } for  pid=22629 comm="syz.4.3563" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1795.318209][   T30] audit: type=1400 audit(2000002178.796:2564): avc:  denied  { open } for  pid=22629 comm="syz.4.3563" path="/717/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[ 1795.673341][T22641] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3566'.
[ 1796.200386][T13611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1796.213370][T13611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1796.222277][T13611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1796.298724][T13611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1796.314154][T22648] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1796.314154][T22648]    program syz.4.3564 not setting count and/or reply_len properly
[ 1796.359623][T13611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1796.405067][T22645] Failed to initialize the IGMP autojoin socket (err -2)
[ 1796.701230][T22655] overlayfs: missing 'lowerdir'
[ 1797.108454][T22658] overlayfs: failed to resolve './file2': -2
[ 1797.351684][T22659] Can't find ip_set type bitmap:ip
[ 1797.451991][   T30] audit: type=1400 audit(2000002181.137:2565): avc:  denied  { read } for  pid=5471 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1797.493306][T22656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1797.873392][T22669] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1797.873392][T22669]    program syz.7.3571 not setting count and/or reply_len properly
[ 1798.047286][   T30] audit: type=1400 audit(2000002181.756:2566): avc:  denied  { search } for  pid=5471 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1798.073385][   T30] audit: type=1400 audit(2000002181.756:2567): avc:  denied  { search } for  pid=5471 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1798.076568][T20740] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1798.106505][   T30] audit: type=1400 audit(2000002181.756:2568): avc:  denied  { search } for  pid=5471 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1798.142754][   T30] audit: type=1400 audit(2000002181.756:2569): avc:  denied  { read } for  pid=5471 comm="dhcpcd" name="n141" dev="tmpfs" ino=8840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1798.188560][T22645] chnl_net:caif_netlink_parms(): no params data found
[ 1798.226746][   T30] audit: type=1400 audit(2000002181.756:2570): avc:  denied  { open } for  pid=5471 comm="dhcpcd" path="/run/udev/data/n141" dev="tmpfs" ino=8840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1798.275006][   T30] audit: type=1400 audit(2000002181.756:2571): avc:  denied  { getattr } for  pid=5471 comm="dhcpcd" path="/run/udev/data/n141" dev="tmpfs" ino=8840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1798.291260][T20740] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1798.316124][T13611] Bluetooth: hci8: command tx timeout
[ 1798.341914][T22645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1798.349163][T22645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.356629][T22645] bridge_slave_0: entered allmulticast mode
[ 1798.393186][T20740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1798.464810][T20740] usb 6-1: Product: syz
[ 1798.465498][T22645] bridge_slave_0: entered promiscuous mode
[ 1798.475756][T20740] usb 6-1: Manufacturer: syz
[ 1798.475808][T20740] usb 6-1: SerialNumber: syz
[ 1798.513882][T22645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1798.529814][T22645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1798.530205][T20740] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1798.547036][T22645] bridge_slave_1: entered allmulticast mode
[ 1798.559933][T22645] bridge_slave_1: entered promiscuous mode
[ 1798.572442][   T30] audit: type=1400 audit(2000002182.302:2572): avc:  denied  { firmware_load } for  pid=16713 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 1798.581560][T16713] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1798.725510][   T30] audit: type=1400 audit(2000002182.460:2573): avc:  denied  { ioctl } for  pid=22675 comm="syz.7.3572" path="socket:[76792]" dev="sockfs" ino=76792 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1798.779909][T22680] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1798.806471][T22680] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1798.813758][T22680] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1799.297084][T13611] Bluetooth: hci5: command 0x0406 tx timeout
[ 1799.324474][T22645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1799.397397][T22645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1799.484356][T22645] smc: adding net device veth1_to_team with user defined pnetid ßßßß
[ 1799.611325][T22686] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3573'.
[ 1799.622815][T22645] team0: Port device team_slave_0 added
[ 1799.674924][T22645] team0: Port device team_slave_1 added
[ 1799.796068][T22645] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1799.803663][T22645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1799.842936][T22645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1800.028455][T22694] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1800.028455][T22694]    program syz.7.3574 not setting count and/or reply_len properly
[ 1800.277578][T20984] Bluetooth: hci8: command tx timeout
[ 1800.326698][T22645] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1800.339367][T22645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1800.374773][T16713] usb 6-1: Service connection timeout for: 256
[ 1800.381018][T16713] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1800.407212][T22645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1800.490573][T21312] usb 6-1: USB disconnect, device number 4
[ 1800.490878][T16713] ath9k_htc: Failed to initialize the device
[ 1800.567546][T21312] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1801.824958][T22645] hsr_slave_0: entered promiscuous mode
[ 1801.837569][T22645] hsr_slave_1: entered promiscuous mode
[ 1801.844044][T22645] debugfs: 'hsr0' already exists in 'hsr'
[ 1801.850936][T22645] Cannot create hsr debugfs directory
[ 1802.096142][T22713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3578'.
[ 1802.258481][T20984] Bluetooth: hci8: command tx timeout
[ 1802.652706][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3575'.
[ 1802.784605][T22720] overlayfs: missing 'lowerdir'
[ 1802.860872][T22721] overlayfs: failed to resolve './file2': -2
[ 1803.175573][T22715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3575'.
[ 1803.466088][   T30] kauditd_printk_skb: 294 callbacks suppressed
[ 1803.466104][   T30] audit: type=1400 audit(2000002187.446:2654): avc:  denied  { mount } for  pid=22726 comm="syz.7.3582" name="/" dev="configfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1804.251432][T13611] Bluetooth: hci8: command tx timeout
[ 1804.308650][T13611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1804.320884][T13611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1804.329322][T13611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1804.329406][   T30] audit: type=1400 audit(2000002188.359:2655): avc:  denied  { unmount } for  pid=21694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1804.365274][T13611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1804.380125][T13611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1804.483046][T22736] Failed to initialize the IGMP autojoin socket (err -2)
[ 1804.508022][   T30] audit: type=1400 audit(2000002188.548:2656): avc:  denied  { listen } for  pid=22739 comm="syz.7.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1804.649044][T16713] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1804.811028][T16713] usb 5-1: Using ep0 maxpacket: 8
[ 1805.105081][T16713] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 1805.125520][T16713] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1805.150933][T16713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.181988][T16713] usb 5-1: Product: syz
[ 1805.196838][T16713] usb 5-1: Manufacturer: syz
[ 1805.207109][   T30] audit: type=1400 audit(2000002189.273:2657): avc:  denied  { relabelfrom } for  pid=22736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1805.241078][T16713] usb 5-1: SerialNumber: syz
[ 1805.329512][T16713] usb 5-1: config 0 descriptor??
[ 1805.348799][T16713] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1805.359630][   T30] audit: type=1400 audit(2000002189.304:2658): avc:  denied  { relabelto } for  pid=22736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1805.390817][T16713] usb 5-1: setting power ON
[ 1805.399809][T16713] dvb-usb: bulk message failed: -22 (2/0)
[ 1805.451376][T16713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1805.524678][T16713] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1805.550060][T22645] netdevsim netdevsim8 netdevsim0: renamed from eth1
[ 1805.559369][T16713] usb 5-1: media controller created
[ 1805.592714][T22733] dvb-usb: bulk message failed: -22 (3/0)
[ 1805.613751][T16713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1805.624442][T22645] netdevsim netdevsim8 netdevsim1: renamed from eth2
[ 1805.631459][T22733] dvb-usb: bulk message failed: -22 (4/0)
[ 1805.660442][T22733] cxusb: i2c read failed
[ 1805.822019][T22645] netdevsim netdevsim8 netdevsim2: renamed from eth3
[ 1805.839868][T16713] usb 5-1: selecting invalid altsetting 6
[ 1805.867280][T22645] netdevsim netdevsim8 netdevsim3: renamed from eth4
[ 1805.876629][T16713] usb 5-1: digital interface selection failed (-22)
[ 1805.941942][T22751] netlink: 'syz.5.3585': attribute type 1 has an invalid length.
[ 1806.869820][T16713] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1806.884377][T16713] usb 5-1: setting power OFF
[ 1806.891121][T16713] dvb-usb: bulk message failed: -22 (2/0)
[ 1806.897107][T16713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1806.906837][T16713] (NULL device *): no alternate interface
[ 1806.943745][T22751] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1807.020289][T20984] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1807.042817][T20984] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1807.063789][ T1293] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1807.076927][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1807.083614][T20984] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1807.104140][T20984] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1807.116359][T20984] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1807.180095][T22763] Failed to initialize the IGMP autojoin socket (err -2)
[ 1807.386931][T22768] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1807.386931][T22768]    program syz.5.3586 not setting count and/or reply_len properly
[ 1807.476596][T16713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1807.558956][T16713] usb 5-1: USB disconnect, device number 55
[ 1807.801629][T22645] 8021q: adding VLAN 0 to HW filter on device team0
[ 1807.871717][T19206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1807.878830][T19206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1807.969800][T19206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1807.976908][T19206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1808.198261][T22774] netlink: 'syz.4.3587': attribute type 3 has an invalid length.
[ 1808.349046][   T30] audit: type=1400 audit(2000002192.569:2659): avc:  denied  { connect } for  pid=22771 comm="syz.4.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1808.498514][T22738] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1808.517964][T22738] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1808.549618][T22738] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1808.558640][T22738] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1808.566403][T22738] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1808.625937][T22776] Failed to initialize the IGMP autojoin socket (err -2)
[ 1809.672662][   T30] audit: type=1400 audit(2000002193.965:2660): avc:  denied  { bind } for  pid=22784 comm="syz.7.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1809.679075][T22790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3589'.
[ 1809.858044][T22788] netlink: 'syz.7.3589': attribute type 2 has an invalid length.
[ 1809.882657][T22645] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1810.013771][T22799] netlink: 'syz.5.3590': attribute type 2 has an invalid length.
[ 1810.838389][T20984] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1810.862023][T20984] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1810.872409][T20984] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1810.881084][T20984] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1810.892706][T20984] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1810.952923][T22806] Failed to initialize the IGMP autojoin socket (err -2)
[ 1811.239240][   T30] audit: type=1400 audit(2000002195.593:2661): avc:  denied  { mount } for  pid=22803 comm="syz.5.3591" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 1811.682310][T22645] veth0_vlan: entered promiscuous mode
[ 1811.704324][T22645] veth1_vlan: entered promiscuous mode
[ 1811.943854][T22645] veth0_macvtap: entered promiscuous mode
[ 1811.964003][T22645] veth1_macvtap: entered promiscuous mode
[ 1812.030126][T22645] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1812.063113][T22645] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1812.107349][T22645] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1812.226545][T22738] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1812.237453][T22738] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1812.246693][T22738] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1812.255852][T22738] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1812.263498][T22738] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1812.273851][T22645] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1812.294033][T22645] wireguard: wg0: Could not create IPv4 socket
[ 1812.304195][T22645] wireguard: wg1: Could not create IPv4 socket
[ 1812.328578][T22645] wireguard: wg2: Could not create IPv4 socket
[ 1812.876630][T22824] Failed to initialize the IGMP autojoin socket (err -2)
[ 1815.542336][T22857] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1815.542336][T22857]    program syz.5.3597 not setting count and/or reply_len properly
[ 1815.755948][T20984] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1815.767308][T20984] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1815.777281][T20984] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1815.792920][T20984] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1815.800330][T20984] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1815.962447][T22860] Failed to initialize the IGMP autojoin socket (err -2)
[ 1815.972057][T22738] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1815.982476][T22738] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1815.993768][T22738] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1816.502859][T22738] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1816.513087][T22738] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1816.573974][T22863] Failed to initialize the IGMP autojoin socket (err -2)
[ 1817.806176][T22888] overlayfs: missing 'workdir'
[ 1817.812741][T22738] Bluetooth: hci8: command tx timeout
[ 1817.887960][T22889] overlayfs: failed to resolve './file2': -2
[ 1818.476898][T13611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1818.496427][T13611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1818.518462][T13611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1818.542639][T13611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1818.552424][T13611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1818.597171][T22901] Failed to initialize the IGMP autojoin socket (err -2)
[ 1818.794951][T13611] Bluetooth: hci6: command 0x0406 tx timeout
[ 1819.786893][T20984] Bluetooth: hci8: command tx timeout
[ 1820.113415][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3605'.
[ 1820.122530][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3605'.
[ 1820.150793][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3605'.
[ 1820.160322][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3605'.
[ 1820.244612][   T30] audit: type=1326 audit(2000002205.051:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1820.320314][T22943] cgroup: Unknown subsys name 'euid>00000000000000000000'
[ 1820.419613][T22943] Failed to initialize the IGMP autojoin socket (err -2)
[ 1820.454637][   T30] audit: type=1326 audit(2000002205.051:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1820.484048][   T30] audit: type=1326 audit(2000002205.051:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1820.520952][   T30] audit: type=1400 audit(2000002205.051:2665): avc:  denied  { mounton } for  pid=22929 comm="syz.4.3605" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1820.582358][T13611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1820.597067][T13611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1820.607397][T13611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1820.682957][   T30] audit: type=1326 audit(2000002205.387:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1820.744064][T13611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1820.761092][T13611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1820.795472][   T30] audit: type=1326 audit(2000002205.387:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22929 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991959c799 code=0x7ffc0000
[ 1820.831496][T22860] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1821.022124][T22860] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1821.260141][   T31] INFO: task syz.0.3263:21127 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1821.348443][   T30] audit: type=1400 audit(2000002206.196:2668): avc:  denied  { write } for  pid=5788 comm="syz-executor" path="pipe:[4052]" dev="pipefs" ino=4052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1821.418630][T22948] Failed to initialize the IGMP autojoin socket (err -2)
[ 1821.427690][T22860] wireguard: wg0: Could not create IPv4 socket
[ 1821.437825][T22860] wireguard: wg1: Could not create IPv4 socket
[ 1821.447141][   T31]       Tainted: G             L      syzkaller #0
[ 1821.448974][T22860] wireguard: wg2: Could not create IPv4 socket
[ 1821.476673][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1821.485512][   T31] task:syz.0.3263      state:D stack:28168 pid:21127 tgid:21123 ppid:15492  task_flags:0x400140 flags:0x00080002
[ 1821.499945][   T31] Call Trace:
[ 1821.534861][   T31]  <TASK>
[ 1821.561221][T22860] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht'
[ 1821.566721][   T31]  __schedule+0xfee/0x60e0
[ 1821.573341][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1821.681202][   T31]  ? __pfx___schedule+0x10/0x10
[ 1821.686123][   T31]  ? find_held_lock+0x2b/0x80
[ 1821.719047][   T31]  ? schedule+0x2bf/0x390
[ 1821.723413][   T31]  schedule+0xdd/0x390
[ 1821.727530][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1821.761555][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1821.766190][   T31]  ? bdev_open+0xa2/0xe40
[ 1821.785559][T13611] Bluetooth: hci8: command tx timeout
[ 1821.795565][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1821.800646][   T31]  ? bd_prepare_to_claim+0x1e0/0x280
[ 1821.824027][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[ 1821.829698][   T31]  ? file_init_path+0x48e/0x670
[ 1821.842979][   T31]  ? bdev_open+0xa2/0xe40
[ 1821.848066][   T31]  bdev_open+0xa2/0xe40
[ 1821.852246][   T31]  ? iput+0x3a/0x40
[ 1821.871632][   T31]  bdev_file_open_by_dev+0x179/0x210
[ 1821.876962][   T31]  setup_bdev_super+0x385/0x730
[ 1821.900108][   T31]  get_tree_bdev_flags+0x363/0x620
[ 1821.907679][   T31]  ? __pfx_hpfs_fill_super+0x10/0x10
[ 1821.918006][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1821.923964][   T31]  ? cap_capable+0x107/0x460
[ 1821.928761][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1821.933441][   T31]  ? security_capable+0x80/0x260
[ 1821.938975][   T31]  vfs_get_tree+0x92/0x320
[ 1821.943408][   T31]  path_mount+0x7d0/0x23d0
[ 1821.951497][   T31]  ? __pfx_path_mount+0x10/0x10
[ 1821.956361][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1821.961681][   T31]  ? putname+0xb1/0x110
[ 1821.965834][   T31]  ? kmem_cache_free+0x124/0x6a0
[ 1821.971407][   T31]  ? __x64_sys_mount+0x293/0x310
[ 1821.976427][   T31]  __x64_sys_mount+0x293/0x310
[ 1821.981195][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1821.986612][   T31]  do_syscall_64+0x106/0xf80
[ 1821.991202][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1821.996259][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1822.002156][   T31] RIP: 0033:0x7f0fa359c799
[ 1822.007576][   T31] RSP: 002b:00007f0fa4420028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1822.016072][   T31] RAX: ffffffffffffffda RBX: 00007f0fa3816270 RCX: 00007f0fa359c799
[ 1822.024487][   T31] RDX: 00002000000004c0 RSI: 00002000000000c0 RDI: 0000200000000000
[ 1822.032470][   T31] RBP: 00007f0fa3632bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1822.040553][   T31] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000000
[ 1822.048564][   T31] R13: 00007f0fa3816308 R14: 00007f0fa3816270 R15: 00007fff59576058
[ 1822.056882][   T31]  </TASK>
[ 1822.059988][   T31] INFO: task syz.0.3263:21128 blocked for more than 144 seconds.
[ 1822.073046][   T31]       Tainted: G             L      syzkaller #0
[ 1822.079556][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1822.119295][   T31] task:syz.0.3263      state:D stack:26712 pid:21128 tgid:21123 ppid:15492  task_flags:0x400040 flags:0x00080002
[ 1822.138150][   T31] Call Trace:
[ 1822.141832][   T31]  <TASK>
[ 1822.144739][   T31]  __schedule+0xfee/0x60e0
[ 1822.150376][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1822.155340][   T31]  ? __pfx___schedule+0x10/0x10
[ 1822.160243][   T31]  ? find_held_lock+0x2b/0x80
[ 1822.164921][   T31]  ? schedule+0x2bf/0x390
[ 1822.169576][   T31]  schedule+0xdd/0x390
[ 1822.173652][   T31]  super_lock+0x283/0x3f0
[ 1822.178087][   T31]  ? __pfx_super_lock+0x10/0x10
[ 1822.182938][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 1822.188466][   T31]  ? __iterate_supers+0x1b6/0x370
[ 1822.193500][   T31]  __iterate_supers+0x1e0/0x370
[ 1822.198667][   T31]  ? __pfx_drop_pagecache_sb+0x10/0x10
[ 1822.204136][   T31]  drop_caches_sysctl_handler+0xeb/0x120
[ 1822.209836][   T31]  proc_sys_call_handler+0x47f/0x5a0
[ 1822.215247][   T31]  ? __pfx_proc_sys_call_handler+0x10/0x10
[ 1822.221063][   T31]  do_iter_readv_writev+0x6ee/0x920
[ 1822.227365][   T31]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1822.233472][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1822.238857][   T31]  vfs_writev+0x360/0xe10
[ 1822.243456][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1822.248229][   T31]  ? __pfx_vfs_writev+0x10/0x10
[ 1822.253476][   T31]  ? fdget_pos+0x2aa/0x380
[ 1822.257893][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1822.262943][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1822.269030][   T31]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[ 1822.275895][   T31]  ? __fget_files+0x21f/0x3d0
[ 1822.280584][   T31]  ? do_writev+0x13e/0x340
[ 1822.285425][   T31]  do_writev+0x13e/0x340
[ 1822.289680][   T31]  ? __pfx_do_writev+0x10/0x10
[ 1822.294571][   T31]  do_syscall_64+0x106/0xf80
[ 1822.299158][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1822.304062][T17043] block nbd0: Possible stuck request ffff888027ce0000: control (read@0,1024B). Runtime 330 seconds
[ 1822.314965][T17043] block nbd0: Possible stuck request ffff888027ce0200: control (read@1024,1024B). Runtime 330 seconds
[ 1822.325929][T17043] block nbd0: Possible stuck request ffff888027ce0400: control (read@2048,1024B). Runtime 330 seconds
[ 1822.337965][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1822.343864][   T31] RIP: 0033:0x7f0fa359c799
[ 1822.362993][   T31] RSP: 002b:00007f0fa43ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1822.371544][   T31] RAX: ffffffffffffffda RBX: 00007f0fa3816360 RCX: 00007f0fa359c799
[ 1822.380105][   T31] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004
[ 1822.388142][   T31] RBP: 00007f0fa3632bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1822.396275][T17043] block nbd0: Possible stuck request ffff888027ce0600: control (read@3072,1024B). Runtime 330 seconds
[ 1822.407593][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1822.415608][   T31] R13: 00007f0fa38163f8 R14: 00007f0fa3816360 R15: 00007fff59576058
[ 1822.423597][   T31]  </TASK>
[ 1822.453041][   T31] 
[ 1822.453041][   T31] Showing all locks held in the system:
[ 1822.460778][   T31] 1 lock held by khungtaskd/31:
[ 1822.481589][   T31]  #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1822.500295][   T31] 2 locks held by getty/5563:
[ 1822.504988][   T31]  #0: ffff8880387f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1822.559594][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1822.591625][   T31] 1 lock held by syz.4.2798/19037:
[ 1822.602115][   T31] 1 lock held by udevd/19092:
[ 1822.618186][   T31]  #0: ffff888027c68358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[ 1822.638976][   T31] 5 locks held by kworker/u8:18/19502:
[ 1822.655731][   T31]  #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1822.668735][   T31]  #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0
[ 1822.678003][   T31]  #2: ffff8880b8526358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0
[ 1822.687234][   T31]  #3: ffffffff9b3c5550 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490
[ 1822.697748][   T31]  #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0
[ 1822.707922][   T31] 3 locks held by kworker/1:4/20740:
[ 1822.713367][   T31]  #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1822.724030][   T31]  #1: ffffc90004a27d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1822.737206][   T31]  #2: ffff888050d1a240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0
[ 1822.747526][   T31] 2 locks held by syz.0.3263/21127:
[ 1822.770046][   T31]  #0: ffff8880325a60e0 (&type->s_umount_key#97/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20
[ 1822.805120][   T31]  #1: ffff888027c68358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[ 1822.814406][   T31] 2 locks held by syz.0.3263/21128:
[ 1822.826374][   T31]  #0: ffff8880766f69b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1822.835574][T13611] Bluetooth: hci9: command tx timeout
[ 1822.841457][   T31]  #1: ffff888069b92420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340
[ 1822.850839][   T31] 3 locks held by syz-executor/22860:
[ 1822.856421][   T31]  #0: ffff88802a574ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1822.866151][   T31]  #1: ffff88802a5740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1822.876540][   T31]  #2: ffffffff908a8228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1822.887937][   T31] 5 locks held by syz.5.3606/22937:
[ 1822.893204][   T31]  #0: ffff88805142cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1822.903163][   T31]  #1: ffff88805142c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1822.913613][   T31]  #2: ffffffff908a8228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1822.923688][   T31]  #3: ffff88804efb3af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770
[ 1822.933459][   T31]  #4: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1822.943579][   T31] 2 locks held by syz-executor/22948:
[ 1822.949000][   T31]  #0: ffffffff905f78f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1822.958743][   T31]  #1: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[ 1822.969105][   T31] 1 lock held by dhcpcd/22990:
[ 1822.973934][   T31] 
[ 1822.976329][   T31] =============================================
[ 1822.976329][   T31] 
[ 1822.998929][   T31] NMI backtrace for cpu 0
[ 1822.998947][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1822.998970][   T31] Tainted: [L]=SOFTLOCKUP
[ 1822.998976][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1822.998987][   T31] Call Trace:
[ 1822.998993][   T31]  <TASK>
[ 1822.999000][   T31]  dump_stack_lvl+0x100/0x190
[ 1822.999033][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1822.999052][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1822.999081][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1822.999109][   T31]  sys_info+0x141/0x190
[ 1822.999136][   T31]  watchdog+0xd25/0x1050
[ 1822.999167][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1822.999190][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1822.999217][   T31]  ? kthread+0x13a/0x450
[ 1822.999232][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1822.999252][   T31]  kthread+0x370/0x450
[ 1822.999268][   T31]  ? __pfx_kthread+0x10/0x10
[ 1822.999286][   T31]  ret_from_fork+0x754/0xd80
[ 1822.999305][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1822.999324][   T31]  ? __switch_to+0x7b4/0x1120
[ 1822.999345][   T31]  ? __pfx_kthread+0x10/0x10
[ 1822.999362][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1822.999394][   T31]  </TASK>
[ 1822.999400][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1823.127673][    C1] NMI backtrace for cpu 1
[ 1823.127689][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1823.127708][    C1] Tainted: [L]=SOFTLOCKUP
[ 1823.127713][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1823.127721][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1823.127739][    C1] Code: b8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 dc 1b 00 fb f4 <e9> bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1823.127752][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[ 1823.127764][    C1] RAX: 0000000009ec965f RBX: ffff88801e6b2480 RCX: ffffffff8b8fac75
[ 1823.127774][    C1] RDX: 0000000000000000 RSI: ffffffff8de72aee RDI: ffffffff8c1af220
[ 1823.127783][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[ 1823.127791][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6490
[ 1823.127800][    C1] R13: 0000000000000001 R14: ffffffff90d97a10 R15: 0000000000000000
[ 1823.127808][    C1] FS:  0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000
[ 1823.127822][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1823.127832][    C1] CR2: 00005557d8f08300 CR3: 000000004e41d000 CR4: 00000000003526f0
[ 1823.127841][    C1] Call Trace:
[ 1823.127847][    C1]  <TASK>
[ 1823.127852][    C1]  default_idle+0x9/0x10
[ 1823.127868][    C1]  default_idle_call+0x6c/0xb0
[ 1823.127882][    C1]  do_idle+0x35b/0x4b0
[ 1823.127901][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1823.127920][    C1]  cpu_startup_entry+0x4f/0x60
[ 1823.127936][    C1]  start_secondary+0x21d/0x2d0
[ 1823.127955][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1823.127975][    C1]  common_startup_64+0x13e/0x148
[ 1823.127996][    C1]  </TASK>
[ 1823.309984][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1823.316854][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1823.327536][   T31] Tainted: [L]=SOFTLOCKUP
[ 1823.331849][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1823.341893][   T31] Call Trace:
[ 1823.345164][   T31]  <TASK>
[ 1823.348082][   T31]  dump_stack_lvl+0x100/0x190
[ 1823.352779][   T31]  vpanic+0x552/0x970
[ 1823.356747][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1823.361232][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1823.367375][   T31]  panic+0xd1/0xe0
[ 1823.371077][   T31]  ? __pfx_panic+0x10/0x10
[ 1823.375475][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1823.381611][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1823.387748][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1823.393900][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1823.398669][   T31]  ? watchdog+0xd35/0x1050
[ 1823.403077][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1823.407662][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1823.412327][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1823.417339][   T31]  ? kthread+0x13a/0x450
[ 1823.421561][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1823.426221][   T31]  kthread+0x370/0x450
[ 1823.430269][   T31]  ? __pfx_kthread+0x10/0x10
[ 1823.434836][   T31]  ret_from_fork+0x754/0xd80
[ 1823.439405][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1823.444497][   T31]  ? __switch_to+0x7b4/0x1120
[ 1823.449157][   T31]  ? __pfx_kthread+0x10/0x10
[ 1823.453727][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1823.458482][   T31]  </TASK>
[ 1823.461757][   T31] Kernel Offset: disabled
[ 1823.466053][   T31] Rebooting in 86400 seconds..