last executing test programs:

18.054898342s ago: executing program 2 (id=13):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
open_by_handle_at(r1, &(0x7f0000000000)=ANY=[], 0x8000)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58)

17.936122743s ago: executing program 4 (id=14):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x48000)
recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/120, 0x78}], 0x1, &(0x7f0000000640)=""/211, 0xd3}}], 0x1, 0x0, 0x0)
move_pages(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000076000/0x400000)=nil], &(0x7f0000000080), 0x0, 0x0)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000000)=ANY=[])
sched_setaffinity(0x0, 0x0, 0x0)
r7 = gettid()
getpriority(0x1, r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x54, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in6={0xa, 0x4e22, 0x0, @private0, 0x101}, @in6={0xa, 0x4e20, 0xc, @remote, 0x3}]}, &(0x7f0000000100)=0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)

15.371338034s ago: executing program 2 (id=20):
r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x2000000000008, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
r2 = landlock_create_ruleset(&(0x7f0000000180)={0x9845, 0x0, 0x3}, 0x18, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setpipe(r1, 0x407, 0x100)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0), 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
landlock_restrict_self(r2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x5)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)

14.093820318s ago: executing program 4 (id=24):
socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x1df, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fanotify_init(0x4, 0x2)
r5 = dup(r3)
fanotify_mark(r4, 0x1, 0x12, r5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000000580), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x258, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x9, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)

14.061276268s ago: executing program 2 (id=25):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x48000)
recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/120, 0x78}], 0x1, &(0x7f0000000640)=""/211, 0xd3}}], 0x1, 0x0, 0x0)
move_pages(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000076000/0x400000)=nil], &(0x7f0000000080), 0x0, 0x0)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000000)=ANY=[])
sched_setaffinity(0x0, 0x0, 0x0)
r7 = gettid()
getpriority(0x1, r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x0, @private0, 0x101}, @in6={0xa, 0x4e20, 0xc, @remote, 0x3}]}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)

12.610892042s ago: executing program 1 (id=28):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100600fd1ef4c727d2637fa8006a1117", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001580)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0xd3, 0x5, 0xfffffffc}})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x84000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

11.161499256s ago: executing program 1 (id=31):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast})

10.032502594s ago: executing program 2 (id=33):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x40}}, 0x4000)

9.996236604s ago: executing program 3 (id=34):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0x10, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

9.960862935s ago: executing program 4 (id=35):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)

9.916614189s ago: executing program 1 (id=36):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000880)={0x114, 0x1f, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64}, @typed={0x15, 0x0, 0x0, 0x0, @binary="2429718223d60c5d111d892d676f9a36fc"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec7d71265fc2e882348c26c2126237dd5b3c55ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe810100d9009482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3af64ad02a078cf0d972df9e99f079767734f69ce475f557803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000000000"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40010}, 0x20004890) (fail_nth: 2)

9.8660629s ago: executing program 3 (id=37):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
gettid()
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x74, 0x101301)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x5, 0x18}, 0xc)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x0, r2}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KDSETMODE(r5, 0x4b63, 0x1)

9.816581794s ago: executing program 0 (id=38):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x71, 0x7, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff7441, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) (fail_nth: 2)

7.457198456s ago: executing program 3 (id=39):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0)
statx(r2, &(0x7f0000000140)='./file0\x00', 0x6000, 0x10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RSTATu(r2, &(0x7f0000000440)={0x7e, 0x7d, 0x2, {{0x0, 0x5a, 0x80, 0x2, {0x0, 0x1, 0x8}, 0x4d000000, 0x210f, 0x8, 0x9, 0x1, ',', 0x1, '!', 0x13, './binderfs/binder0\x00', 0x12, '/dev/snd/midiC#D#\x00'}, 0xf, '/dev/sequencer\x00', 0x0, r5}}, 0x7e)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r4, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.243660794s ago: executing program 4 (id=40):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

6.93998329s ago: executing program 2 (id=41):
r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x2000000000008, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
r2 = landlock_create_ruleset(&(0x7f0000000180)={0x9845, 0x0, 0x3}, 0x18, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setpipe(r1, 0x407, 0x100)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0), 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
landlock_restrict_self(r2, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}})
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x5)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)

6.83662225s ago: executing program 1 (id=42):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100600fd1ef4c727d2637fa8006a1117", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0xd3, 0x5, 0xfffffffc}})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x84000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

5.05065314s ago: executing program 4 (id=43):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2001100, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x48000)
recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/120, 0x78}], 0x1, &(0x7f0000000640)=""/211, 0xd3}}], 0x1, 0x0, 0x0)
move_pages(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000076000/0x400000)=nil], &(0x7f0000000080), 0x0, 0x0)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000000)=ANY=[])
sched_setaffinity(0x0, 0x0, 0x0)
r7 = gettid()
getpriority(0x1, r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x0, @private0, 0x101}, @in6={0xa, 0x4e20, 0xc, @remote, 0x3}]}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)

4.292075569s ago: executing program 1 (id=44):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19)
syz_clone3(&(0x7f0000000540)={0x101840000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000300)={0x20080522}, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd5, 0x3ff, 0x400, 0x17, "978e97809bfa56d3c8039308251d224e64b897"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x2091)
r3 = getpid()
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000dc0)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7f7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x94}}, 0x8c0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00')
preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

4.139747674s ago: executing program 3 (id=45):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
syz_emit_ethernet(0x31, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000023000028b4967a223e787f00000000000000"], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00", 0x5a, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x0, 0x4, 0x4000})
write$selinux_access(r1, &(0x7f0000000280)={'system_u:object_r:crond_unit_file_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8000000000000000}, 0x4b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket(0x2, 0x1, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x2404c0c5)
setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4)
chdir(&(0x7f00000003c0)='./bus\x00')
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000540)='./bus\x00')

4.134115528s ago: executing program 0 (id=46):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) (fail_nth: 2)

4.098314763s ago: executing program 2 (id=47):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)

2.416825255s ago: executing program 0 (id=48):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast})

2.39916613s ago: executing program 3 (id=49):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$binfmt_aout(r3, &(0x7f0000000540)={{0x108, 0x1, 0x7f, 0xb2, 0x370, 0x80000001, 0xb, 0xfff}}, 0x20)

2.387450751s ago: executing program 1 (id=50):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$binfmt_aout(r3, &(0x7f0000000540)={{0x108, 0x1, 0x7f, 0xb2, 0x370, 0x80000001, 0xb, 0xfff}, "", ['\x00']}, 0x120) (fail_nth: 2)

1.980346716s ago: executing program 0 (id=51):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)

1.939313652s ago: executing program 3 (id=52):
unshare(0x68060200) (async)
unshare(0x68060200)
unshare(0x42000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x8, @local, 'pim6reg\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x0, 0x1, 0xe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, <r3=>0x0}, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x1, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x1, 0x0)
close(r4) (async)
close(r4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB='*\x00\x00\x00\b\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES64=r3], 0x20)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x95)
unshare(0x40800)
gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000500)="818d24d5a7a6db55ffa46f65e308a1abdb2aeb37f0016026db10ca63b73e1200000000000000070000985617556c96dad0a517fd237a896080396089d19bdef60460e869e6e0633f28d7ffc236e50cef2a7466155da461ed88512ac49622fbb886306b2fdb43df11dfb046b677ffa4631d495a", &(0x7f0000000580)="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"}}, &(0x7f0000000000)) (async)
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000500)="818d24d5a7a6db55ffa46f65e308a1abdb2aeb37f0016026db10ca63b73e1200000000000000070000985617556c96dad0a517fd237a896080396089d19bdef60460e869e6e0633f28d7ffc236e50cef2a7466155da461ed88512ac49622fbb886306b2fdb43df11dfb046b677ffa4631d495a", &(0x7f0000000580)="1e8a1211ef6cf1e25ee146b1ea098269539426ffffba83d999590bd4d34cbbc0941eecbcffb269921ee59c29c35e40a8ea58a97eb988635c6afce50d7a69504b2b59996a65db63287c21da48e6448738002ece69e864da07aaf8579b5dfde6d759510191b416dbbd46654304d5d7ff01b793fb8ee2bb740c4e79ef41852da59350bd7259d1f4c1411d7c9821a871e3dbba6b9b7ba8d185480f7f68e761f9ce1a2b583fff0c627c25079b0870ae78f32e1c0b69d2f40f6fb18c23e3624544c60175fdb5adebb3f068c64d3f23dd3014172755f5a97cf7819bd4565eb3cbf6edd20f0726ec855c7217916723c39923bbbeee7f248dc4ac5ce68a0bdd05f9"}}, &(0x7f0000000000)=<r5=>0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) (async)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
readv(r6, &(0x7f0000000680)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) (async)
readv(r6, &(0x7f0000000680)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x7e, 0x2, 0x411, 0x0, [], [0x2, 0x4, 0x3, 0x5], [0xf, 0x7fffffff, 0x8, 0x1], [0x7fffffff, 0x7, 0x6, 0x2]})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') (async)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
pread64(r10, &(0x7f0000002180)=""/4105, 0x1009, 0x500)
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf2509000000050007000000000008000300", @ANYRES32=0x0, @ANYBLOB="05000800180000000c000600010000000100000006300bf5"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

311.546665ms ago: executing program 0 (id=53):
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})

535.249µs ago: executing program 0 (id=54):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100600fd1ef4c727d2637fa8006a1117", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13, 0xd3, 0x5, 0xfffffffc}})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x84000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

0s ago: executing program 4 (id=55):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
syz_emit_ethernet(0x31, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000023000028b4967a223e787f00000000000000"], 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86", 0x55, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x0, 0x4, 0x4000})
write$selinux_access(r1, &(0x7f0000000280)={'system_u:object_r:crond_unit_file_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8000000000000000}, 0x4b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket(0x2, 0x1, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x2404c0c5)
setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4)
mknodat$loop(r2, &(0x7f0000000500)='./bus\x00', 0x8, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000540)='./bus\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.30' (ED25519) to the list of known hosts.
[   57.034030][   T29] audit: type=1400 audit(1737853816.265:88): avc:  denied  { mounton } for  pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   57.038930][ T5802] cgroup: Unknown subsys name 'net'
[   57.062200][   T29] audit: type=1400 audit(1737853816.265:89): avc:  denied  { mount } for  pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.084509][   T29] audit: type=1400 audit(1737853816.295:90): avc:  denied  { unmount } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.226049][ T5802] cgroup: Unknown subsys name 'cpuset'
[   57.234121][ T5802] cgroup: Unknown subsys name 'rlimit'
[   57.371623][   T29] audit: type=1400 audit(1737853816.595:91): avc:  denied  { setattr } for  pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.395136][   T29] audit: type=1400 audit(1737853816.595:92): avc:  denied  { create } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   57.428612][   T29] audit: type=1400 audit(1737853816.595:93): avc:  denied  { write } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   57.449164][   T29] audit: type=1400 audit(1737853816.595:94): avc:  denied  { read } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   57.469507][   T29] audit: type=1400 audit(1737853816.595:95): avc:  denied  { mounton } for  pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   57.494663][   T29] audit: type=1400 audit(1737853816.595:96): avc:  denied  { mount } for  pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   57.495982][ T5805] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   57.518119][   T29] audit: type=1400 audit(1737853816.645:97): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   58.418933][ T5802] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.528475][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.541930][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.550469][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.553477][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.561053][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.574595][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.576789][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.581735][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.589686][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.598280][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.605513][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.611655][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.626347][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.634960][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.642801][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.643389][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.649890][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.657457][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.665879][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.672167][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.678150][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.687057][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.693692][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.702147][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.706010][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.714750][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.720592][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.727804][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.742203][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.756554][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.131304][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   61.176547][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   61.215086][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   61.235916][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   61.360271][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.368269][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.376203][ T5812] bridge_slave_0: entered allmulticast mode
[   61.383183][ T5812] bridge_slave_0: entered promiscuous mode
[   61.425167][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.432349][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.439778][ T5812] bridge_slave_1: entered allmulticast mode
[   61.446720][ T5812] bridge_slave_1: entered promiscuous mode
[   61.474662][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.481756][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.488977][ T5825] bridge_slave_0: entered allmulticast mode
[   61.496269][ T5825] bridge_slave_0: entered promiscuous mode
[   61.503787][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.510840][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.518111][ T5825] bridge_slave_1: entered allmulticast mode
[   61.525449][ T5825] bridge_slave_1: entered promiscuous mode
[   61.531991][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   61.546481][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.553726][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.560863][ T5813] bridge_slave_0: entered allmulticast mode
[   61.567747][ T5813] bridge_slave_0: entered promiscuous mode
[   61.582450][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.589708][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.597430][ T5814] bridge_slave_0: entered allmulticast mode
[   61.604382][ T5814] bridge_slave_0: entered promiscuous mode
[   61.631810][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.639132][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.647028][ T5813] bridge_slave_1: entered allmulticast mode
[   61.653959][ T5813] bridge_slave_1: entered promiscuous mode
[   61.660493][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.667963][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.675671][ T5814] bridge_slave_1: entered allmulticast mode
[   61.682197][ T5814] bridge_slave_1: entered promiscuous mode
[   61.690756][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.707217][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.733717][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.756686][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.791980][ T5825] team0: Port device team_slave_0 added
[   61.815229][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.828338][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.838802][ T5825] team0: Port device team_slave_1 added
[   61.870078][ T5812] team0: Port device team_slave_0 added
[   61.877214][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.888699][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.911636][ T5812] team0: Port device team_slave_1 added
[   61.970428][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.977556][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.004289][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.016730][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.023743][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.049889][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.062173][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.069450][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.076937][ T5815] bridge_slave_0: entered allmulticast mode
[   62.083736][ T5815] bridge_slave_0: entered promiscuous mode
[   62.091369][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.098550][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.124563][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.137280][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.144342][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.170745][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.184610][ T5813] team0: Port device team_slave_0 added
[   62.199974][ T5814] team0: Port device team_slave_0 added
[   62.224277][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.231445][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.238890][ T5815] bridge_slave_1: entered allmulticast mode
[   62.246186][ T5815] bridge_slave_1: entered promiscuous mode
[   62.261993][ T5813] team0: Port device team_slave_1 added
[   62.278052][ T5814] team0: Port device team_slave_1 added
[   62.305787][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.312924][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.339295][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.351476][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.358531][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.384873][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.405484][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.436515][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.446347][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.472883][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.485497][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.510931][ T5812] hsr_slave_0: entered promiscuous mode
[   62.517747][ T5812] hsr_slave_1: entered promiscuous mode
[   62.527376][ T5825] hsr_slave_0: entered promiscuous mode
[   62.533867][ T5825] hsr_slave_1: entered promiscuous mode
[   62.539777][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.547824][ T5825] Cannot create hsr debugfs directory
[   62.561721][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.568721][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.595012][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.637284][ T5815] team0: Port device team_slave_0 added
[   62.669858][ T5815] team0: Port device team_slave_1 added
[   62.688049][ T5813] hsr_slave_0: entered promiscuous mode
[   62.694368][ T5813] hsr_slave_1: entered promiscuous mode
[   62.700224][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.708333][ T5813] Cannot create hsr debugfs directory
[   62.753389][ T5814] hsr_slave_0: entered promiscuous mode
[   62.759571][ T5814] hsr_slave_1: entered promiscuous mode
[   62.765816][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.775046][   T54] Bluetooth: hci0: command tx timeout
[   62.781228][ T5814] Cannot create hsr debugfs directory
[   62.783562][ T5820] Bluetooth: hci3: command tx timeout
[   62.788223][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.792512][   T54] Bluetooth: hci1: command tx timeout
[   62.799430][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.830939][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.843056][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.850010][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.876122][   T54] Bluetooth: hci4: command tx timeout
[   62.881593][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.882945][   T54] Bluetooth: hci2: command tx timeout
[   62.988544][ T5815] hsr_slave_0: entered promiscuous mode
[   62.994885][ T5815] hsr_slave_1: entered promiscuous mode
[   63.000879][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.008934][ T5815] Cannot create hsr debugfs directory
[   63.187217][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.199255][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.223489][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.234083][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.299436][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.308728][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.319250][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.328609][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.401741][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.411142][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.421315][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.438239][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.524830][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.541284][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.551978][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.573541][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.593282][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   63.604959][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.616383][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.669729][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   63.681568][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.688900][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.703626][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.722204][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.729342][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.741466][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.748581][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.760809][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.771301][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.784949][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.797088][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.804294][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.919276][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.946632][   T29] kauditd_printk_skb: 14 callbacks suppressed
[   63.946647][   T29] audit: type=1400 audit(1737853823.175:112): avc:  denied  { sys_module } for  pid=5812 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.979548][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   64.014651][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.021750][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.033030][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.040140][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.061936][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.129127][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   64.150979][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.185869][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.193010][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.218335][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.225498][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.272520][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   64.302270][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.318666][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.325790][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.356489][  T985] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.363610][  T985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.379983][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.493940][ T5825] veth0_vlan: entered promiscuous mode
[   64.520069][ T5812] veth0_vlan: entered promiscuous mode
[   64.563702][ T5825] veth1_vlan: entered promiscuous mode
[   64.585539][ T5812] veth1_vlan: entered promiscuous mode
[   64.616708][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.661867][ T5812] veth0_macvtap: entered promiscuous mode
[   64.676192][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.695887][ T5812] veth1_macvtap: entered promiscuous mode
[   64.735425][ T5825] veth0_macvtap: entered promiscuous mode
[   64.766208][ T5825] veth1_macvtap: entered promiscuous mode
[   64.778557][ T5813] veth0_vlan: entered promiscuous mode
[   64.790617][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.800593][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.828718][ T5813] veth1_vlan: entered promiscuous mode
[   64.843852][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.856932][   T54] Bluetooth: hci0: command tx timeout
[   64.862514][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.863885][   T54] Bluetooth: hci1: command tx timeout
[   64.875579][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.882098][ T5820] Bluetooth: hci3: command tx timeout
[   64.890203][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.912967][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.926337][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.940939][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.944114][   T54] Bluetooth: hci2: command tx timeout
[   64.954585][ T5820] Bluetooth: hci4: command tx timeout
[   64.967222][ T5813] veth0_macvtap: entered promiscuous mode
[   64.985013][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.994090][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.003744][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.012464][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.028019][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.053245][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.061947][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.072069][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.106769][ T5813] veth1_macvtap: entered promiscuous mode
[   65.124324][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.135912][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.146037][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.156920][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.170315][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.187514][ T5814] veth0_vlan: entered promiscuous mode
[   65.201889][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.217929][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.228077][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.238654][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.249340][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.298404][ T5814] veth1_vlan: entered promiscuous mode
[   65.310832][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.320453][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.330979][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.341008][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.354245][ T5815] veth0_vlan: entered promiscuous mode
[   65.382414][ T5815] veth1_vlan: entered promiscuous mode
[   65.457946][ T5814] veth0_macvtap: entered promiscuous mode
[   65.464709][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.467006][ T5814] veth1_macvtap: entered promiscuous mode
[   65.493969][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.508421][  T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.516412][  T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.535300][ T5815] veth0_macvtap: entered promiscuous mode
[   65.543976][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.554600][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.564542][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.575899][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.585846][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.596343][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.608047][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.628991][ T5815] veth1_macvtap: entered promiscuous mode
[   65.650533][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.661974][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.672060][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.683261][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.693199][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.703799][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.714549][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.726777][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.727219][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.744300][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.752046][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.763779][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.772501][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.803591][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.811604][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.819592][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.831827][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.842313][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.852911][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.862780][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.873268][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.883213][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.893928][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.905140][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.930132][   T29] audit: type=1400 audit(1737853825.155:113): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/root/syzkaller.mfO4Ky/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   65.935173][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.968827][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.979238][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.984222][   T29] audit: type=1400 audit(1737853825.155:114): avc:  denied  { mount } for  pid=5825 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.990139][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.022273][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.025768][   T29] audit: type=1400 audit(1737853825.155:115): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/root/syzkaller.mfO4Ky/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   66.032899][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.064805][   T29] audit: type=1400 audit(1737853825.195:116): avc:  denied  { mount } for  pid=5825 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   66.069745][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.090470][   T29] audit: type=1400 audit(1737853825.195:117): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/root/syzkaller.mfO4Ky/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   66.106833][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.138038][   T29] audit: type=1400 audit(1737853825.195:118): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/root/syzkaller.mfO4Ky/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   66.145063][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.165845][   T29] audit: type=1400 audit(1737853825.215:119): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   66.199628][   T29] audit: type=1400 audit(1737853825.425:120): avc:  denied  { mounton } for  pid=5825 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   66.234339][   T29] audit: type=1400 audit(1737853825.425:121): avc:  denied  { mount } for  pid=5825 comm="syz-executor" name="/" dev="gadgetfs" ino=6622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   66.235733][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.289955][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.299689][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.308823][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.317786][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.390831][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.400065][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.431011][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.434979][ T5899] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.457862][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.653100][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.660960][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.707415][ T5903] process 'syz.0.1' launched './file0' with NULL argv: empty string added
[   66.709553][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.943607][ T5820] Bluetooth: hci3: command tx timeout
[   66.949477][ T5820] Bluetooth: hci0: command tx timeout
[   66.963247][   T54] Bluetooth: hci1: command tx timeout
[   67.016944][ T5820] Bluetooth: hci4: command tx timeout
[   67.023087][   T54] Bluetooth: hci2: command tx timeout
[   67.221141][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.239497][ T5910] =======================================================
[   67.239497][ T5910] WARNING: The mand mount option has been deprecated and
[   67.239497][ T5910]          and is ignored by this kernel. Remove the mand
[   67.239497][ T5910]          option from the mount to silence this warning.
[   67.239497][ T5910] =======================================================
[   67.408787][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.422872][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.466835][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.479629][ T5903] netlink: zone id is out of range
[   67.506587][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.514507][ T5903] netlink: zone id is out of range
[   67.519721][ T5903] netlink: zone id is out of range
[   67.525460][ T5903] netlink: zone id is out of range
[   67.531811][ T5903] netlink: zone id is out of range
[   67.537294][ T5903] netlink: zone id is out of range
[   67.542504][ T5903] netlink: zone id is out of range
[   67.548086][ T5903] netlink: zone id is out of range
[   67.553656][ T5903] netlink: zone id is out of range
[   67.558780][ T5903] netlink: zone id is out of range
[   68.423666][ T5920] veth0_to_team: entered promiscuous mode
[   68.429451][ T5920] veth0_to_team: entered allmulticast mode
[   68.473217][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.699113][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.743967][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.781913][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   68.806669][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.959780][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   69.004028][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   69.004042][   T29] audit: type=1400 audit(1737853828.235:154): avc:  denied  { create } for  pid=5925 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   69.029990][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   69.057089][   T54] Bluetooth: hci1: command tx timeout
[   69.063822][ T5827] Bluetooth: hci0: command tx timeout
[   69.063924][   T54] Bluetooth: hci3: command tx timeout
[   69.074435][    T9] usb 1-1: config 0 descriptor??
[   69.093566][   T54] Bluetooth: hci4: command tx timeout
[   69.099243][ T5820] Bluetooth: hci2: command tx timeout
[   69.204379][   T29] audit: type=1400 audit(1737853828.415:155): avc:  denied  { create } for  pid=5925 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   69.209845][ T5929] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[   69.281722][   T29] audit: type=1400 audit(1737853828.435:156): avc:  denied  { connect } for  pid=5925 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   69.301504][   T29] audit: type=1400 audit(1737853828.435:157): avc:  denied  { bind } for  pid=5925 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   69.313332][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'.
[   69.520727][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   69.710969][   T29] audit: type=1400 audit(1737853828.935:158): avc:  denied  { bind } for  pid=5915 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.983254][    T9] usb 1-1: string descriptor 0 read error: -22
[   70.004369][   T29] audit: type=1400 audit(1737853828.935:159): avc:  denied  { write } for  pid=5915 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.142676][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   70.176666][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.248994][    T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5
[   70.290098][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.311695][   T29] audit: type=1400 audit(1737853828.965:160): avc:  denied  { read } for  pid=5915 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.400471][    T9] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   70.438150][ T5938] ebt_among: dst integrity fail: 101
[   70.496906][   T29] audit: type=1400 audit(1737853828.995:161): avc:  denied  { create } for  pid=5939 comm="syz.3.9" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   70.584306][   T29] audit: type=1400 audit(1737853829.475:162): avc:  denied  { ioctl } for  pid=5939 comm="syz.3.9" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6976 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   70.730339][   T29] audit: type=1400 audit(1737853829.545:163): avc:  denied  { read } for  pid=5175 comm="acpid" name="mouse1" dev="devtmpfs" ino=2727 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   70.774355][ T5869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   70.796852][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.808811][ T5869] usb 2-1: Product: syz
[   70.813426][ T5869] usb 2-1: Manufacturer: syz
[   70.818262][ T5869] usb 2-1: SerialNumber: syz
[   70.835903][ T5868] usb 3-1: unable to read config index 0 descriptor/all
[   70.843285][ T5868] usb 3-1: can't read configurations, error -71
[   70.932553][ T5869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   70.949568][ T5816] usb 1-1: USB disconnect, device number 2
[   71.068268][   T25] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   71.344615][ T5966] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.500533][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[   71.508222][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   71.516498][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[   71.702807][ T5868] usb 3-1: Using ep0 maxpacket: 16
[   71.773795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   71.784337][ T5868] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.784752][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.827252][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   72.009619][ T5868] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.031976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   72.069058][ T5868] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.133465][   T25] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[   72.161186][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0
[   72.171775][   T25] ath9k_htc: Failed to initialize the device
[   72.184752][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   72.267236][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.301399][   T25] usb 2-1: ath9k_htc: USB layer deinitialized
[   72.346233][ T5868] usb 3-1: config 0 descriptor??
[   72.589921][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   72.619647][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.662859][    T9] usb 5-1: Product: syz
[   72.679836][    T9] usb 5-1: Manufacturer: syz
[   72.693321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   72.822708][ T5868] usbhid 3-1:0.0: can't add hid device: -71
[   72.841912][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   72.872672][    T9] usb 5-1: SerialNumber: syz
[   72.898722][ T5868] usb 3-1: USB disconnect, device number 3
[   72.936752][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   73.071739][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   73.155676][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   73.185612][ T5816] IPVS: starting estimator thread 0...
[   73.480945][ T5981] IPVS: using max 35 ests per chain, 84000 per kthread
[   73.923144][    T9] usb 2-1: USB disconnect, device number 2
[   73.962771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   73.982665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   74.059862][   T29] kauditd_printk_skb: 19 callbacks suppressed
[   74.059878][   T29] audit: type=1400 audit(1737853833.285:183): avc:  denied  { create } for  pid=5991 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   74.134652][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[   74.245521][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'.
[   74.289982][ T5917] ath9k_htc: Failed to initialize the device
[   74.316129][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.620542][ T5917] usb 5-1: ath9k_htc: USB layer deinitialized
[   74.628008][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.758403][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.807244][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.862737][ T5917] usb 5-1: USB disconnect, device number 2
[   74.907291][   T29] audit: type=1400 audit(1737853834.135:184): avc:  denied  { setopt } for  pid=5995 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.013816][   T29] audit: type=1400 audit(1737853834.195:185): avc:  denied  { write } for  pid=5995 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.187422][   T29] audit: type=1326 audit(1737853834.375:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.23" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2552f8cd29 code=0x0
[   75.273248][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'.
[   76.006745][   T29] audit: type=1326 audit(1737853834.885:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6004 comm="syz.1.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377898cd29 code=0x0
[   76.153273][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'.
[   76.171338][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.183110][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.195122][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.206947][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.242782][   T29] audit: type=1400 audit(1737853835.475:188): avc:  denied  { bind } for  pid=6013 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   76.319697][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'.
[   76.367579][   T29] audit: type=1400 audit(1737853835.475:189): avc:  denied  { write } for  pid=6013 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   76.387818][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.784129][  T970] cfg80211: failed to load regulatory.db
[   78.263280][ T6019] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
[   78.284122][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[   78.340808][   T29] audit: type=1400 audit(1737853837.565:190): avc:  denied  { ioctl } for  pid=6028 comm="syz.1.31" path="socket:[8364]" dev="sockfs" ino=8364 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   78.380983][ T6030] »»»»»»: renamed from lo (while UP)
[   78.511598][ T6033] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[   78.559080][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   78.568246][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   78.803782][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   78.898989][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.970188][    T9] usb 3-1: can't set config #1, error -71
[   79.007317][    T9] usb 3-1: USB disconnect, device number 4
[   79.390346][ T6045] FAULT_INJECTION: forcing a failure.
[   79.390346][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   80.401098][   T29] audit: type=1400 audit(1737853839.265:191): avc:  denied  { write } for  pid=6037 comm="syz.4.35" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   80.433767][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.1.36 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0
[   80.433794][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   80.433807][ T6045] Call Trace:
[   80.433811][ T6045]  <TASK>
[   80.433817][ T6045]  dump_stack_lvl+0x16c/0x1f0
[   80.433856][ T6045]  should_fail_ex+0x497/0x5b0
[   80.433880][ T6045]  _copy_from_user+0x2e/0xd0
[   80.433903][ T6045]  kstrtouint_from_user+0xd7/0x1c0
[   80.433920][ T6045]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   80.433944][ T6045]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   80.433971][ T6045]  proc_fail_nth_write+0x84/0x250
[   80.433999][ T6045]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   80.434017][ T6045]  ? ksys_write+0x12b/0x250
[   80.434043][ T6045]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   80.434061][ T6045]  vfs_write+0x24c/0x1150
[   80.434084][ T6045]  ? __fget_files+0x1fc/0x3a0
[   80.434104][ T6045]  ? __pfx___mutex_lock+0x10/0x10
[   80.434127][ T6045]  ? __pfx_vfs_write+0x10/0x10
[   80.434156][ T6045]  ? __fget_files+0x206/0x3a0
[   80.434185][ T6045]  ksys_write+0x12b/0x250
[   80.434208][ T6045]  ? __pfx_ksys_write+0x10/0x10
[   80.434238][ T6045]  do_syscall_64+0xcd/0x250
[   80.434263][ T6045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.434284][ T6045] RIP: 0033:0x7f377898b7df
[   80.434303][ T6045] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   80.434317][ T6045] RSP: 002b:00007f37798a2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   80.434333][ T6045] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f377898b7df
[   80.434343][ T6045] RDX: 0000000000000001 RSI: 00007f37798a20a0 RDI: 0000000000000003
[   80.434351][ T6045] RBP: 00007f37798a2090 R08: 0000000000000000 R09: 0000000000000000
[   80.434360][ T6045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   80.434368][ T6045] R13: 0000000000000001 R14: 00007f3778ba6080 R15: 00007ffd1ae61a58
[   80.434391][ T6045]  </TASK>
[   80.700990][ T6047] x_tables: ip_tables: ah match: only valid for protocol 51
[   81.526727][   T29] audit: type=1400 audit(1737853839.615:192): avc:  denied  { create } for  pid=6039 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.539223][ T6052] mkiss: ax0: crc mode is auto.
[   81.610057][ T6053] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[   81.699081][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33'.
[   82.032759][   T29] audit: type=1400 audit(1737853840.765:193): avc:  denied  { read write } for  pid=6051 comm="syz.0.38" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   82.037947][ T6052] FAULT_INJECTION: forcing a failure.
[   82.037947][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   82.152913][   T29] audit: type=1400 audit(1737853840.765:194): avc:  denied  { open } for  pid=6051 comm="syz.0.38" path="/dev/input/mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   82.189731][ T6058] binder: BINDER_SET_CONTEXT_MGR already set
[   82.239266][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.38 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0
[   82.239293][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   82.239304][ T6052] Call Trace:
[   82.239308][ T6052]  <TASK>
[   82.239315][ T6052]  dump_stack_lvl+0x16c/0x1f0
[   82.239347][ T6052]  should_fail_ex+0x497/0x5b0
[   82.239378][ T6052]  _copy_from_user+0x2e/0xd0
[   82.239405][ T6052]  input_event_from_user+0x134/0x3b0
[   82.239431][ T6052]  ? __pfx_input_event_from_user+0x10/0x10
[   82.239456][ T6052]  ? __pfx___might_resched+0x10/0x10
[   82.239484][ T6052]  ? input_inject_event+0x1a0/0x380
[   82.239510][ T6052]  evdev_write+0x377/0x750
[   82.239537][ T6052]  ? __pfx_evdev_write+0x10/0x10
[   82.239563][ T6052]  ? bpf_lsm_file_permission+0x9/0x10
[   82.239592][ T6052]  ? security_file_permission+0x71/0x210
[   82.239615][ T6052]  ? rw_verify_area+0xcf/0x680
[   82.239642][ T6052]  ? __pfx_evdev_write+0x10/0x10
[   82.239664][ T6052]  vfs_write+0x24c/0x1150
[   82.239691][ T6052]  ? __fget_files+0x1fc/0x3a0
[   82.239716][ T6052]  ? __pfx_lock_release+0x10/0x10
[   82.239742][ T6052]  ? __pfx_vfs_write+0x10/0x10
[   82.239768][ T6052]  ? lock_acquire+0x2f/0xb0
[   82.239790][ T6052]  ? __fget_files+0x40/0x3a0
[   82.239819][ T6052]  ? __fget_files+0x206/0x3a0
[   82.239852][ T6052]  ksys_write+0x207/0x250
[   82.239877][ T6052]  ? __pfx_ksys_write+0x10/0x10
[   82.239909][ T6052]  do_syscall_64+0xcd/0x250
[   82.239937][ T6052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.239963][ T6052] RIP: 0033:0x7f2552f8cd29
[   82.239977][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.239994][ T6052] RSP: 002b:00007f2553d9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   82.240012][ T6052] RAX: ffffffffffffffda RBX: 00007f25531a5fa0 RCX: 00007f2552f8cd29
[   82.240024][ T6052] RDX: 0000000000000918 RSI: 0000000020000040 RDI: 0000000000000005
[   82.240035][ T6052] RBP: 00007f2553d9d090 R08: 0000000000000000 R09: 0000000000000000
[   82.240045][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.240055][ T6052] R13: 0000000000000000 R14: 00007f25531a5fa0 R15: 00007fff39fe5b78
[   82.240081][ T6052]  </TASK>
[   82.590320][ T6064] x_tables: ip_tables: ah match: only valid for protocol 51
[   83.350857][ T6058] binder: 6056:6058 ioctl 4018620d 20000040 returned -16
[   83.369889][   T29] audit: type=1400 audit(1737853840.865:195): avc:  denied  { search } for  pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.735295][   T29] audit: type=1400 audit(1737853840.915:196): avc:  denied  { write } for  pid=6051 comm="syz.0.38" name="event3" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   84.577334][   T29] audit: type=1400 audit(1737853840.945:197): avc:  denied  { open } for  pid=6051 comm="syz.0.38" path="/dev/input/event3" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   84.729883][   T29] audit: type=1400 audit(1737853841.345:198): avc:  denied  { read } for  pid=6056 comm="syz.3.39" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   84.801148][   T29] audit: type=1400 audit(1737853841.345:199): avc:  denied  { open } for  pid=6056 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   84.917927][   T29] audit: type=1400 audit(1737853841.355:200): avc:  denied  { ioctl } for  pid=6056 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   85.057129][ T6082] ebt_among: dst integrity fail: 101
[   85.403390][   T29] audit: type=1400 audit(1737853841.355:201): avc:  denied  { set_context_mgr } for  pid=6056 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   85.480803][   T29] audit: type=1400 audit(1737853841.415:202): avc:  denied  { map } for  pid=6056 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   85.784260][ T6080] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   86.414098][   T29] audit: type=1400 audit(1737853844.125:203): avc:  denied  { create } for  pid=6079 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   86.434243][   T29] audit: type=1400 audit(1737853844.155:204): avc:  denied  { write } for  pid=6079 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   86.462665][   T29] audit: type=1400 audit(1737853844.155:205): avc:  denied  { nlmsg_write } for  pid=6079 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   86.487354][   T29] audit: type=1400 audit(1737853844.795:206): avc:  denied  { getopt } for  pid=6074 comm="syz.1.44" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   86.550157][ T6099] x_tables: ip_tables: ah match: only valid for protocol 51
[   86.818137][ T6103] »»»»»»: renamed from lo (while UP)
[   87.024752][   T29] audit: type=1400 audit(1737853846.255:207): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   87.053009][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   87.439225][ T6110] x_tables: ip_tables: ah match: only valid for protocol 51
[   88.836080][   T25] usb 5-1: string descriptor 0 read error: -71
[   88.842444][   T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   88.874809][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.922770][   T25] usb 5-1: can't set config #1, error -71
[   88.966926][   T25] usb 5-1: USB disconnect, device number 3
[   88.981024][   T29] audit: type=1400 audit(1737853848.205:208): avc:  denied  { setattr } for  pid=6120 comm="syz.1.50" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.003640][ T5829] udevd[5829]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory
[   89.042864][ T5829] udevd[5829]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory
[   89.072661][   T29] audit: type=1400 audit(1737853848.205:209): avc:  denied  { write } for  pid=6120 comm="syz.1.50" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.202769][   T29] audit: type=1400 audit(1737853848.205:210): avc:  denied  { open } for  pid=6120 comm="syz.1.50" path="/9/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.456655][ T6128] veth0_to_team: entered promiscuous mode
[   89.462730][ T6128] veth0_to_team: entered allmulticast mode
[   89.810462][  T985] ==================================================================
[   89.818559][  T985] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x443/0x5a0
[   89.826197][  T985] Read of size 4 at addr ffff88807c9498f8 by task kworker/u8:5/985
[   89.834073][  T985] 
[   89.836379][  T985] CPU: 0 UID: 0 PID: 985 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0
[   89.836392][  T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   89.836400][  T985] Workqueue: events_unbound netfs_write_collection_worker
[   89.836422][  T985] Call Trace:
[   89.836427][  T985]  <TASK>
[   89.836432][  T985]  dump_stack_lvl+0x116/0x1f0
[   89.836449][  T985]  print_report+0xc3/0x620
[   89.836460][  T985]  ? __virt_addr_valid+0x5e/0x590
[   89.836471][  T985]  ? __phys_addr+0xc6/0x150
[   89.836481][  T985]  kasan_report+0xd9/0x110
[   89.836491][  T985]  ? iov_iter_revert+0x443/0x5a0
[   89.836506][  T985]  ? iov_iter_revert+0x443/0x5a0
[   89.836521][  T985]  iov_iter_revert+0x443/0x5a0
[   89.836536][  T985]  netfs_retry_writes+0x163d/0x1a00
[   89.836553][  T985]  ? __pfx___lock_acquire+0x10/0x10
[   89.836570][  T985]  ? __pfx_netfs_retry_writes+0x10/0x10
[   89.836588][  T985]  ? __pfx_lock_release+0x10/0x10
[   89.836602][  T985]  ? rcu_is_watching+0x12/0xc0
[   89.836613][  T985]  netfs_write_collection_worker+0x23de/0x37c0
[   89.836635][  T985]  process_one_work+0x9c5/0x1ba0
[   89.836651][  T985]  ? __pfx_netfs_write_collection_worker+0x10/0x10
[   89.836667][  T985]  ? __pfx_process_one_work+0x10/0x10
[   89.836680][  T985]  ? rcu_is_watching+0x12/0xc0
[   89.836692][  T985]  ? assign_work+0x1a0/0x250
[   89.836705][  T985]  worker_thread+0x6c8/0xf00
[   89.836720][  T985]  ? __kthread_parkme+0x148/0x220
[   89.836730][  T985]  ? __pfx_worker_thread+0x10/0x10
[   89.836748][  T985]  kthread+0x3af/0x750
[   89.836760][  T985]  ? __pfx_kthread+0x10/0x10
[   89.836772][  T985]  ? lock_acquire+0x2f/0xb0
[   89.836786][  T985]  ? __pfx_kthread+0x10/0x10
[   89.836798][  T985]  ret_from_fork+0x45/0x80
[   89.836812][  T985]  ? __pfx_kthread+0x10/0x10
[   89.836824][  T985]  ret_from_fork_asm+0x1a/0x30
[   89.836839][  T985]  </TASK>
[   89.836842][  T985] 
[   90.017713][  T985] Allocated by task 25:
[   90.021855][  T985]  kasan_save_stack+0x33/0x60
[   90.026530][  T985]  kasan_save_track+0x14/0x30
[   90.031302][  T985]  __kasan_kmalloc+0xaa/0xb0
[   90.035975][  T985]  __kmalloc_noprof+0x21c/0x510
[   90.040932][  T985]  usb_hcd_submit_urb+0x6b6/0x2090
[   90.046044][  T985]  usb_submit_urb+0x87c/0x1730
[   90.050803][  T985]  usb_start_wait_urb+0x103/0x4c0
[   90.055829][  T985]  usb_control_msg+0x327/0x4b0
[   90.060602][  T985]  hub_ext_port_status+0x14e/0x670
[   90.065703][  T985]  hub_port_debounce+0x1a3/0x3d0
[   90.070722][  T985]  hub_event+0x3461/0x4e10
[   90.075131][  T985]  process_one_work+0x9c5/0x1ba0
[   90.080146][  T985]  worker_thread+0x6c8/0xf00
[   90.084723][  T985]  kthread+0x3af/0x750
[   90.088779][  T985]  ret_from_fork+0x45/0x80
[   90.093189][  T985]  ret_from_fork_asm+0x1a/0x30
[   90.097939][  T985] 
[   90.100243][  T985] Freed by task 25:
[   90.104055][  T985]  kasan_save_stack+0x33/0x60
[   90.108824][  T985]  kasan_save_track+0x14/0x30
[   90.113505][  T985]  kasan_save_free_info+0x3b/0x60
[   90.118531][  T985]  __kasan_slab_free+0x51/0x70
[   90.123383][  T985]  kfree+0x14f/0x4b0
[   90.127285][  T985]  usb_hcd_submit_urb+0xbf0/0x2090
[   90.132398][  T985]  usb_submit_urb+0x87c/0x1730
[   90.137166][  T985]  usb_start_wait_urb+0x103/0x4c0
[   90.142195][  T985]  usb_control_msg+0x327/0x4b0
[   90.147052][  T985]  hub_ext_port_status+0x14e/0x670
[   90.152253][  T985]  hub_port_debounce+0x1a3/0x3d0
[   90.157191][  T985]  hub_event+0x3461/0x4e10
[   90.161609][  T985]  process_one_work+0x9c5/0x1ba0
[   90.166642][  T985]  worker_thread+0x6c8/0xf00
[   90.171227][  T985]  kthread+0x3af/0x750
[   90.175374][  T985]  ret_from_fork+0x45/0x80
[   90.179783][  T985]  ret_from_fork_asm+0x1a/0x30
[   90.184541][  T985] 
[   90.186850][  T985] The buggy address belongs to the object at ffff88807c9498e0
[   90.186850][  T985]  which belongs to the cache kmalloc-16 of size 16
[   90.200810][  T985] The buggy address is located 8 bytes to the right of
[   90.200810][  T985]  allocated 16-byte region [ffff88807c9498e0, ffff88807c9498f0)
[   90.215198][  T985] 
[   90.217509][  T985] The buggy address belongs to the physical page:
[   90.223920][  T985] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c949
[   90.232751][  T985] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   90.240145][  T985] page_type: f5(slab)
[   90.244120][  T985] raw: 00fff00000000000 ffff88801b041640 dead000000000122 0000000000000000
[   90.252691][  T985] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000
[   90.261345][  T985] page dumped because: kasan: bad access detected
[   90.267752][  T985] page_owner tracks the page as allocated
[   90.273457][  T985] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5825, tgid 5825 (syz-executor), ts 88834111415, free_ts 88821231794
[   90.292997][  T985]  post_alloc_hook+0x2d1/0x350
[   90.297778][  T985]  get_page_from_freelist+0xfce/0x2f80
[   90.303329][  T985]  __alloc_pages_noprof+0x221/0x2470
[   90.308610][  T985]  new_slab+0xca/0x410
[   90.312673][  T985]  ___slab_alloc+0xc5d/0x1720
[   90.317342][  T985]  __slab_alloc.constprop.0+0x56/0xb0
[   90.322720][  T985]  __kmalloc_node_noprof+0x2f0/0x510
[   90.327999][  T985]  __kvmalloc_node_noprof+0xad/0x1a0
[   90.333369][  T985]  xt_replace_table+0x1e3/0x940
[   90.338203][  T985]  __do_replace+0x1d3/0x9d0
[   90.342700][  T985]  do_ipt_set_ctl+0x956/0xbe0
[   90.347360][  T985]  nf_setsockopt+0x8a/0xf0
[   90.351793][  T985]  ip_setsockopt+0xcb/0xf0
[   90.356226][  T985]  tcp_setsockopt+0xa4/0x100
[   90.360814][  T985]  do_sock_setsockopt+0x222/0x480
[   90.365837][  T985]  __sys_setsockopt+0x1a0/0x230
[   90.370691][  T985] page last free pid 6073 tgid 6072 stack trace:
[   90.377017][  T985]  free_unref_folios+0xa7b/0x14f0
[   90.382056][  T985]  folios_put_refs+0x587/0x7b0
[   90.386822][  T985]  free_pages_and_swap_cache+0x45f/0x510
[   90.392450][  T985]  __tlb_batch_free_encoded_pages+0xf9/0x290
[   90.398428][  T985]  tlb_finish_mmu+0x168/0x7b0
[   90.403088][  T985]  exit_mmap+0x413/0xba0
[   90.407326][  T985]  __mmput+0x12a/0x410
[   90.411386][  T985]  mmput+0x62/0x70
[   90.415096][  T985]  do_exit+0x9ba/0x2d70
[   90.419241][  T985]  do_group_exit+0xd3/0x2a0
[   90.423737][  T985]  get_signal+0x24ed/0x26c0
[   90.428267][  T985]  arch_do_signal_or_restart+0x90/0x7e0
[   90.433822][  T985]  syscall_exit_to_user_mode+0x150/0x2a0
[   90.439581][  T985]  do_syscall_64+0xda/0x250
[   90.444075][  T985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.450044][  T985] 
[   90.452350][  T985] Memory state around the buggy address:
[   90.457967][  T985]  ffff88807c949780: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[   90.466020][  T985]  ffff88807c949800: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   90.474072][  T985] >ffff88807c949880: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   90.482116][  T985]                                                                 ^
[   90.490074][  T985]  ffff88807c949900: 00 00 fc fc fa fb fc fc 00 06 fc fc 00 00 fc fc
[   90.498209][  T985]  ffff88807c949980: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[   90.506440][  T985] ==================================================================
[   90.593889][  T985] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   90.601207][  T985] CPU: 0 UID: 0 PID: 985 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0
[   90.611810][  T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   90.621876][  T985] Workqueue: events_unbound netfs_write_collection_worker
[   90.629022][  T985] Call Trace:
[   90.632298][  T985]  <TASK>
[   90.635223][  T985]  dump_stack_lvl+0x3d/0x1f0
[   90.639813][  T985]  panic+0x71d/0x800
[   90.643704][  T985]  ? __pfx_panic+0x10/0x10
[   90.648112][  T985]  ? preempt_schedule_thunk+0x1a/0x30
[   90.653479][  T985]  ? preempt_schedule_common+0x44/0xc0
[   90.658931][  T985]  ? check_panic_on_warn+0x1f/0xb0
[   90.664039][  T985]  check_panic_on_warn+0xab/0xb0
[   90.668971][  T985]  end_report+0x117/0x180
[   90.673293][  T985]  kasan_report+0xe9/0x110
[   90.677696][  T985]  ? iov_iter_revert+0x443/0x5a0
[   90.682631][  T985]  ? iov_iter_revert+0x443/0x5a0
[   90.687578][  T985]  iov_iter_revert+0x443/0x5a0
[   90.692331][  T985]  netfs_retry_writes+0x163d/0x1a00
[   90.697536][  T985]  ? __pfx___lock_acquire+0x10/0x10
[   90.702741][  T985]  ? __pfx_netfs_retry_writes+0x10/0x10
[   90.708283][  T985]  ? __pfx_lock_release+0x10/0x10
[   90.713296][  T985]  ? rcu_is_watching+0x12/0xc0
[   90.718055][  T985]  netfs_write_collection_worker+0x23de/0x37c0
[   90.724225][  T985]  process_one_work+0x9c5/0x1ba0
[   90.729242][  T985]  ? __pfx_netfs_write_collection_worker+0x10/0x10
[   90.735743][  T985]  ? __pfx_process_one_work+0x10/0x10
[   90.741104][  T985]  ? rcu_is_watching+0x12/0xc0
[   90.745953][  T985]  ? assign_work+0x1a0/0x250
[   90.750547][  T985]  worker_thread+0x6c8/0xf00
[   90.755155][  T985]  ? __kthread_parkme+0x148/0x220
[   90.760179][  T985]  ? __pfx_worker_thread+0x10/0x10
[   90.765279][  T985]  kthread+0x3af/0x750
[   90.769345][  T985]  ? __pfx_kthread+0x10/0x10
[   90.773937][  T985]  ? lock_acquire+0x2f/0xb0
[   90.778437][  T985]  ? __pfx_kthread+0x10/0x10
[   90.783018][  T985]  ret_from_fork+0x45/0x80
[   90.787527][  T985]  ? __pfx_kthread+0x10/0x10
[   90.792191][  T985]  ret_from_fork_asm+0x1a/0x30
[   90.797034][  T985]  </TASK>
[   90.800307][  T985] Kernel Offset: disabled
[   90.804617][  T985] Rebooting in 86400 seconds..