last executing test programs:

3.772485238s ago: executing program 4 (id=493):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2f0, 0x2e8, 0x2e8, 0x2f0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x160, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@srh1={{0x90}, {0x2e, 0x8, 0x8, 0x41, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffff00, 0xff000000, 0xff000000, 0xffffff00], 0x402, 0x80}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1f}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @common=@icmp6={{}, {0x1c, "d254", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x5, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x444)

3.14699632s ago: executing program 4 (id=502):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765a10040000280080005000100000006002700000fff00080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

3.114788452s ago: executing program 1 (id=504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000d05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_sctp(0x2, 0x1, 0x84)
recvmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/98, 0x62}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001640)=""/206, 0xae9fa2080de2c518}], 0x8, &(0x7f00000017c0)=""/235, 0xeb}, 0x302}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000003040)=""/171, 0xab}, 0x9}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003100)=""/221, 0xdd}, {&(0x7f0000003200)=""/156, 0x9c}, {&(0x7f00000032c0)=""/1, 0x1}, {&(0x7f0000003300)=""/62, 0x3e}, {&(0x7f0000003380)}, {&(0x7f0000002dc0)=""/182, 0xb6}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/140, 0x8c}, {&(0x7f0000004540)=""/216, 0xd8}], 0x9, &(0x7f0000004700)=""/150, 0x96}, 0x7}, {{&(0x7f00000047c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004840)=""/80, 0x50}, {&(0x7f00000048c0)=""/24, 0x18}, {&(0x7f0000004900)=""/235, 0xeb}, {&(0x7f0000004a00)=""/174, 0xae}, {&(0x7f0000004ac0)=""/110, 0x6e}], 0x5, &(0x7f0000004bc0)=""/177, 0xb1}, 0x6}, {{&(0x7f0000004c80)=@nl=@proc, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004d00)=""/238, 0xee}, {&(0x7f0000004e00)=""/39, 0x27}, {&(0x7f0000004e40)=""/29, 0x1d}], 0x3, &(0x7f0000000300)=""/48, 0x30}, 0x4}, {{&(0x7f0000004f00)=@ax25={{0x3, @rose}, [@remote, @netrom, @netrom, @default, @bcast, @remote, @rose]}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004f80)=""/119, 0x77}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/216, 0xd8}, {&(0x7f0000006100)=""/171, 0xab}], 0x4, &(0x7f0000006200)=""/4096, 0x1000}, 0xcba}, {{&(0x7f0000007200)=@ll, 0x80, &(0x7f0000007440)=[{&(0x7f0000007280)=""/142, 0x8e}, {&(0x7f0000007340)=""/213, 0xd5}], 0x2}, 0xe43}, {{0x0, 0x0, &(0x7f0000008600)=[{&(0x7f0000007480)=""/61, 0x3d}, {&(0x7f00000074c0)=""/18, 0x12}, {&(0x7f0000007500)=""/4096, 0x1000}, {&(0x7f0000008500)=""/202, 0xca}], 0x4, &(0x7f0000008640)=""/34, 0x22}, 0x9}, {{&(0x7f0000008680)=@nfc_llcp, 0x80, &(0x7f0000008700), 0x0, &(0x7f0000008740)=""/222, 0xde}, 0x5}, {{&(0x7f0000008840)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000008bc0)=[{&(0x7f00000088c0)=""/18, 0x12}, {&(0x7f0000001940)=""/220, 0xdc}, {&(0x7f0000001a40)=""/99, 0x63}, {&(0x7f0000008a80)=""/117, 0x75}, {&(0x7f0000008b00)=""/139, 0x8b}], 0x5, &(0x7f0000008c40)=""/213, 0xd5}, 0x3}], 0xa, 0x2, &(0x7f0000008fc0)={0x0, 0x3938700})
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.010127157s ago: executing program 1 (id=506):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x9cd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x57, 0xe}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0xec, 0xf7, 0xf8, 0x8, 0x1}, 0x103, &(0x7f0000000940)={0x5, 0xf, 0x103, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x49, 0x6, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7, 0xf9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d9c0bf919150dea94a772784f16e519a"}, @ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x5, 0x8001}, @generic={0xba, 0x10, 0x1, "20b4dad0a4866d66e861617e6ac35fab449692afd657498185fabb2789d9e52a2eb13e484e6c4fa8b96a7482559e85c06f2025ae7e9feef01771724e06df78f9724c18992bfad032ee041e9dd5e1c4cb921ae315f0d223d72f15eecf2e0e072859ce0ad32813a93a6abfe40fbbee1b39db56e8c01a89ee203c6259950058b605282e7e2cd3e610e6f850f504f296c4fdc1c4293b39eeab8fc4729b088ded49c94189ccb84ce7b45e7ac5eb12b74f42b03f0f8b82414ef1"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "a29dc7698c7422725614d43f0dfefe99"}]}, 0x7, [{0x97, &(0x7f0000000a80)=@string={0x97, 0x3, "1034b430e4e992a7484cb52857853289a9717fee23decac9a48772aa8d2457fd7e8f09b7e6a80c7830559a9cc76fdb6dc3d4e3644b62d0cb0880af346f73c1a4294f9391b924b9c030c0efed112be69a707385f45bdc7830163ddea0e28af9be079de05f55813b3728c2e7b19a8424c16e3538613cca919ad04325a858b67310863977c00fe24ce8215c82facb376fc33d267df53f"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x639d16e8bab0b169}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1801}}, {0xcf, &(0x7f0000000bc0)=@string={0xcf, 0x3, "8d639c4029b241984cb3d901a0c2f73af87f041d1624ffdc0d7ca9862e2f1b9b100c7f74013014383bdeb82239aef4861b819c009d8aebe7d76644c80fc73970dd71d22b4b53d493ff08475eb63754466903148a4666610081a06e50923f4eee835f18265807ac1612ef844774c622520c4323cf28a89c393b9b48cb21b2d0f4d635ddbe03f62a2ee5e66625d852a2f5d3f31c18af204e1efdd93181de3592409e8eb1d424e43f52c22456b8cd686c5178b64a110e6a396438afd809c10df5ef3cf217e19e8c5b1b7392563373"}}, {0xc8, &(0x7f0000000cc0)=@string={0xc8, 0x3, "c54f2805f0dc12c1a813efaafd5390b0536a8063da82295af97eed22d9218d4c0f47cda1188d7b0ec60cbeab78b0662e243113b8be93b14907917f1f5e2984e302220098d36747cb52c7f1b8336988fe5f7d1789701775387779b81d343a39e5ee4440934af84e2cb1dcf969c3e355498fa328f759f6baff79ee0379871d7f995fee6426aabc531a92367ef39aaedc695bca906e95e02d55867e368b9044f375f6dc2419ccd6524cdd2fd73839bd5a99306d98693169f28783fd299b77bb068d851f6f4206b5"}}, {0x22, &(0x7f0000000dc0)=@string={0x22, 0x3, "98507aaa77c94dbb4de8b7aa72fba3d7f309d14e9c8c4ab9b7d68cd641348b6c"}}, {0x7c, &(0x7f0000000e00)=ANY=[@ANYBLOB="7c03ff97c736c1bf97c2584988b031d3b905969f54481a80737010e53c2b792612a33b1be9c4cc5fb87f840178e3ad60245bb9d319b5d34d43cd8310aa1e4ffedb4e7cd037bab24474157e3a92b206542897446110b39a488d6f51a471df75e064bb0bc509b233578b083987ff52f5fefb23cea2a3bfe1268a86beb1"]}]})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x1c, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x0, 0x7, 0x2, 0x40, 0x10}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @ldst={0x1, 0x2, 0x0, 0x8, 0x0, 0x10, 0x10}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe38f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @exit]}, &(0x7f0000000300)='syzkaller\x00', 0x10000000, 0x5a, &(0x7f0000000540)=""/90, 0x41100, 0x8, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xb, 0xfffffff8, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x0, 0x5, 0xe}, {0x5, 0x5, 0x10000c, 0x6}, {0x0, 0x5, 0x9}], 0x10, 0x5}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

2.821419342s ago: executing program 3 (id=508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x108, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf6, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb", @typed={0x4, 0xe9}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x26e1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c805edae16d30a2dc7351754cdae8ef35f9d152a", 0x6b}], 0x2}, 0x0)
close(r7)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
fsopen(&(0x7f00000001c0)='cifs\x00', 0x0)

2.785351102s ago: executing program 4 (id=509):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000002000030006000000000002"], 0x58}}, 0x24000894)

2.709905199s ago: executing program 3 (id=510):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), 0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
wait4(r1, &(0x7f0000000040), 0x9, &(0x7f0000000080))
r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
exit(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000400)=""/191, 0xbf}], 0x2}, 0x101}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x2001, &(0x7f0000001600))
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
r6 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0)

2.568452766s ago: executing program 2 (id=512):
r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000100000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
close_range(r0, r1, 0x0)

2.437226957s ago: executing program 0 (id=513):
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000500000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)

2.434722573s ago: executing program 2 (id=514):
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x4000010, 0xffffffffffffffff, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x118, &(0x7f0000000180)=0x6, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8)
fcntl$notify(0xffffffffffffffff, 0x402, 0x24)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
pwritev2(r6, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = getpid()
get_robust_list(r7, &(0x7f00000004c0)=0x0, &(0x7f0000000500))
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
mount$afs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000300)={[{@flock_openafs}, {@flock_local}, {@dyn}], [{@smackfsdef={'smackfsdef', 0x3d, '%%)%'}}, {@smackfshat={'smackfshat', 0x3d, '%:'}}, {@dont_measure}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '%['}}, {@uid_lt}, {@subj_role={'subj_role', 0x3d, '..'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x21}}, {@smackfshat}]})
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'pcl724\x00', [0xafff, 0x33, 0x80010000, 0x4, 0x8, 0x288f, 0x6, 0x8012, 0x1007, 0xc0000000, 0x0, 0x80000000, 0x8, 0x1000000, 0x5, 0xfdfffff7, 0xe8, 0x2, 0x1000009, 0x3, 0x2000005, 0x5, 0xf, 0x9, 0x4, 0x5, 0x205, 0x6, 0x20002, 0x400002, 0x2, 0x1]})

2.396519746s ago: executing program 4 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
write$usbip_server(r4, &(0x7f0000001480)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8e}, 0x4, 0x0, 0x1, 0x0, 0x9}, 0x30)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d)
ioctl$TCXONC(r5, 0x540a, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
close(r7)
mq_unlink(&(0x7f0000000000)='eth0\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="87e40000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000008000880040000801400020077673100"/42], 0x30}, 0x1, 0x0, 0x0, 0x20044810}, 0x4008020)

2.309385819s ago: executing program 1 (id=516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
write$usbip_server(r4, &(0x7f0000001480)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8e}, 0x4, 0x0, 0x1, 0x0, 0x9}, 0x30)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d)
ioctl$TCXONC(r5, 0x540a, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
close(r7)
mq_unlink(&(0x7f0000000000)='eth0\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="87e40000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000008000880040000801400020077673100"/42], 0x30}, 0x1, 0x0, 0x0, 0x20044810}, 0x4008020)

2.292418503s ago: executing program 0 (id=517):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d940000f3f80000", 0x1c)

2.244168924s ago: executing program 2 (id=518):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8920)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e3000ae72ef44d76c3e40645a6400000008008c0003000000080001007063690011000200303030303a30303a31302e300000001008008a00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)
mount(&(0x7f00000001c0)=@filename='./file1\x00', &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='devpts\x00', 0x114048, &(0x7f0000000300)='*{\x00')
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)

2.186381434s ago: executing program 1 (id=519):
socket(0x2b, 0x1, 0x1)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x311001, 0x1a)
recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000300)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000280)}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f0000001100)=""/77, 0x4d}], 0x5, &(0x7f0000000c40)=""/200, 0xc8}, 0x9ffd}, {{&(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/63, 0x3f}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000000a00)=""/65, 0x41}], 0x4, &(0x7f0000000ac0)=""/223, 0xdf}, 0x100}, {{&(0x7f0000000bc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/118, 0x76}, 0xd}, {{&(0x7f0000000240)=@ax25={{0x3, @rose}, [@bcast, @null, @default, @remote, @rose, @null, @bcast]}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000fc0)=""/78, 0x4e}, {&(0x7f0000000d40)=""/3, 0x3}, {&(0x7f0000001040)=""/149, 0x95}, {&(0x7f0000000e00)=""/100, 0x64}], 0x8, &(0x7f0000001200)=""/193, 0xc1}, 0x7}], 0x4, 0x40002020, &(0x7f0000000ec0)={0x0, 0x3938700})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1, 0x1}, 0xffffffffffffff63)
recvmmsg(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x80006}], 0x1, 0x10003, 0x0)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
fcntl$setlease(r1, 0x400, 0x0)
read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = syz_open_procfs(r3, &(0x7f00000001c0)='net/sctp\x00')
pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_uring_enter(r0, 0x2800, 0x8694, 0x0, &(0x7f0000000180)={[0x8]}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = gettid()
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x80108906, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)

2.101342535s ago: executing program 0 (id=520):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x108, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf6, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb", @typed={0x4, 0xe9}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x26e1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c805edae16d30a2dc7351754cdae8ef35f9d152a", 0x6b}], 0x2}, 0x0)
close(r7)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
fsopen(&(0x7f00000001c0)='cifs\x00', 0x0)

2.080190161s ago: executing program 4 (id=521):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000100)="949fa8302e51a3d3fc7db8", {0x3, 0x80200000, 0x0, 0x8, 0x7f, 0x1, 0x4}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe80fe800000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

1.720480972s ago: executing program 0 (id=522):
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) (async, rerun: 32)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40002) (async, rerun: 32)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) (async)
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="85ffffff10000200feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="019804000000000000000400f133000000001b00c5d8000000000d000002000000001280000001007674690000000280000003000300000000000100", @ANYRES32=r6, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB="00000400ac1e010100000500ac1414aa00000500ac1e010100000100", @ANYRES32=0x0, @ANYBLOB="0000030010000000000006400000000000000400ac1414cd00000500ac1414aa000006000400000000000200030000000000030007000000"], 0x20}}, 0x44) (async)
keyctl$negate(0xc, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) (async, rerun: 32)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x4}}) (async, rerun: 32)
syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000200)) (async)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
r10 = dup(r9)
setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, 0x0, 0x0) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x10000010)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

1.673817604s ago: executing program 3 (id=523):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000211000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004)

1.268081405s ago: executing program 3 (id=524):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x100)
socket$nl_netfilter(0x10, 0x3, 0xc)
process_madvise(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x14, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x42100, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x4040040)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000000000000, 0x2)
syz_usb_connect$uac1(0x5, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0xc7, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0x81, 0xb, {0x7, 0x25, 0x1, 0x8, 0xfb, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x2, 0x3, {0x7, 0x25, 0x1, 0x4, 0x2, 0xed}}}}}}}}]}}, 0x0)

1.259424465s ago: executing program 0 (id=525):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4449c0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05fac02680da040000000000000000030000004c00018038000400200001000000000000002200040000001400020002000000ffffffff0000000000000000f8ff00007564703a73797a0000004e0c2859215df99e924f8cc100"/102], 0x60}}, 0x0)
open_by_handle_at(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4880)
r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="200a09000000090902"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01042900806ce542726637960080000000"], 0x14}, 0x1, 0x0, 0x0, 0x86}, 0x20004040)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x28, r13, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f5e3a050", @ANYRES16=r13, @ANYBLOB="00042abd7000fcdbdf25010000003c0004800500030005000000050003000100000005000300280000000500030005000000050003000100000005000300070000000500030001000000"], 0x50}, 0x1, 0x0, 0x0, 0x220048a0}, 0x1)

1.053858523s ago: executing program 2 (id=526):
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000700"/87], 0xf8}}, 0x4000800)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

941.287923ms ago: executing program 4 (id=527):
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall() (fail_nth: 1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4})
ioctl(r1, 0x8b21, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000100)={'wlan0\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b80), r6)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r7, 0xc8036ab6d6cbef07, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x200058c0)

894.490606ms ago: executing program 1 (id=528):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r1 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r1, &(0x7f0000000a40)={&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/131, 0x83}], 0x2, 0x0, 0x0, 0x4011}, 0x5010)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba028dffffffffff"}, 0x28)
syz_io_uring_setup(0x1bbc, 0x0, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0)
r2 = inotify_init()
timer_create(0xfffffffd, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x90, 0x4}}]}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xf, 0x4)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0)

270.14321ms ago: executing program 0 (id=529):
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall()
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r5, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5})
ioctl(r2, 0x8b21, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000100)={'wlan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

267.457962ms ago: executing program 2 (id=530):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000690000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000010}, 0x50)

96.639386ms ago: executing program 3 (id=531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
write$usbip_server(r4, &(0x7f0000001480)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8e}, 0x4, 0x0, 0x1, 0x0, 0x9}, 0x30)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d)
ioctl$TCXONC(r5, 0x540a, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
r7 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
close(r7)
mq_unlink(&(0x7f0000000000)='eth0\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="87e40000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf250100000008000880040000801400020077673100"/42], 0x30}, 0x1, 0x0, 0x0, 0x20044810}, 0x4008020)

84.034386ms ago: executing program 2 (id=532):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x108, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf6, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb", @typed={0x4, 0xe9}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x26e1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c805edae16d30a2dc7351754cdae8ef35f9d152a", 0x6b}], 0x2}, 0x0)
close(r7)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
fsopen(&(0x7f00000001c0)='cifs\x00', 0x0)

54.961095ms ago: executing program 1 (id=533):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x2aec}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x21, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0x9, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x1, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x6, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x48, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0xfffffff9, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0x7}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x3cb7, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0x379, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 3 (id=534):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x70, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts.
[   55.069882][   T29] audit: type=1400 audit(1774119880.452:62): avc:  denied  { mounton } for  pid=5791 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   55.093478][   T29] audit: type=1400 audit(1774119880.482:63): avc:  denied  { mount } for  pid=5791 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   55.096043][ T5791] cgroup: Unknown subsys name 'net'
[   55.122647][   T29] audit: type=1400 audit(1774119880.512:64): avc:  denied  { unmount } for  pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   55.304988][ T5791] cgroup: Unknown subsys name 'cpuset'
[   55.312763][ T5791] cgroup: Unknown subsys name 'rlimit'
[   55.431245][   T29] audit: type=1400 audit(1774119880.812:65): avc:  denied  { setattr } for  pid=5791 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   55.464717][   T29] audit: type=1400 audit(1774119880.812:66): avc:  denied  { create } for  pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.506716][   T29] audit: type=1400 audit(1774119880.812:67): avc:  denied  { write } for  pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.527561][   T29] audit: type=1400 audit(1774119880.812:68): avc:  denied  { read } for  pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   55.531540][ T5793] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   55.548209][   T29] audit: type=1400 audit(1774119880.812:69): avc:  denied  { mounton } for  pid=5791 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   55.581488][   T29] audit: type=1400 audit(1774119880.812:70): avc:  denied  { mount } for  pid=5791 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   55.604784][   T29] audit: type=1400 audit(1774119880.942:71): avc:  denied  { relabelto } for  pid=5793 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   56.494524][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.195832][   T29] kauditd_printk_skb: 4 callbacks suppressed
[   60.195848][   T29] audit: type=1400 audit(1774119885.572:76): avc:  denied  { create } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.253559][   T29] audit: type=1400 audit(1774119885.582:77): avc:  denied  { read write } for  pid=5803 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   60.278917][   T29] audit: type=1400 audit(1774119885.582:78): avc:  denied  { open } for  pid=5803 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   60.303381][   T29] audit: type=1400 audit(1774119885.622:79): avc:  denied  { ioctl } for  pid=5803 comm="syz-executor" path="socket:[4647]" dev="sockfs" ino=4647 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.318548][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.336825][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.344668][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.352419][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.352428][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.352711][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.359761][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.368324][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.388196][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.388682][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.402922][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.403857][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.409997][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.418817][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.425518][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.431671][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.438692][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.446524][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.452004][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.460078][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.471837][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.479497][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.481107][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.494504][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.504293][   T29] audit: type=1400 audit(1774119885.872:80): avc:  denied  { read } for  pid=5812 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   60.504490][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.537634][   T29] audit: type=1400 audit(1774119885.872:81): avc:  denied  { open } for  pid=5812 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   60.561737][   T29] audit: type=1400 audit(1774119885.872:82): avc:  denied  { mounton } for  pid=5812 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   60.886228][   T29] audit: type=1400 audit(1774119886.272:83): avc:  denied  { module_request } for  pid=5812 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   60.996416][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   61.013755][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   61.049286][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   61.092647][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   61.157620][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   61.225092][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.232632][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.239800][ T5812] bridge_slave_0: entered allmulticast mode
[   61.246676][ T5812] bridge_slave_0: entered promiscuous mode
[   61.276534][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.283716][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.290795][ T5812] bridge_slave_1: entered allmulticast mode
[   61.297606][ T5812] bridge_slave_1: entered promiscuous mode
[   61.314568][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.321782][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.329490][ T5804] bridge_slave_0: entered allmulticast mode
[   61.336330][ T5804] bridge_slave_0: entered promiscuous mode
[   61.355852][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.362997][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.370060][ T5810] bridge_slave_0: entered allmulticast mode
[   61.376865][ T5810] bridge_slave_0: entered promiscuous mode
[   61.387357][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.394481][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.401631][ T5804] bridge_slave_1: entered allmulticast mode
[   61.408277][ T5804] bridge_slave_1: entered promiscuous mode
[   61.428557][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.435727][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.442924][ T5810] bridge_slave_1: entered allmulticast mode
[   61.449547][ T5810] bridge_slave_1: entered promiscuous mode
[   61.465899][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.473057][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.480135][ T5813] bridge_slave_0: entered allmulticast mode
[   61.486999][ T5813] bridge_slave_0: entered promiscuous mode
[   61.495598][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.506981][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.535329][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.543496][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.550579][ T5813] bridge_slave_1: entered allmulticast mode
[   61.557558][ T5813] bridge_slave_1: entered promiscuous mode
[   61.584123][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.618007][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.627362][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.635064][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.642624][ T5803] bridge_slave_0: entered allmulticast mode
[   61.649304][ T5803] bridge_slave_0: entered promiscuous mode
[   61.657435][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.667710][ T5812] team0: Port device team_slave_0 added
[   61.675029][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.685753][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.695035][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.702277][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.709359][ T5803] bridge_slave_1: entered allmulticast mode
[   61.716106][ T5803] bridge_slave_1: entered promiscuous mode
[   61.730008][ T5812] team0: Port device team_slave_1 added
[   61.737306][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.793536][ T5804] team0: Port device team_slave_0 added
[   61.801130][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.824186][ T5810] team0: Port device team_slave_0 added
[   61.831096][ T5813] team0: Port device team_slave_0 added
[   61.838243][ T5804] team0: Port device team_slave_1 added
[   61.845359][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.855195][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.862375][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.888629][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.901188][ T5810] team0: Port device team_slave_1 added
[   61.907819][ T5813] team0: Port device team_slave_1 added
[   61.926194][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.933204][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.959125][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.017994][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.025188][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.051310][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.062838][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.069774][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.096089][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.109013][ T5803] team0: Port device team_slave_0 added
[   62.116642][ T5803] team0: Port device team_slave_1 added
[   62.122820][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.129750][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.155883][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.167121][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.174385][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.200757][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.216177][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.223199][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.249260][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.267334][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.274374][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.300508][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.351143][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.358266][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.384381][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.396297][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.403262][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.429208][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.443949][ T5813] hsr_slave_0: entered promiscuous mode
[   62.450046][ T5813] hsr_slave_1: entered promiscuous mode
[   62.473123][ T5812] hsr_slave_0: entered promiscuous mode
[   62.479248][ T5812] hsr_slave_1: entered promiscuous mode
[   62.485461][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   62.491227][ T5812] Cannot create hsr debugfs directory
[   62.502340][ T5822] Bluetooth: hci4: command tx timeout
[   62.535366][ T5810] hsr_slave_0: entered promiscuous mode
[   62.541531][ T5810] hsr_slave_1: entered promiscuous mode
[   62.547678][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   62.553527][ T5810] Cannot create hsr debugfs directory
[   62.581710][ T5822] Bluetooth: hci1: command tx timeout
[   62.581724][ T5811] Bluetooth: hci2: command tx timeout
[   62.592969][ T5804] hsr_slave_0: entered promiscuous mode
[   62.598993][ T5804] hsr_slave_1: entered promiscuous mode
[   62.605041][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   62.610752][ T5804] Cannot create hsr debugfs directory
[   62.661732][ T5822] Bluetooth: hci3: command tx timeout
[   62.661736][ T5811] Bluetooth: hci0: command tx timeout
[   62.684447][ T5803] hsr_slave_0: entered promiscuous mode
[   62.690464][ T5803] hsr_slave_1: entered promiscuous mode
[   62.697308][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   62.703147][ T5803] Cannot create hsr debugfs directory
[   62.995264][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.016146][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.025675][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.039853][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.074327][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.088415][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.102275][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.112682][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.179819][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.189254][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.215303][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.227427][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.283033][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.305570][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.322060][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.342724][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.358883][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   63.372605][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.412591][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.419770][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.444240][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.451325][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.473599][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.486194][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.505381][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.519849][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.533679][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.555416][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.578975][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   63.609398][  T970] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.616531][  T970] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.634780][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   63.650257][  T970] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.657405][  T970] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.663057][   T29] audit: type=1400 audit(1774119889.052:84): avc:  denied  { sys_module } for  pid=5812 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.718228][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.725445][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.747306][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.754441][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.846340][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.878791][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   63.892249][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.907431][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.945738][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.952877][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.963520][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.970618][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.000558][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   64.031186][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.038342][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.071035][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.078196][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.149924][ T5812] veth0_vlan: entered promiscuous mode
[   64.199593][ T5812] veth1_vlan: entered promiscuous mode
[   64.221203][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.249499][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.310395][ T5812] veth0_macvtap: entered promiscuous mode
[   64.331219][ T5812] veth1_macvtap: entered promiscuous mode
[   64.385657][ T5813] veth0_vlan: entered promiscuous mode
[   64.410829][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.437789][ T5813] veth1_vlan: entered promiscuous mode
[   64.465468][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.497610][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.516531][  T564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.552999][  T564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.570780][  T564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.582788][ T5811] Bluetooth: hci4: command tx timeout
[   64.613233][  T564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.645758][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.659451][ T5813] veth0_macvtap: entered promiscuous mode
[   64.665534][ T5811] Bluetooth: hci1: command tx timeout
[   64.665554][ T5822] Bluetooth: hci2: command tx timeout
[   64.691190][ T5810] veth0_vlan: entered promiscuous mode
[   64.698241][ T5813] veth1_macvtap: entered promiscuous mode
[   64.729720][ T5810] veth1_vlan: entered promiscuous mode
[   64.743011][ T5822] Bluetooth: hci0: command tx timeout
[   64.743037][ T5811] Bluetooth: hci3: command tx timeout
[   64.774834][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.783075][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.789126][ T5804] veth0_vlan: entered promiscuous mode
[   64.815171][ T5804] veth1_vlan: entered promiscuous mode
[   64.824049][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.849671][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.865966][ T5810] veth0_macvtap: entered promiscuous mode
[   64.879290][ T5803] veth0_vlan: entered promiscuous mode
[   64.879499][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.890039][ T5803] veth1_vlan: entered promiscuous mode
[   64.898177][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.913219][ T5810] veth1_macvtap: entered promiscuous mode
[   64.919808][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.929628][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.959382][ T5804] veth0_macvtap: entered promiscuous mode
[   64.965613][   T29] audit: type=1400 audit(1774119890.342:85): avc:  denied  { mounton } for  pid=5812 comm="syz-executor" path="/root/syzkaller.tc9Fv5/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   65.002470][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.024799][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.043709][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.044957][ T5804] veth1_macvtap: entered promiscuous mode
[   65.082282][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.102176][ T5803] veth0_macvtap: entered promiscuous mode
[   65.116953][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.146170][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.175185][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.195136][ T5803] veth1_macvtap: entered promiscuous mode
[   65.237900][  T564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.252917][  T564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.278955][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.287898][   T29] kauditd_printk_skb: 14 callbacks suppressed
[   65.287912][   T29] audit: type=1400 audit(1774119890.672:100): avc:  denied  { create } for  pid=5923 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   65.287985][  T564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.323802][   T29] audit: type=1400 audit(1774119890.712:101): avc:  denied  { write } for  pid=5923 comm="syz.3.6" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   65.348757][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.360748][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.374864][ T5925] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   65.386937][  T564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.401637][  T564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.411871][  T564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.420628][  T564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.439685][  T564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.460094][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.511217][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.522053][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.540789][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.618553][ T5930] FAULT_INJECTION: forcing a failure.
[   65.618553][ T5930] name failslab, interval 1, probability 0, space 0, times 1
[   65.631487][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) 
[   65.631509][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   65.631519][ T5930] Call Trace:
[   65.631525][ T5930]  <TASK>
[   65.631532][ T5930]  dump_stack_lvl+0x100/0x190
[   65.631567][ T5930]  should_fail_ex.cold+0x5/0xa
[   65.631590][ T5930]  should_failslab+0xc2/0x120
[   65.631608][ T5930]  __kmalloc_cache_noprof+0x7a/0x6f0
[   65.631629][ T5930]  ? snd_ctl_ioctl+0xc62/0x1330
[   65.631654][ T5930]  ? do_vfs_ioctl+0x226/0x13e0
[   65.631681][ T5930]  snd_ctl_ioctl+0xc62/0x1330
[   65.631704][ T5930]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   65.631726][ T5930]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[   65.631760][ T5930]  ? selinux_file_ioctl+0x139/0x290
[   65.631778][ T5930]  ? selinux_file_ioctl+0xb4/0x290
[   65.631797][ T5930]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[   65.631817][ T5930]  __x64_sys_ioctl+0x18e/0x210
[   65.631838][ T5930]  do_syscall_64+0x106/0xf80
[   65.631856][ T5930]  ? clear_bhb_loop+0x40/0x90
[   65.631873][ T5930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.631887][ T5930] RIP: 0033:0x7f1a0099c799
[   65.631898][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.631911][ T5930] RSP: 002b:00007f1a018fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   65.631925][ T5930] RAX: ffffffffffffffda RBX: 00007f1a00c16180 RCX: 00007f1a0099c799
[   65.631934][ T5930] RDX: 0000200000006ec0 RSI: 0000000081785501 RDI: 0000000000000008
[   65.631942][ T5930] RBP: 00007f1a018fb090 R08: 0000000000000000 R09: 0000000000000000
[   65.631950][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.631957][ T5930] R13: 00007f1a00c16218 R14: 00007f1a00c16180 R15: 00007fff023bbf58
[   65.631975][ T5930]  </TASK>
[   65.907026][   T29] audit: type=1400 audit(1774119890.992:102): avc:  denied  { allowed } for  pid=5926 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   65.926648][   T29] audit: type=1400 audit(1774119890.992:103): avc:  denied  { create } for  pid=5926 comm="syz.3.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   65.950291][   T29] audit: type=1400 audit(1774119891.002:104): avc:  denied  { prog_load } for  pid=5926 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   65.971426][   T29] audit: type=1400 audit(1774119891.002:105): avc:  denied  { bpf } for  pid=5926 comm="syz.3.7" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.022321][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   66.028976][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   66.070946][   T29] audit: type=1400 audit(1774119891.002:106): avc:  denied  { perfmon } for  pid=5926 comm="syz.3.7" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.094801][   T29] audit: type=1400 audit(1774119891.202:107): avc:  denied  { read } for  pid=5926 comm="syz.3.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   66.094854][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.125833][   T29] audit: type=1400 audit(1774119891.202:108): avc:  denied  { open } for  pid=5926 comm="syz.3.7" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   66.150288][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.154545][   T29] audit: type=1400 audit(1774119891.202:109): avc:  denied  { ioctl } for  pid=5926 comm="syz.3.7" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   66.183261][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.194185][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.217563][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.248548][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.278339][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.377399][  T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.387566][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.407165][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.414556][  T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.421620][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.435095][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.599969][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.637429][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.661639][ T5811] Bluetooth: hci4: command tx timeout
[   66.741943][  T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.749781][  T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.758697][ T5811] Bluetooth: hci2: command tx timeout
[   66.764138][ T5811] Bluetooth: hci1: command tx timeout
[   66.827190][ T5822] Bluetooth: hci0: command tx timeout
[   66.827205][ T5811] Bluetooth: hci3: command tx timeout
[   67.173563][ T5953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   68.008811][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.065745][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.541848][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   68.780986][ T5822] Bluetooth: hci4: command tx timeout
[   68.816436][ T5972] libceph: resolve 'c' (ret=-3): failed
[   68.822223][ T5822] Bluetooth: hci1: command tx timeout
[   68.822257][ T5822] Bluetooth: hci2: command tx timeout
[   68.868702][ T5978] Zero length message leads to an empty skb
[   68.881128][ T5978] netlink: 'syz.2.15': attribute type 1 has an invalid length.
[   68.902897][ T5811] Bluetooth: hci3: command tx timeout
[   68.903114][ T5822] Bluetooth: hci0: command tx timeout
[   68.915067][ T5978] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15'.
[   69.285941][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.616625][ T5992] netlink: 7 bytes leftover after parsing attributes in process `syz.0.17'.
[   69.664942][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'.
[   69.808179][ T5978] program syz.2.15 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.083287][ T6008] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET)
[   70.296998][   T29] kauditd_printk_skb: 74 callbacks suppressed
[   70.297028][   T29] audit: type=1400 audit(1774119895.682:184): avc:  denied  { read write } for  pid=5803 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   70.362623][   T29] audit: type=1400 audit(1774119895.752:185): avc:  denied  { read } for  pid=6015 comm="syz.3.25" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0
[   70.386785][   T29] audit: type=1400 audit(1774119895.752:186): avc:  denied  { create } for  pid=6014 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   70.387508][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   70.420077][   T29] audit: type=1400 audit(1774119895.772:187): avc:  denied  { prog_load } for  pid=6014 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   70.440564][   T29] audit: type=1400 audit(1774119895.802:188): avc:  denied  { mounton } for  pid=6015 comm="syz.3.25" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   70.465025][   T29] audit: type=1400 audit(1774119895.822:189): avc:  denied  { mounton } for  pid=6015 comm="syz.3.25" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   70.518686][   T29] audit: type=1400 audit(1774119895.892:190): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   70.552584][   T29] audit: type=1400 audit(1774119895.902:191): avc:  denied  { prog_load } for  pid=6018 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   70.579364][ T6017] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.612011][   T29] audit: type=1400 audit(1774119895.992:192): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   70.657403][   T29] audit: type=1400 audit(1774119896.042:193): avc:  denied  { read } for  pid=6020 comm="syz.3.28" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[   70.710289][ T6017] netlink: 184 bytes leftover after parsing attributes in process `syz.0.26'.
[   70.933329][ T6031] netlink: 80 bytes leftover after parsing attributes in process `syz.0.31'.
[   70.953783][ T6032] macvtap1: entered promiscuous mode
[   70.959247][ T6032] macvtap1: entered allmulticast mode
[   70.989636][ T6032] veth1_vlan: entered allmulticast mode
[   72.168073][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6073 comm=syz.2.47
[   73.343734][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6100 comm=syz.4.60
[   73.593513][ T6112] FAULT_INJECTION: forcing a failure.
[   73.593513][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   73.625975][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) 
[   73.626000][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   73.626009][ T6112] Call Trace:
[   73.626015][ T6112]  <TASK>
[   73.626022][ T6112]  dump_stack_lvl+0x100/0x190
[   73.626053][ T6112]  should_fail_ex.cold+0x5/0xa
[   73.626076][ T6112]  _copy_to_user+0x32/0xd0
[   73.626095][ T6112]  snd_ctl_ioctl+0xf6c/0x1330
[   73.626122][ T6112]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[   73.626150][ T6112]  ? __fget_files+0x215/0x3d0
[   73.626167][ T6112]  ? hook_file_ioctl_common+0x146/0x410
[   73.626200][ T6112]  ? selinux_file_ioctl+0x139/0x290
[   73.626223][ T6112]  ? selinux_file_ioctl+0xb4/0x290
[   73.626247][ T6112]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[   73.626272][ T6112]  __x64_sys_ioctl+0x18e/0x210
[   73.626300][ T6112]  do_syscall_64+0x106/0xf80
[   73.626322][ T6112]  ? clear_bhb_loop+0x40/0x90
[   73.626343][ T6112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.626360][ T6112] RIP: 0033:0x7f7c8599c799
[   73.626375][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.626390][ T6112] RSP: 002b:00007f7c86797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   73.626407][ T6112] RAX: ffffffffffffffda RBX: 00007f7c85c16180 RCX: 00007f7c8599c799
[   73.626418][ T6112] RDX: 0000200000006ec0 RSI: 0000000081785501 RDI: 0000000000000007
[   73.626428][ T6112] RBP: 00007f7c86797090 R08: 0000000000000000 R09: 0000000000000000
[   73.626438][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.626448][ T6112] R13: 00007f7c85c16218 R14: 00007f7c85c16180 R15: 00007fff3d061788
[   73.626470][ T6112]  </TASK>
[   74.804843][ T6122] erspan0: entered promiscuous mode
[   75.434614][   T29] kauditd_printk_skb: 182 callbacks suppressed
[   75.434630][   T29] audit: type=1400 audit(1774119900.822:376): avc:  denied  { read write } for  pid=5810 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   75.536794][   T29] audit: type=1400 audit(1774119900.872:377): avc:  denied  { read write } for  pid=5803 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   75.561648][   T29] audit: type=1400 audit(1774119900.892:378): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   75.569708][ T6149] warning: `syz.3.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.040829][   T29] audit: type=1400 audit(1774119900.922:379): avc:  denied  { read } for  pid=6144 comm="syz.1.73" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0
[   76.070239][   T10] cfg80211: failed to load regulatory.db
[   76.137063][   T29] audit: type=1400 audit(1774119900.922:380): avc:  denied  { create } for  pid=6147 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0
[   76.206202][   T29] audit: type=1400 audit(1774119900.922:381): avc:  denied  { write } for  pid=6147 comm="syz.3.75" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0
[   76.401679][   T29] audit: type=1400 audit(1774119900.922:382): avc:  denied  { create } for  pid=6147 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[   76.430586][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   76.482505][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.527899][   T29] audit: type=1400 audit(1774119900.952:383): avc:  denied  { read write } for  pid=6144 comm="syz.1.73" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   76.571867][ T6161] bridge_slave_1 (unregistering): left allmulticast mode
[   76.579751][ T6161] bridge_slave_1 (unregistering): left promiscuous mode
[   76.587074][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.651692][   T29] audit: type=1400 audit(1774119900.952:384): avc:  denied  { module_request } for  pid=6144 comm="syz.1.73" kmod="fs-aio" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[   76.833054][   T29] audit: type=1400 audit(1774119900.952:385): avc:  denied  { create } for  pid=6147 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   77.110662][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'.
[   78.888761][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2047 sclass=netlink_route_socket pid=6155 comm=syz.2.77
[   79.416946][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.101'.
[   79.575060][ T6231] syzkaller0: entered promiscuous mode
[   79.719162][ T6231] syzkaller0: entered allmulticast mode
[   79.731800][ T6230] CUSE: info not properly terminated
[   80.443735][   T29] kauditd_printk_skb: 7070 callbacks suppressed
[   80.443750][   T29] audit: type=1400 audit(1774119905.832:4666): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.461917][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.480368][ T6242] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.523925][ T6242] audit: audit_lost=931 audit_rate_limit=0 audit_backlog_limit=64
[   80.551172][ T5473] audit: audit_lost=932 audit_rate_limit=0 audit_backlog_limit=64
[   80.559272][ T6244] audit: audit_backlog=65 > audit_backlog_limit=64
[   80.565981][   T29] audit: type=1400 audit(1774119905.832:4667): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   80.581605][ T5473] audit: backlog limit exceeded
[   80.592763][ T6244] audit: audit_lost=933 audit_rate_limit=0 audit_backlog_limit=64
[   80.619540][ T6244] audit: backlog limit exceeded
[   83.302124][ T6298] libceph: resolve 'c' (ret=-3): failed
[   84.636433][ T6324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6324 comm=syz.0.134
[   85.267921][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'.
[   85.452789][   T29] kauditd_printk_skb: 6520 callbacks suppressed
[   85.452805][   T29] audit: type=1400 audit(1774119910.832:10518): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   85.497721][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   85.505551][ T5473] audit: audit_lost=1157 audit_rate_limit=0 audit_backlog_limit=64
[   85.513515][ T5473] audit: backlog limit exceeded
[   85.531344][   T29] audit: type=1400 audit(1774119910.832:10519): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   85.531775][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   85.606616][ T5804] audit: audit_backlog=65 > audit_backlog_limit=64
[   85.631708][ T5804] audit: audit_lost=1158 audit_rate_limit=0 audit_backlog_limit=64
[   85.665456][ T5804] audit: backlog limit exceeded
[   85.725057][ T6342] audit: audit_backlog=65 > audit_backlog_limit=64
[   86.046472][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6355 comm=syz.0.145
[   86.083391][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'.
[   86.093357][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   87.639521][ T6387] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure
[   88.744290][ T6417] ip6t_srh: unknown srh match flags  4000
[   89.495854][ T6433] netlink: 666 bytes leftover after parsing attributes in process `syz.0.179'.
[   89.815693][ T6437] erspan0: entered promiscuous mode
[   90.522037][   T29] kauditd_printk_skb: 12561 callbacks suppressed
[   90.522117][   T29] audit: type=1400 audit(1774119915.912:21913): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.752278][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   90.768551][   T29] audit: type=1400 audit(1774119915.912:21914): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.789675][ T5473] audit: audit_lost=1549 audit_rate_limit=0 audit_backlog_limit=64
[   90.789696][ T5473] audit: backlog limit exceeded
[   90.790287][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   90.798001][   T29] audit: type=1400 audit(1774119915.912:21915): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.830745][   T29] audit: type=1400 audit(1774119915.912:21916): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.861879][   T29] audit: type=1400 audit(1774119915.912:21917): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   90.939271][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64
[   91.148378][ T6472] syzkaller0: entered promiscuous mode
[   91.156405][ T6472] syzkaller0: entered allmulticast mode
[   92.980228][ T6516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6516 comm=syz.4.209
[   93.856461][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   93.917676][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.221'.
[   94.099260][ T6553] macvtap2: entered promiscuous mode
[   94.128715][ T6553] macvtap2: entered allmulticast mode
[   94.380651][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'.
[   94.771993][ T6573] netlink: 'syz.3.231': attribute type 3 has an invalid length.
[   94.785989][ T6573] netlink: 'syz.3.231': attribute type 1 has an invalid length.
[   95.002842][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[   95.066241][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[   95.082719][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'.
[   95.143189][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'.
[   95.272919][   T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.321225][   T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.368898][   T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.750212][   T29] kauditd_printk_skb: 8237 callbacks suppressed
[   95.750226][   T29] audit: type=1400 audit(1774119920.882:29759): avc:  denied  { read write } for  pid=5803 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   95.810823][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   95.818735][ T6583] audit: audit_backlog=65 > audit_backlog_limit=64
[   95.838222][   T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.849333][ T5473] audit: audit_lost=1680 audit_rate_limit=0 audit_backlog_limit=64
[   95.857506][ T6583] audit: audit_lost=1681 audit_rate_limit=0 audit_backlog_limit=64
[   95.876446][   T29] audit: type=1400 audit(1774119921.182:29768): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   95.900864][ T5473] audit: backlog limit exceeded
[   95.910310][ T6583] audit: backlog limit exceeded
[   95.919997][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[   95.930557][ T6583] audit: audit_backlog=65 > audit_backlog_limit=64
[   96.024365][ T6587] xt_CT: No such helper "syz0"
[   96.072619][   T24] IPVS: starting estimator thread 0...
[   96.171729][ T6588] IPVS: using max 75 ests per chain, 180000 per kthread
[   97.924183][ T6658] tls_set_device_offload: netdev not found
[   98.950522][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6687 comm=syz.3.269
[  100.054220][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'.
[  100.067511][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.277721][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.588243][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'.
[  100.768059][   T29] kauditd_printk_skb: 8764 callbacks suppressed
[  100.768092][   T29] audit: type=1400 audit(1774119926.152:35448): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  100.837802][   T29] audit: type=1400 audit(1774119926.152:35449): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  101.055264][   T29] audit: type=1400 audit(1774119926.152:35450): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  101.082195][   T29] audit: type=1400 audit(1774119926.152:35451): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  101.128239][ T6736] audit: audit_backlog=65 > audit_backlog_limit=64
[  101.136334][ T6736] audit: audit_lost=2711 audit_rate_limit=0 audit_backlog_limit=64
[  101.155299][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  101.166296][ T6736] audit: backlog limit exceeded
[  101.175506][ T5473] audit: audit_lost=2712 audit_rate_limit=0 audit_backlog_limit=64
[  101.182515][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64
[  101.426822][ T6743] CUSE: info not properly terminated
[  102.631512][ T6788] ceph: No mds server is up or the cluster is laggy
[  104.126770][ T6849] capability: warning: `syz.1.329' uses 32-bit capabilities (legacy support in use)
[  104.487481][ T6848] netlink: 'syz.3.327': attribute type 16 has an invalid length.
[  104.537489][ T6848] netlink: 'syz.3.327': attribute type 17 has an invalid length.
[  104.720570][ T6848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.811109][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'.
[  105.738517][ T6883] syzkaller0: entered promiscuous mode
[  105.762176][ T6883] syzkaller0: entered allmulticast mode
[  105.772745][   T29] kauditd_printk_skb: 6427 callbacks suppressed
[  105.772759][   T29] audit: type=1400 audit(1774119931.162:41693): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  105.856920][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  105.871639][   T29] audit: type=1400 audit(1774119931.162:41694): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  105.925841][ T6883] audit: audit_backlog=65 > audit_backlog_limit=64
[  105.932436][ T6883] audit: audit_lost=2775 audit_rate_limit=0 audit_backlog_limit=64
[  105.942685][ T6883] audit: backlog limit exceeded
[  105.960751][ T5473] audit: audit_lost=2776 audit_rate_limit=0 audit_backlog_limit=64
[  105.973460][   T29] audit: type=1400 audit(1774119931.162:41695): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  105.989043][ T5473] audit: backlog limit exceeded
[  105.997333][ T6888] audit: audit_backlog=65 > audit_backlog_limit=64
[  107.727942][ T6922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6922 comm=syz.4.353
[  109.154101][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'.
[  109.186586][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'.
[  110.782853][   T29] kauditd_printk_skb: 5749 callbacks suppressed
[  110.782864][   T29] audit: type=1400 audit(1774119936.172:47437): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  110.829415][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  110.840507][ T5473] audit: audit_lost=2780 audit_rate_limit=0 audit_backlog_limit=64
[  110.864807][ T6980] audit: audit_backlog=65 > audit_backlog_limit=64
[  110.878907][   T29] audit: type=1400 audit(1774119936.202:47438): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  110.910220][ T5473] audit: backlog limit exceeded
[  110.936276][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  110.943026][ T6980] audit: audit_lost=2781 audit_rate_limit=0 audit_backlog_limit=64
[  110.961030][ T5473] audit: audit_lost=2782 audit_rate_limit=0 audit_backlog_limit=64
[  110.973586][ T5810] audit: audit_backlog=65 > audit_backlog_limit=64
[  112.825156][ T7030] syzkaller0: entered promiscuous mode
[  112.830710][ T7030] syzkaller0: entered allmulticast mode
[  113.146466][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'.
[  114.144893][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  115.348611][ T7084] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  115.792692][   T29] kauditd_printk_skb: 10370 callbacks suppressed
[  115.792703][   T29] audit: type=1400 audit(1774119941.182:53539): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  115.861669][   T29] audit: type=1400 audit(1774119941.212:53540): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  115.898454][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  115.913536][ T5473] audit: audit_lost=4206 audit_rate_limit=0 audit_backlog_limit=64
[  115.936197][ T5473] audit: backlog limit exceeded
[  115.941151][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  115.948903][   T29] audit: type=1400 audit(1774119941.212:53541): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  115.981976][ T5473] audit: audit_lost=4207 audit_rate_limit=0 audit_backlog_limit=64
[  115.989904][ T5473] audit: backlog limit exceeded
[  116.000792][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  116.027048][ T7092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'.
[  116.061761][ T7093] netlink: 'syz.4.416': attribute type 1 has an invalid length.
[  116.084709][ T7092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'.
[  116.184210][ T7095] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  116.267577][ T7095] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  116.421158][ T7093] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  116.601307][ T7107] netlink: 'syz.1.420': attribute type 4 has an invalid length.
[  116.601321][ T7107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.420'.
[  116.615078][ T7104] macvlan2: entered promiscuous mode
[  116.615101][ T7104] macvlan2: entered allmulticast mode
[  116.618809][ T7104] bond1: entered promiscuous mode
[  116.619310][ T7104] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.650462][ T7104] bond1: left promiscuous mode
[  116.654320][ T7108] netlink: 'syz.1.420': attribute type 16 has an invalid length.
[  116.654332][ T7108] netlink: 'syz.1.420': attribute type 17 has an invalid length.
[  116.708979][ T7107] .`: renamed from bond0 (while UP)
[  116.721267][ T7108] 8021q: adding VLAN 0 to HW filter on device .`
[  116.723097][ T7108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.707172][ T7127] Cannot find add_set index 65532 as target
[  117.921090][ T7139] macvtap1: entered promiscuous mode
[  117.944070][ T7139] macvtap1: entered allmulticast mode
[  117.949488][ T7139] veth1_vlan: entered allmulticast mode
[  118.901762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  119.453883][ T7170] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  119.460493][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  119.510479][ T7170] vhci_hcd vhci_hcd.0: Device attached
[  119.550698][ T7172] vhci_hcd: connection closed
[  119.552463][   T35] vhci_hcd vhci_hcd.3: stop threads
[  119.592584][   T35] vhci_hcd vhci_hcd.3: release socket
[  119.621298][   T35] vhci_hcd vhci_hcd.3: disconnect device
[  119.693254][   T10] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  119.757280][ T7181] FAULT_INJECTION: forcing a failure.
[  119.757280][ T7181] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  119.790764][ T7181] CPU: 1 UID: 0 PID: 7181 Comm: syz.2.451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.790792][ T7181] Tainted: [L]=SOFTLOCKUP
[  119.790798][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  119.790807][ T7181] Call Trace:
[  119.790813][ T7181]  <TASK>
[  119.790820][ T7181]  dump_stack_lvl+0x100/0x190
[  119.790852][ T7181]  should_fail_ex.cold+0x5/0xa
[  119.790871][ T7181]  ? prepare_alloc_pages+0x16d/0x5f0
[  119.790892][ T7181]  should_fail_alloc_page+0xeb/0x140
[  119.790911][ T7181]  prepare_alloc_pages+0x1f0/0x5f0
[  119.790930][ T7181]  ? kernel_text_address+0x8d/0x100
[  119.790950][ T7181]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  119.790981][ T7181]  ? copy_splice_read+0x1a3/0xb90
[  119.790998][ T7181]  ? stack_trace_save+0x8e/0xc0
[  119.791020][ T7181]  ? __pfx_stack_trace_save+0x10/0x10
[  119.791042][ T7181]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  119.791068][ T7181]  ? copy_splice_read+0x1a3/0xb90
[  119.791084][ T7181]  ? kasan_save_stack+0x3f/0x50
[  119.791107][ T7181]  ? kasan_save_stack+0x30/0x50
[  119.791130][ T7181]  ? kasan_save_track+0x14/0x30
[  119.791151][ T7181]  ? __kasan_kmalloc+0xaa/0xb0
[  119.791172][ T7181]  ? __kmalloc_noprof+0x301/0x850
[  119.791192][ T7181]  ? copy_splice_read+0x1a3/0xb90
[  119.791208][ T7181]  ? do_splice_read+0x285/0x370
[  119.791226][ T7181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.791255][ T7181]  alloc_pages_bulk_noprof+0x782/0x1490
[  119.791287][ T7181]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  119.791317][ T7181]  ? __kmalloc_noprof+0x320/0x850
[  119.791345][ T7181]  copy_splice_read+0x1e1/0xb90
[  119.791369][ T7181]  ? __pfx_copy_splice_read+0x10/0x10
[  119.791389][ T7181]  ? look_up_lock_class+0x55/0x120
[  119.791416][ T7181]  ? lockdep_init_map_type+0x5c/0x250
[  119.791435][ T7181]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  119.791463][ T7181]  ? __pfx_copy_splice_read+0x10/0x10
[  119.791481][ T7181]  do_splice_read+0x285/0x370
[  119.791500][ T7181]  splice_direct_to_actor+0x2a1/0xa30
[  119.791521][ T7181]  ? __pfx_direct_splice_actor+0x10/0x10
[  119.791546][ T7181]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  119.791569][ T7181]  do_splice_direct+0x174/0x240
[  119.791588][ T7181]  ? __pfx_do_splice_direct+0x10/0x10
[  119.791605][ T7181]  ? avc_policy_seqno+0x9/0x20
[  119.791622][ T7181]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  119.791643][ T7181]  ? rw_verify_area+0xce/0x6d0
[  119.791668][ T7181]  do_sendfile+0xadc/0xe20
[  119.791697][ T7181]  ? __pfx_do_sendfile+0x10/0x10
[  119.791722][ T7181]  ? __fget_files+0x21f/0x3d0
[  119.791752][ T7181]  __x64_sys_sendfile64+0x1d8/0x220
[  119.791770][ T7181]  ? ksys_write+0x1ac/0x250
[  119.791794][ T7181]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  119.791821][ T7181]  do_syscall_64+0x106/0xf80
[  119.791842][ T7181]  ? clear_bhb_loop+0x40/0x90
[  119.791863][ T7181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.791880][ T7181] RIP: 0033:0x7f54f8d9c799
[  119.791895][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.791910][ T7181] RSP: 002b:00007f54f9c22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  119.791928][ T7181] RAX: ffffffffffffffda RBX: 00007f54f9015fa0 RCX: 00007f54f8d9c799
[  119.791938][ T7181] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  119.791947][ T7181] RBP: 00007f54f9c22090 R08: 0000000000000000 R09: 0000000000000000
[  119.791957][ T7181] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001
[  119.791966][ T7181] R13: 00007f54f9016038 R14: 00007f54f9015fa0 R15: 00007ffe5315c8a8
[  119.791989][ T7181]  </TASK>
[  120.537747][ T7190] netlink: 136 bytes leftover after parsing attributes in process `syz.4.453'.
[  120.561655][ T7190] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  120.708145][ T7194] syzkaller0: entered promiscuous mode
[  120.724058][ T7194] syzkaller0: entered allmulticast mode
[  120.825162][   T29] kauditd_printk_skb: 6723 callbacks suppressed
[  120.826375][   T29] audit: type=1400 audit(1774119946.182:59387): avc:  denied  { read } for  pid=7199 comm="syz.0.458" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0
[  120.872324][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  120.878977][   T29] audit: type=1400 audit(1774119946.182:59388): avc:  denied  { allowed } for  pid=7199 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[  120.898744][ T5473] audit: audit_lost=4501 audit_rate_limit=0 audit_backlog_limit=64
[  120.907923][ T5473] audit: backlog limit exceeded
[  120.913404][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  120.920055][   T29] audit: type=1400 audit(1774119946.182:59389): avc:  denied  { map_create } for  pid=7199 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  120.943349][ T5473] audit: audit_lost=4502 audit_rate_limit=0 audit_backlog_limit=64
[  120.954767][ T5473] audit: backlog limit exceeded
[  120.959762][ T7208] audit: audit_backlog=65 > audit_backlog_limit=64
[  122.327057][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'.
[  122.490591][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[  123.231503][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'.
[  123.386393][ T7241] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  123.518310][ T7244] syzkaller0: entered promiscuous mode
[  123.531032][ T7244] syzkaller0: entered allmulticast mode
[  124.262884][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'.
[  124.296666][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'.
[  125.831655][   T29] kauditd_printk_skb: 12672 callbacks suppressed
[  125.831671][   T29] audit: type=1400 audit(1774119951.212:70659): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  125.893998][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'.
[  125.913139][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  125.920859][ T5473] audit: audit_lost=4971 audit_rate_limit=0 audit_backlog_limit=64
[  125.932056][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'.
[  125.932612][ T7307] audit: audit_backlog=65 > audit_backlog_limit=64
[  125.963483][ T7309] audit: audit_backlog=65 > audit_backlog_limit=64
[  125.973521][ T5473] audit: backlog limit exceeded
[  125.979532][   T29] audit: type=1400 audit(1774119951.212:70660): avc:  denied  { read } for  pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  125.980031][ T5473] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.001253][ T7309] audit: audit_lost=4972 audit_rate_limit=0 audit_backlog_limit=64
[  126.018695][ T5804] audit: audit_backlog=65 > audit_backlog_limit=64
[  127.267442][ T7352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7352 comm=syz.2.518
[  127.281064][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  127.288515][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  128.447332][ T7378] FAULT_INJECTION: forcing a failure.
[  128.447332][ T7378] name failslab, interval 1, probability 0, space 0, times 0
[  128.548280][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.4.527 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  128.548308][ T7378] Tainted: [L]=SOFTLOCKUP
[  128.548314][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  128.548322][ T7378] Call Trace:
[  128.548328][ T7378]  <TASK>
[  128.548334][ T7378]  dump_stack_lvl+0x100/0x190
[  128.548365][ T7378]  should_fail_ex.cold+0x5/0xa
[  128.548387][ T7378]  should_failslab+0xc2/0x120
[  128.548404][ T7378]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  128.548428][ T7378]  ? anon_vma_clone+0x2bd/0xc70
[  128.548452][ T7378]  anon_vma_clone+0x2bd/0xc70
[  128.548476][ T7378]  dup_anon_vma+0x1c5/0x2f0
[  128.548501][ T7378]  vma_modify+0x1296/0x2250
[  128.548529][ T7378]  ? __pfx_vma_modify+0x10/0x10
[  128.548558][ T7378]  vma_modify_flags+0x257/0x3d0
[  128.548582][ T7378]  ? __pfx_vma_modify_flags+0x10/0x10
[  128.548617][ T7378]  ? mtree_range_walk+0x6ce/0xcd0
[  128.548645][ T7378]  mlock_fixup+0x302/0xf00
[  128.548671][ T7378]  ? __pfx_mlock_fixup+0x10/0x10
[  128.548701][ T7378]  apply_mlockall_flags.isra.0+0x1fd/0x3a0
[  128.548733][ T7378]  ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10
[  128.548758][ T7378]  ? __pfx___might_resched+0x10/0x10
[  128.548785][ T7378]  ? __pfx_down_write_killable+0x10/0x10
[  128.548812][ T7378]  ? __pfx_ksys_write+0x10/0x10
[  128.548844][ T7378]  __do_sys_munlockall+0xc7/0x270
[  128.548871][ T7378]  do_syscall_64+0x106/0xf80
[  128.548893][ T7378]  ? clear_bhb_loop+0x40/0x90
[  128.548915][ T7378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.548932][ T7378] RIP: 0033:0x7fb4a4d9c799
[  128.548947][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.548963][ T7378] RSP: 002b:00007fb4a5cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  128.548979][ T7378] RAX: ffffffffffffffda RBX: 00007fb4a5015fa0 RCX: 00007fb4a4d9c799
[  128.548990][ T7378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  128.548999][ T7378] RBP: 00007fb4a5cd8090 R08: 0000000000000000 R09: 0000000000000000
[  128.549009][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.549018][ T7378] R13: 00007fb4a5016038 R14: 00007fb4a5015fa0 R15: 00007ffe003b4da8
[  128.549042][ T7378]  </TASK>
[  129.190338][ T7377] ------------[ cut here ]------------
[  129.196385][ T7377] anon_vma->num_active_vmas
[  129.196394][ T7377] WARNING: mm/rmap.c:528 at unlink_anon_vmas+0x64e/0x8e0, CPU#0: syz.4.527/7377
[  129.210168][ T7377] Modules linked in:
[  129.214198][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.4.527 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.224945][ T7377] Tainted: [L]=SOFTLOCKUP
[  129.229236][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  129.239396][ T7377] RIP: 0010:unlink_anon_vmas+0x64e/0x8e0
[  129.246164][ T7377] Code: 8b 40 30 48 39 c3 0f 85 9c 00 00 00 e8 2b 17 a7 ff 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 13 17 a7 ff 90 <0f> 0b 90 e9 2e ff ff ff e8 05 17 a7 ff 90 0f 0b 90 e9 e0 fe ff ff
[  129.266225][ T7377] RSP: 0018:ffffc900052879a0 EFLAGS: 00010293
[  129.272353][ T7377] RAX: 0000000000000000 RBX: ffff88802bfcf930 RCX: ffffffff8261b817
[  129.280298][ T7377] RDX: ffff88801df08000 RSI: ffffffff8261b8ed RDI: ffff88801df08000
[  129.288256][ T7377] RBP: ffff88802ce57dd0 R08: 0000000000000007 R09: 0000000000000000
[  129.296224][ T7377] R10: ffffffffffffffff R11: 0000000000000000 R12: dffffc0000000000
[  129.304203][ T7377] R13: ffff888036deb8e0 R14: ffff88802bfcf940 R15: ffff888036deb8f0
[  129.312173][ T7377] FS:  0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000
[  129.321080][ T7377] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.327675][ T7377] CR2: 00002000000002c0 CR3: 0000000062060000 CR4: 00000000003526f0
[  129.335664][ T7377] Call Trace:
[  129.338922][ T7377]  <TASK>
[  129.341863][ T7377]  free_pgtables+0x2e7/0xd80
[  129.346946][ T7377]  ? __pfx_free_pgtables+0x10/0x10
[  129.352449][ T7377]  exit_mmap+0x44c/0xa30
[  129.356689][ T7377]  ? __pfx_exit_mmap+0x10/0x10
[  129.361421][ T7377]  ? trace_contention_end+0x140/0x180
[  129.366781][ T7377]  ? uprobe_clear_state+0x5f/0x360
[  129.371892][ T7377]  ? uprobe_clear_state+0x5f/0x360
[  129.376984][ T7377]  ? __lock_acquire+0x4a5/0x2630
[  129.381960][ T7377]  ? arch_uprobe_clear_state+0x107/0x150
[  129.387574][ T7377]  __mmput+0x12a/0x410
[  129.391706][ T7377]  mmput+0x67/0x80
[  129.395427][ T7377]  do_exit+0x819/0x2b60
[  129.399599][ T7377]  ? preempt_schedule_thunk+0x16/0x30
[  129.405118][ T7377]  ? __pfx_do_exit+0x10/0x10
[  129.409717][ T7377]  ? preempt_schedule_thunk+0x16/0x30
[  129.415103][ T7377]  do_group_exit+0xd5/0x2a0
[  129.419586][ T7377]  __x64_sys_exit_group+0x3e/0x50
[  129.424623][ T7377]  x64_sys_call+0x102c/0x1530
[  129.429276][ T7377]  do_syscall_64+0x106/0xf80
[  129.433877][ T7377]  ? clear_bhb_loop+0x40/0x90
[  129.438540][ T7377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.444433][ T7377] RIP: 0033:0x7fb4a4d9c799
[  129.449341][ T7377] Code: Unable to access opcode bytes at 0x7fb4a4d9c76f.
[  129.456700][ T7377] RSP: 002b:00007ffe003b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  129.465217][ T7377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4a4d9c799
[  129.473214][ T7377] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  129.481157][ T7377] RBP: 00007ffe003b514c R08: 0000000000000000 R09: 00000000000927c0
[  129.489131][ T7377] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000072
[  129.497088][ T7377] R13: 00000000000927c0 R14: 000000000001f216 R15: 00007ffe003b51a0
[  129.505061][ T7377]  </TASK>
[  129.508055][ T7377] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  129.515304][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.4.527 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.526031][ T7377] Tainted: [L]=SOFTLOCKUP
[  129.530322][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  129.540344][ T7377] Call Trace:
[  129.543594][ T7377]  <TASK>
[  129.546496][ T7377]  dump_stack_lvl+0x100/0x190
[  129.551151][ T7377]  vpanic+0x552/0x970
[  129.555104][ T7377]  ? __pfx_vpanic+0x10/0x10
[  129.559578][ T7377]  panic+0xd1/0xe0
[  129.563273][ T7377]  ? __pfx_panic+0x10/0x10
[  129.567673][ T7377]  ? check_panic_on_warn+0x1f/0x90
[  129.572764][ T7377]  check_panic_on_warn.cold+0x19/0x34
[  129.578113][ T7377]  ? unlink_anon_vmas+0x64e/0x8e0
[  129.583117][ T7377]  __warn.cold+0x191/0x348
[  129.587514][ T7377]  __report_bug+0x296/0x3d0
[  129.591995][ T7377]  ? unlink_anon_vmas+0x64e/0x8e0
[  129.597001][ T7377]  ? __pfx___report_bug+0x10/0x10
[  129.602004][ T7377]  ? __lock_acquire+0x4a5/0x2630
[  129.606927][ T7377]  ? unlink_anon_vmas+0x64e/0x8e0
[  129.611932][ T7377]  report_bug+0xb2/0x220
[  129.616154][ T7377]  ? unlink_anon_vmas+0x64e/0x8e0
[  129.621157][ T7377]  handle_bug+0x16a/0x2a0
[  129.625472][ T7377]  exc_invalid_op+0x17/0x50
[  129.629960][ T7377]  asm_exc_invalid_op+0x1a/0x20
[  129.634794][ T7377] RIP: 0010:unlink_anon_vmas+0x64e/0x8e0
[  129.640408][ T7377] Code: 8b 40 30 48 39 c3 0f 85 9c 00 00 00 e8 2b 17 a7 ff 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 13 17 a7 ff 90 <0f> 0b 90 e9 2e ff ff ff e8 05 17 a7 ff 90 0f 0b 90 e9 e0 fe ff ff
[  129.659994][ T7377] RSP: 0018:ffffc900052879a0 EFLAGS: 00010293
[  129.666045][ T7377] RAX: 0000000000000000 RBX: ffff88802bfcf930 RCX: ffffffff8261b817
[  129.673993][ T7377] RDX: ffff88801df08000 RSI: ffffffff8261b8ed RDI: ffff88801df08000
[  129.681939][ T7377] RBP: ffff88802ce57dd0 R08: 0000000000000007 R09: 0000000000000000
[  129.689886][ T7377] R10: ffffffffffffffff R11: 0000000000000000 R12: dffffc0000000000
[  129.697835][ T7377] R13: ffff888036deb8e0 R14: ffff88802bfcf940 R15: ffff888036deb8f0
[  129.705800][ T7377]  ? unlink_anon_vmas+0x577/0x8e0
[  129.710815][ T7377]  ? unlink_anon_vmas+0x64d/0x8e0
[  129.715836][ T7377]  free_pgtables+0x2e7/0xd80
[  129.720408][ T7377]  ? __pfx_free_pgtables+0x10/0x10
[  129.725509][ T7377]  exit_mmap+0x44c/0xa30
[  129.729734][ T7377]  ? __pfx_exit_mmap+0x10/0x10
[  129.734473][ T7377]  ? trace_contention_end+0x140/0x180
[  129.739828][ T7377]  ? uprobe_clear_state+0x5f/0x360
[  129.744921][ T7377]  ? uprobe_clear_state+0x5f/0x360
[  129.750022][ T7377]  ? __lock_acquire+0x4a5/0x2630
[  129.754942][ T7377]  ? arch_uprobe_clear_state+0x107/0x150
[  129.760556][ T7377]  __mmput+0x12a/0x410
[  129.764611][ T7377]  mmput+0x67/0x80
[  129.768312][ T7377]  do_exit+0x819/0x2b60
[  129.772459][ T7377]  ? preempt_schedule_thunk+0x16/0x30
[  129.777814][ T7377]  ? __pfx_do_exit+0x10/0x10
[  129.782388][ T7377]  ? preempt_schedule_thunk+0x16/0x30
[  129.787747][ T7377]  do_group_exit+0xd5/0x2a0
[  129.792236][ T7377]  __x64_sys_exit_group+0x3e/0x50
[  129.797244][ T7377]  x64_sys_call+0x102c/0x1530
[  129.801899][ T7377]  do_syscall_64+0x106/0xf80
[  129.806469][ T7377]  ? clear_bhb_loop+0x40/0x90
[  129.811126][ T7377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.816999][ T7377] RIP: 0033:0x7fb4a4d9c799
[  129.821395][ T7377] Code: Unable to access opcode bytes at 0x7fb4a4d9c76f.
[  129.828385][ T7377] RSP: 002b:00007ffe003b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  129.836778][ T7377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4a4d9c799
[  129.844724][ T7377] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  129.852670][ T7377] RBP: 00007ffe003b514c R08: 0000000000000000 R09: 00000000000927c0
[  129.860621][ T7377] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000072
[  129.868568][ T7377] R13: 00000000000927c0 R14: 000000000001f216 R15: 00007ffe003b51a0
[  129.876526][ T7377]  </TASK>
[  129.879793][ T7377] Kernel Offset: disabled
[  129.884088][ T7377] Rebooting in 86400 seconds..