last executing test programs:

11.318975275s ago: executing program 0 (id=80):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000280))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x36)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x5, 0xeeee8000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000040)={0xdddd1000, 0x101000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0180f7", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

10.721061508s ago: executing program 0 (id=82):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7ff)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000b667d9cd0ce486f92300000000000000000000000049153000b7000000000000246fa06b1af59bfc6f84ab9883517dac7507"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r3, 0x25, 0x4, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@empty, @random="a6dde6557137", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "ab279c", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x0)
gettid()
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042)

8.441467932s ago: executing program 2 (id=92):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0), 0x1)
sendto$inet6(r1, 0x0, 0x0, 0x400c0d4, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8a630600011000000800e45390498ede8572be16ca00"], 0x28}}, 0x0)

8.293287429s ago: executing program 4 (id=93):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000004140)=[{0x2300, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0)

7.121500884s ago: executing program 2 (id=97):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0xfffffffd, {{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x108)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffe})
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)=""/22, 0x16}], 0x4, &(0x7f0000001e00)=[{&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/80, 0x50}, {&(0x7f0000000b80)=""/138, 0x8a}, {&(0x7f0000000cc0)=""/69, 0x45}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000d40)=""/37, 0x25}, {&(0x7f0000000d80)=""/91, 0x5b}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x8, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40050)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="6a6143aa4be18e0f6cf2", 0xa}, {&(0x7f0000000440)="37eed30da9094a0f0bd21b9cc47125d131d0610ce0bc0fa3da576f323c227715546a4819715e535331225b842ee7630bc9c242a0af8d101550331cce539ea67674f6386f0661d1272adff4a6f85a63d8bb74b732a8f9f0cc04f9bb04eb91020f4f93874fee1636859d91103c3f363123d1d584af374f6c9c9538758e328060fa09d3d491cf50cc0f354e947c9571829c789515a94f605e88240095a77979d2abf719da9a3c40a15af2aa9a2e3f9684", 0xaf}, {&(0x7f0000000500)="1a1b81c25ee2ac4173abca2c384047c61553802f48a59384c208a7dd6f23c75be43623810478b8a40e97091826af0e23ce829debc561360965ad1271d16f366fa15dca1870bb206d66e8cd3e7c1c146391471ea1650c", 0x56}, {&(0x7f0000000600)="c3dc6934357e7758300a53b43810ef976218c1d93a2d1db801db2c0855206fe8f65eca582b5a78b692db8dc044e672258b87b6502b362cf73e04f60e2b5b10d41b491d572c82bb0444f0f7f5b1f07d1064650bb51ca6358b5fc80becfff15bfc3e2bf868be5f1ea9ef0889d792b51d767dbc549caf10b7f18e66cd1b066c568d6303827f3e547422b38e7f824319e4d27c944261c72b3b1d05666b973ce8a55e5a56f0cb7eb21dba96ccd9fdd83e56b616ec954b4866dbb956", 0xb9}], 0x4}, 0x0)
write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000000)={0xc, <r6=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="05005b002d000000"], 0x24}}, 0x48000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10)

6.971686412s ago: executing program 0 (id=98):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
lseek(r1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ce98295}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x94, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "570f979be42e5ec59b4ece342952dccb79f962d25c2090b5b2040359c1b1cd6cbcd2aaed2754366d15e49cb473a22d4e5a257cf863f6686f97fa7bb8064c0f9ead4e27587719c64a52e51a0162daa5bb9b687dd24a79cd3940b9d4d4da5d017ae6edcb2d3c23d6b9d262b2427ff81089e01767db5d9a02d6358843203ccd7b4425", ["", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x20}, 0x24000800)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0xffffffffffffffe8)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r4, 0x0, 0xffffffff004)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x7, 0x0, 0x97}, 0x8)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0xffffbddf, {{0xa, 0x4e24, 0x3, @empty, 0x5670}}, {{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x54)

6.909470845s ago: executing program 4 (id=100):
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff814000000000000000000000000000000000000000000400"/42])
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
close_range(r0, r1, 0x0)
socketpair(0x1a, 0x800, 0x47f1, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './cgroup\x00'})

6.882177848s ago: executing program 2 (id=101):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
r1 = dup(r0)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r1, 0x0, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @empty, <r4=>0x0}, &(0x7f00000001c0)=0xc)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r1}, 0x10)
ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@loopback, 0xc, r4})
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000240)={0x9})
r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mbind(&(0x7f00004a7000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000380)=0xc2ff, 0x6, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x80, 0x0, 0x4)
r9 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x80, 0x2})
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r10, 0x0)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r12 = accept(r10, 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000440)="64e07fd24915ef292986aab7035d88ccec8aafe57839baaf25116e7ff1a67314438521ab1b5896868c1b145072c99345ce95bdb29849a79f540b0c740000000000000000000068e567d4131360eb0674e49669b3895498c360738f909d0e2063e3bbebe79f919c90d2e351a9fcfc9ccdf33d4ac1fed51504ec4feb5fbc9a676cfdc3efed1dd1583859c8bcc617fe94cf4e6a55bd6b5d2b58813991a8c2ed5ad970b25aa7e397e9aa97fee22eddb23bef727eb9b53bd9eafc74974cb289f861f0eda2a316376b1017f0889aafe1a3134e366a0e62f8f4", &(0x7f00000002c0)=@udp=r3, 0x48bab11ef4092654}, 0x20)
recvmsg$can_bcm(r12, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
close_range(r9, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r1, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000040)={0x3})

6.696708108s ago: executing program 4 (id=103):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xfffa}, {0x34e7555e6609e6f1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffd2c, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd26, 0x0, {{}, {@void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8, @ANYRES8=r9, @ANYRESHEX=r5], 0x0, 0x3}, 0x94)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)

6.641550261s ago: executing program 0 (id=104):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x6120480, 0x0, 0xa6fc3956163455dc, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)

6.638038932s ago: executing program 2 (id=105):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4802}, 0x20004180)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f})
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x8000000, 0x7})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x2, 0x2})

5.222770681s ago: executing program 4 (id=107):
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(0x4)

4.99952067s ago: executing program 3 (id=108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1}, 0xc)

4.890128493s ago: executing program 4 (id=109):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x9, &(0x7f0000000080))
sysinfo(&(0x7f0000000000)=""/109)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, &(0x7f00000001c0)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c)
r5 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x40000)
recvfrom$inet_nvme(r5, &(0x7f0000000240)=""/148, 0x94, 0x40000011, &(0x7f0000000880)=@ethernet={0x6, @local}, 0x80)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f00000000c0), 0x3e)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8d0}, 0x10000010)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x16, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x3, 0x5, 0x4, 0x8, 0x8b, 0x3c5b, 0x5, 0x3, 0x9, 0x1, 0x1b461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x23f, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x3, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0xe, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffdf3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x20000, 0xe, 0x312, 0x78, 0xea4, 0x1, 0x0, 0x4, 0x8000, 0x9, 0xffffffff, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x84, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf6979, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x658, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb20, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)

4.713664863s ago: executing program 3 (id=110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xfff3, 0xffff}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010})
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
getdents64(r0, &(0x7f0000000240)=""/122, 0x7a)
eventfd(0xffffffff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x5)

4.639708305s ago: executing program 2 (id=111):
socket$inet_sctp(0x2, 0x5, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0xb43d, 0x0, 0x3, 0x11f}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4.221584438s ago: executing program 1 (id=112):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df})

4.122573746s ago: executing program 3 (id=113):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="7f5fee242b1ea34ca976fa35b1216f71251357ab856f1b128665e1970f09631945852185f0d68712d125253e444ad178f3118bc64bad7d7d14b12962616ea0178cfc49b2ed4650e08e52f0d8d8b949de5e7e3cf40441c0aecb68e01cd624f2d1bdd8a68adeffdd6ac0bf80c16d975c1b13ddd270eb3d7ed7f2ba461ee3f62394f029479148fc2f6409ed065d20e77306905f83b7fb62e407be6aaaa0d94bcb98b8af0833981a3ee1f3e026a6001ddc79", @ANYRES32=r1], 0x5c}}, 0x8000)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000440)=0x7fffff, 0xfffffffffffffecf)
sendmsg$NFT_BATCH(r1, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a01"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010022)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
ppoll(&(0x7f0000000100)=[{r5, 0x181}], 0x1, 0x0, 0x0, 0x0)
close(r4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x4, 0x1})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000580)={r9, 0x9, 0x4, 0x0, 0x1, [], [0x80006, 0x0, 0x0, 0xbfe], [0x0, 0xfffffffc]})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={r9, 0xd64a, 0x4, 0x7, 0x1, [], [0x9, 0x0, 0x7ff, 0x2], [0x9, 0x0, 0x1], [0xb9b, 0x9, 0x8, 0x2]})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x6, 0x1, 0x5}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/205, 0xcd, 0x0, 0x8}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0})
r10 = dup3(r6, r0, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})

3.956064426s ago: executing program 1 (id=114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16, @ANYBLOB="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"], 0x2040}}, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async)
pipe(&(0x7f0000005880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa)
fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async)
r5 = syz_io_uring_setup(0x1000010d, &(0x7f0000000140)={0x0, 0x8301, 0x2000, 0x0, 0x800003b8, 0x0, r4}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0800a080921b9e09000208009f00a1aa65d7d43cdf70f723fe0c3c8945d677e64c3c9e6dd8950f74ee8e89c1e800268f599fdcf1fee331f6c0e249cf90eff0266eecda3b7a9a554a5993c8ff2b4bfd362e4870663de13e27539565ba99891f6ca83157b85cac"], 0x3c}}, 0x2800) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xb, 0xc}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.909616188s ago: executing program 3 (id=115):
r0 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioprio_get$pid(0x1, r0)

3.721266863s ago: executing program 1 (id=116):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/68, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000a40)=0x9101, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x2, r7}, 0x10)
sendmmsg$inet6(r4, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000001c0)="363292c087fc18333dbd7f8d18fb5c177ca9b6dec80d4e0a4c9b1785cea8a11f21ea77b1afcc3ef07951a51b73fdbf59960cb7281bb6cf198ad83a62ee364662d24fcbf0e0cf9c6bbaa281337f9ba281f516a9ebc4ebc6739f8a385dc22eb5fe49641930c28a1b2e1607589debb9f5e029b2dedb490b3eda8339246b45d5ea9775632bf2fb8a2584f30670498b3c063ef387fb78e32f0275bcdde575b29dba5830da9cfb50577d7e6a8190e72199df0beaf31461e78a4309600aece25c03364edacafb6c5b4def7616a48826b3dea85d124918dcf157bff4f1b24449", 0xdc}, {&(0x7f0000000100)="5b4e4e417dba795ca649f498c1446cf78d31d9df3ffa92c768b07f3e59176bf7efcaf0789ba67b96b595dd91083f7a890d198cf8ac949146b52d28f95c5abdb029a0d230b9833517587d3ca941578ff9efa6f3", 0x53}, {&(0x7f0000000840)="d5ef02b88b566eeacc47696a9d96406c369b47263e6dd4f107240c77a0357fcb59c24e71c212bd96f65e9a83df7bf35464621f4c1a8ab748cff061dd299835a010929bafa88099d842774f21358a942387c8a04f1bcb2cc806026ce375fc675ffc82be837665dff4166ee01204a161c48f0dd2f7d82ed0c215743b5540073166758fd2b57705f75e170e57e640afcac55b1cecbc1fc0c847baf5023a4e76e5218b322229fbbed8a3a6cea878dc655c2f83ed560dc57547d94ca00789583bb9483bde54b512f3990333614fa3eaa29f0e964b3def680a88d1de7f7ac846e23aed603f5f25293c7991b3208e6f0ffe842e12094cea5d", 0xf5}, {&(0x7f0000000580)="5b6634ab12cd862c9bf0d0b3fff0b9f756b17acbde6cf3a3d9e325f1f1a8a5abf3ae69216f64a756da20fa6e5a92e2ecede5414b9e0fd1f3f37698e4d936c8bdbfe45b3f0a61bd7ce48c000cf1502bb8f30eda4439bd4301a36eaeba639f595fe9ef123999e73a60627842f2f5373f29886098789b9d181d2e150d96bdd854163a79412fdef4823061fac874780bad6c64976951fe2bcb1c2de92f5dedd4c725141658bcff707154e08a33f415bcab813d9b1eb41929bff05f66b65b4d6704ae8e3d440ca4cf61e65507e15c7d0f0184e08a938e84d01fe94bb19b319a87a636bd8c912a40e5f2f68b15b6be80502c21b1ea6a6edda8cac430", 0xf9}, {&(0x7f0000000680)="110b987dc701fb596b7c5ad11d8920f1738323fca2b8787dc3eebfdeeb8fe182f749aaab4bb2ffc80d5c266d007f2c1989b3ec11a281e04201ae5f391e43d17aacb4a94de3dcaf32c33ab54d8aa90c7575e2764246ccfde738b6f64ec299ba28054dabe8691cafad74f2", 0x6a}, {&(0x7f0000000080)="fbebea64a5f7e859d895062935cc0f506530cd4863210b71f1", 0x19}, {&(0x7f0000000400)="dc094eb8753c4b0492c95b3b47f1e1", 0xf}, {&(0x7f0000000700)="dbf3b06b8a8735a2a4cafe1a49ccf27f2f7f4c3549e7a51c971563378d469494f91c80d94ebf4184b184aa7f94b08188bb721dea2cc12d5b1a1c6e5049ad0594f0f428ffb98a4ed216f81bdfd395b63794781d66123691e6bd441573d1da0aaa4e1278d2d57f4897e716b325b8e4c2c955f753929b28e9af3f4b6f7ad8bfc7acddbf7396e666bb5d6f9ca942d0b97d36fabd3f44f475914cde0d9a55ea6aac6abdb93e6e94241284cb911d4926253b9bbf797d68fab625455d6e724cbf314868", 0xc0}], 0x8, &(0x7f0000001e80)=[@hopopts={{0x18, 0x29, 0x36, {0x3c}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x3, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x5, [0xe5]}}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x17, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @calipso={0x7, 0x40, {0xc68895d0436556aa, 0xe, 0x0, 0x6, [0x1800, 0x0, 0xfffffffffffffffb, 0x1f0, 0xa, 0xc24, 0x100000000]}}, @ra={0x5, 0x2, 0x6}, @generic={0x80, 0xa2, "0d5e69ccb83b8c19865177c707ee09907d8b21f93bfd739dce2020144403c36b90b499acf5ea40d59799895777907f1af26c7805fcb2ca0baaea01c57f3f097933eca0e501a3fa2e59a6d2c6cff8f90f96563d7dbeb239709c3d231cc2aa879a57b26152b745488a0d1e89186b3ee12a5fde1c2ec6074190455ba22cbb32a709dcfedc5332f63a18572c0dcbb83acf717fdd843f028bfe0b2aa6564724ad68dc8535"}]}}}], 0x1a8}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x4, @mcast2, 0x800}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000a80)="2817dd4f7f01ca18c06b602646a5db700e5e46b4accdd929243b10a32ae4595a62c87e385ad903ce7dd86d", 0x2b}, {&(0x7f0000000ac0)="6aa77162d90c20dd709f9f7babb56ea5457d", 0x12}, {&(0x7f0000000b00)="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", 0x1000}], 0x3, &(0x7f0000001b40)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r7}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x73, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xb, 0x5, [0x80]}}, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x1, 0xca, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0xfd}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0xf8}}], 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000940)={<r8=>0x0, 0xa4, "05c15a1f9f6510fb9b885352fad0173d4846d3fe51af0703c3bbad46ee58e9ae4f7198ab9009e62d2cf45e425a974a9a139a60f37fa771f05f0cfff4bf026db351ff5e508654aeb948e7b461a4fba65d00a2c2411dad979c5339a370a52555628ad7654cb96d6d661955e39ccdbb1199c93bd513f3f850c85c3d6dc2e2243a7f51d6709d786671b7941abe2c0874f8a79081112bedd6d2dc69410663dcf45d97bce00bd5"}, &(0x7f00000002c0)=0xac)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={<r9=>0x0, 0x80000000}, &(0x7f0000000380)=0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002280)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002380)=0xe8)
mount$9p_fd(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x10, &(0x7f00000023c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@ignoreqv}, {@access_user}, {@cache_none}], [{@flag='dirsync'}, {@appraise_type}, {@uid_gt={'uid>', r10}}, {@subj_type={'subj_type', 0x3d, ']!-))\'('}}]}})
getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001cc0)={r8, 0x1, 0x9, 0x80, 0x8, 0x9, 0x4, 0x10000, {r9, @in6={{0xa, 0x4e21, 0xf060, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100000}}, 0x5, 0x6a6, 0x4, 0x3, 0x5}}, &(0x7f0000000a00)=0xb0)
r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r11, &(0x7f00000001c0)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50)

2.755785631s ago: executing program 1 (id=117):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="1a000000000000008604"])
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
read$rfkill(r6, &(0x7f00000002c0), 0x8)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010005000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330001000000"], 0x24}}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f07489"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18)
syslog(0x9, 0x0, 0x0)

2.453509988s ago: executing program 0 (id=118):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x181400, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x7})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r2, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r8)
keyctl$read(0xb, r8, 0x0, 0x39)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010039bd70000000010000006900", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d30000000000000180016801400018010000600070000005e3c5e22c9000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)

1.999530426s ago: executing program 2 (id=119):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f00000000c0)={'vlan0\x00'})
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x40, 0x1, 0x2, "7f2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0)={0x0, 0x1a, 0x2, "aa5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0x14, 0x0, 0x0}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x3, "b88c7a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, &(0x7f0000001040)={0x14, &(0x7f0000000f40)=ANY=[@ANYBLOB="2030a5000000a50a3f50b4b78f0cb818f79d1976a49b5a2a9830c96101dfb2f8111b614612067716db736792d3635b061b454c114a09116233fddec1b954524982a410af0e25be1147033bf6697174a0688ae8393db40657412ecc5791954433441a4fa510be7a128888d9775766023f3ac6acf1d43b36f8c9e0c54f9f70c8e65075861a599b3edd896ae725ffd95f9f259b00ad126051c9604a028ac62621f7952eb398d73e9ea79dee90"], &(0x7f0000001000)={0x0, 0x3, 0x11, @string={0x11, 0x3, "d5c5ea3fa35ac80ec06606547d9db8"}}}, &(0x7f0000001300)={0x44, &(0x7f0000001080)={0x0, 0xe, 0x46, "7102e8f5b9aa32f2283074cb810f195ca91eaef62ce98b6afd76225ab1804a301be97e10bf372ec1aa3a7e756c86d3ba191fec9e955e22e37853a76e9bffcfeb9e3b7f7a52dc"}, 0x0, 0x0, &(0x7f00000011c0)={0x20, 0x81, 0x1, 'L'}, &(0x7f0000001200)={0x20, 0x82, 0x2, "afba"}, 0x0, 0x0, 0x0})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'ni_daq_700\x00', [0xd00, 0x6, 0x0, 0x2, 0x88d7, 0x81, 0x1008, 0x10, 0x1002, 0xffffffff, 0x200, 0x7, 0x6, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0x9, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]})

1.899274607s ago: executing program 1 (id=120):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802541, 0x0)
dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10})
io_uring_enter(r4, 0x3516, 0x701f, 0x0, 0x0, 0x3e)

562.815639ms ago: executing program 1 (id=121):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4802}, 0x20004180)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f})
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x8000000, 0x7})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x2, 0x2})

545.216866ms ago: executing program 4 (id=122):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00')
syz_open_dev$sndctrl(&(0x7f0000000040), 0x7ca6, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x89f3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00')
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
getdents64(r1, &(0x7f0000002440)=""/181, 0xb5)
getdents64(r1, 0xffffffffffffffff, 0xa3a743e7de85212)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c", @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0)

436.865324ms ago: executing program 3 (id=123):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xbb, 0x3, 0x2, [{@private=0xa010102, 0x1}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @rr={0x7, 0xb, 0x8f, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x4, 0x31}]}}}}}}}, 0x0)

65.687889ms ago: executing program 3 (id=124):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df})

0s ago: executing program 0 (id=125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901)
getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000180)={@private, @private, @empty}, &(0x7f0000000340)=0xc)
move_mount(r5, 0x0, r5, 0x0, 0x262)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x80, 0x5}, 0x80000001, 0x100, 0x0, 0x0, 0x0, 0x0, 0x64e8})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
[   64.963152][   T30] audit: type=1400 audit(1754013382.631:62): avc:  denied  { mounton } for  pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   64.967960][ T5810] cgroup: Unknown subsys name 'net'
[   64.986081][   T30] audit: type=1400 audit(1754013382.631:63): avc:  denied  { mount } for  pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   65.013488][   T30] audit: type=1400 audit(1754013382.661:64): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   65.165890][ T5810] cgroup: Unknown subsys name 'cpuset'
[   65.174682][ T5810] cgroup: Unknown subsys name 'rlimit'
[   65.389915][   T30] audit: type=1400 audit(1754013383.051:65): avc:  denied  { setattr } for  pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   65.423226][   T30] audit: type=1400 audit(1754013383.051:66): avc:  denied  { create } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.456675][   T30] audit: type=1400 audit(1754013383.051:67): avc:  denied  { write } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.477157][   T30] audit: type=1400 audit(1754013383.051:68): avc:  denied  { read } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.483083][ T5812] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   65.506121][   T30] audit: type=1400 audit(1754013383.051:69): avc:  denied  { mounton } for  pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   65.531193][   T30] audit: type=1400 audit(1754013383.051:70): avc:  denied  { mount } for  pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   65.554581][   T30] audit: type=1400 audit(1754013383.091:71): avc:  denied  { read } for  pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   66.488214][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.843163][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.851561][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.871108][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.879459][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.888517][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.897128][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.905705][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.909770][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.922011][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.922478][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.930131][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.944995][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.948080][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.952753][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.960770][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.975584][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.982387][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.983160][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.996686][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.005469][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.014840][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.015398][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.030701][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.032481][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.049333][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.459759][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   69.533507][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   69.675406][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   69.727874][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   69.753139][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.760957][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.769372][ T5821] bridge_slave_0: entered allmulticast mode
[   69.777373][ T5821] bridge_slave_0: entered promiscuous mode
[   69.787535][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.794920][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.802070][ T5821] bridge_slave_1: entered allmulticast mode
[   69.811471][ T5821] bridge_slave_1: entered promiscuous mode
[   69.836606][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.843817][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.851016][ T5830] bridge_slave_0: entered allmulticast mode
[   69.858081][ T5830] bridge_slave_0: entered promiscuous mode
[   69.869525][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.876714][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.884068][ T5830] bridge_slave_1: entered allmulticast mode
[   69.890762][ T5830] bridge_slave_1: entered promiscuous mode
[   69.923017][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   69.978696][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.007889][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.018951][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.071089][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.118346][ T5821] team0: Port device team_slave_0 added
[   70.124379][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.131543][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.140571][ T5826] bridge_slave_0: entered allmulticast mode
[   70.147404][ T5826] bridge_slave_0: entered promiscuous mode
[   70.156100][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.163238][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.170370][ T5826] bridge_slave_1: entered allmulticast mode
[   70.178520][ T5826] bridge_slave_1: entered promiscuous mode
[   70.185343][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.192852][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.199960][ T5831] bridge_slave_0: entered allmulticast mode
[   70.207160][ T5831] bridge_slave_0: entered promiscuous mode
[   70.227026][ T5830] team0: Port device team_slave_0 added
[   70.235376][ T5821] team0: Port device team_slave_1 added
[   70.256362][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.263635][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.270901][ T5831] bridge_slave_1: entered allmulticast mode
[   70.278254][ T5831] bridge_slave_1: entered promiscuous mode
[   70.289974][ T5830] team0: Port device team_slave_1 added
[   70.348965][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.356042][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.382963][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.396953][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.409083][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.435303][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.442644][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.468939][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.480672][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.487840][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.513866][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.537618][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.550960][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.560303][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.567769][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.574959][ T5820] bridge_slave_0: entered allmulticast mode
[   70.581680][ T5820] bridge_slave_0: entered promiscuous mode
[   70.589750][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.596839][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.623547][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.658389][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.665900][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.673147][ T5820] bridge_slave_1: entered allmulticast mode
[   70.679786][ T5820] bridge_slave_1: entered promiscuous mode
[   70.703136][ T5826] team0: Port device team_slave_0 added
[   70.719871][ T5831] team0: Port device team_slave_0 added
[   70.738279][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.748967][ T5826] team0: Port device team_slave_1 added
[   70.777162][ T5831] team0: Port device team_slave_1 added
[   70.793817][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.811115][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.818263][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.844426][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.886999][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.894166][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.920266][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.945434][ T5821] hsr_slave_0: entered promiscuous mode
[   70.951646][ T5821] hsr_slave_1: entered promiscuous mode
[   70.971938][ T5830] hsr_slave_0: entered promiscuous mode
[   70.979529][ T5830] hsr_slave_1: entered promiscuous mode
[   70.985739][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   70.991529][ T5830] Cannot create hsr debugfs directory
[   71.003801][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.010822][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.037126][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.048963][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.056610][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.056734][ T5147] Bluetooth: hci1: command tx timeout
[   71.082838][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.092323][ T5827] Bluetooth: hci4: command tx timeout
[   71.108638][ T5820] team0: Port device team_slave_0 added
[   71.116709][ T5820] team0: Port device team_slave_1 added
[   71.132389][ T5827] Bluetooth: hci3: command tx timeout
[   71.132428][ T5829] Bluetooth: hci0: command tx timeout
[   71.139326][ T5147] Bluetooth: hci2: command tx timeout
[   71.209820][ T5826] hsr_slave_0: entered promiscuous mode
[   71.216771][ T5826] hsr_slave_1: entered promiscuous mode
[   71.223194][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   71.228930][ T5826] Cannot create hsr debugfs directory
[   71.244684][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.251674][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.278605][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.315319][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.322351][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.348353][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.401684][ T5831] hsr_slave_0: entered promiscuous mode
[   71.408203][ T5831] hsr_slave_1: entered promiscuous mode
[   71.414858][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   71.420575][ T5831] Cannot create hsr debugfs directory
[   71.548186][ T5820] hsr_slave_0: entered promiscuous mode
[   71.554424][ T5820] hsr_slave_1: entered promiscuous mode
[   71.560348][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   71.566234][ T5820] Cannot create hsr debugfs directory
[   71.618782][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.626129][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.809868][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.821738][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.854119][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.873057][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.928227][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.941090][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.953586][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.973647][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.042057][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.066257][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.083701][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.106358][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.197976][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.206654][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.220826][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.235020][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.261024][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.315845][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   72.349795][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.357376][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.379181][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.393210][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.401415][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.408639][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.424041][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.436500][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.446776][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.515159][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   72.547104][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.554289][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.574906][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.582036][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.604270][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.667189][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   72.667209][   T30] audit: type=1400 audit(1754013390.331:86): avc:  denied  { sys_module } for  pid=5821 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   72.744960][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.808599][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   72.836367][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.843594][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.875867][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   72.903793][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.910952][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.924353][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.931505][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.953275][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.966198][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.973947][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.059030][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.071609][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   73.105795][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.112976][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.133238][ T5147] Bluetooth: hci1: command tx timeout
[   73.138683][ T5147] Bluetooth: hci4: command tx timeout
[   73.148353][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.155513][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.195859][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.214070][ T5147] Bluetooth: hci2: command tx timeout
[   73.214083][ T5829] Bluetooth: hci3: command tx timeout
[   73.219492][ T5147] Bluetooth: hci0: command tx timeout
[   73.291871][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.321903][ T5821] veth0_vlan: entered promiscuous mode
[   73.359694][ T5821] veth1_vlan: entered promiscuous mode
[   73.449017][ T5826] veth0_vlan: entered promiscuous mode
[   73.527704][ T5826] veth1_vlan: entered promiscuous mode
[   73.599648][ T5821] veth0_macvtap: entered promiscuous mode
[   73.619742][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.630395][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.656554][ T5821] veth1_macvtap: entered promiscuous mode
[   73.686020][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.727775][ T5826] veth0_macvtap: entered promiscuous mode
[   73.759340][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.769577][ T5826] veth1_macvtap: entered promiscuous mode
[   73.796293][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.840080][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.866400][ T2928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.894435][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.908379][ T2928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.917327][ T2928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.936584][ T5820] veth0_vlan: entered promiscuous mode
[   73.947054][   T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.957713][ T5830] veth0_vlan: entered promiscuous mode
[   73.981392][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.996781][ T5820] veth1_vlan: entered promiscuous mode
[   74.019760][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.029108][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.039276][ T5830] veth1_vlan: entered promiscuous mode
[   74.065413][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.140872][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.163392][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.209022][ T5831] veth0_vlan: entered promiscuous mode
[   74.221974][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.233583][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.241428][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.249130][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.260592][ T5830] veth0_macvtap: entered promiscuous mode
[   74.271788][ T5830] veth1_macvtap: entered promiscuous mode
[   74.288354][   T30] audit: type=1400 audit(1754013391.951:87): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.o3cJvP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   74.313979][ T5831] veth1_vlan: entered promiscuous mode
[   74.325988][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.331159][   T30] audit: type=1400 audit(1754013391.951:88): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   74.343579][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.360046][   T30] audit: type=1400 audit(1754013391.951:89): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.o3cJvP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   74.366166][ T5820] veth0_macvtap: entered promiscuous mode
[   74.394107][   T30] audit: type=1400 audit(1754013391.951:90): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   74.424482][   T30] audit: type=1400 audit(1754013391.981:91): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.o3cJvP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   74.481258][   T30] audit: type=1400 audit(1754013392.001:92): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/root/syzkaller.o3cJvP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   74.489093][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.513642][   T30] audit: type=1400 audit(1754013392.001:93): avc:  denied  { unmount } for  pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   74.533737][ T5820] veth1_macvtap: entered promiscuous mode
[   74.557265][   T30] audit: type=1400 audit(1754013392.081:94): avc:  denied  { mounton } for  pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   74.584169][   T30] audit: type=1400 audit(1754013392.081:95): avc:  denied  { mount } for  pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=7216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   74.598627][ T5831] veth0_macvtap: entered promiscuous mode
[   74.641060][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.670249][ T5831] veth1_macvtap: entered promiscuous mode
[   74.729755][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.766245][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.788836][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.819404][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.839385][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.858014][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.871672][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.885800][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.899539][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.912933][  T755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.926427][  T755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.936912][  T755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.003746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.025379][  T755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.037856][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   75.088268][  T755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.125684][  T755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.136769][  T755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.161866][  T755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.232203][ T5147] Bluetooth: hci4: command tx timeout
[   75.237694][ T5829] Bluetooth: hci1: command tx timeout
[   75.292721][ T5147] Bluetooth: hci0: command tx timeout
[   75.298179][ T5829] Bluetooth: hci3: command tx timeout
[   75.303761][ T5827] Bluetooth: hci2: command tx timeout
[   75.480354][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.629189][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.637537][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.684451][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.693930][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.777810][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.797468][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.891662][  T755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.921181][  T755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.053556][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.061421][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.069755][ T5955] syzkaller0: entered promiscuous mode
[   76.078918][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.084028][ T5955] syzkaller0: entered allmulticast mode
[   76.095632][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.271409][ T5961] comedi comedi0: Minor 3 could not be opened
[   76.446209][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'.
[   76.482369][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.636272][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.644731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.653710][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.663046][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   76.671322][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   76.680093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.687969][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   76.688637][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.802525][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.312300][ T5147] Bluetooth: hci4: command tx timeout
[   77.312326][ T5829] Bluetooth: hci1: command tx timeout
[   77.358081][ T5962] mkiss: ax0: crc mode is auto.
[   77.372758][ T5829] Bluetooth: hci0: command tx timeout
[   77.372798][ T5147] Bluetooth: hci3: command tx timeout
[   77.379274][ T5827] Bluetooth: hci2: command tx timeout
[   77.709837][   T30] kauditd_printk_skb: 37 callbacks suppressed
[   77.709853][   T30] audit: type=1400 audit(1754013395.371:133): avc:  denied  { create } for  pid=5989 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   77.816720][   T30] audit: type=1400 audit(1754013395.461:134): avc:  denied  { accept } for  pid=5989 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   77.883914][   T43] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   78.094880][   T30] audit: type=1400 audit(1754013395.761:135): avc:  denied  { create } for  pid=5993 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   78.114914][   T43] usb 5-1: Invalid ep0 maxpacket: 16
[   78.316862][   T30] audit: type=1400 audit(1754013395.761:136): avc:  denied  { bind } for  pid=5993 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   78.344743][ T5996] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   78.354488][   T30] audit: type=1400 audit(1754013395.971:137): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   78.443280][   T43] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   78.450440][   T30] audit: type=1400 audit(1754013396.111:138): avc:  denied  { connect } for  pid=5998 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   78.499026][   T30] audit: type=1400 audit(1754013396.141:139): avc:  denied  { create } for  pid=6000 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   78.587935][   T30] audit: type=1400 audit(1754013396.151:140): avc:  denied  { getopt } for  pid=6000 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   78.634152][   T30] audit: type=1400 audit(1754013396.191:141): avc:  denied  { write } for  pid=5998 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   78.664082][   T43] usb 5-1: Invalid ep0 maxpacket: 16
[   78.691948][   T43] usb usb5-port1: attempt power cycle
[   78.718966][   T30] audit: type=1400 audit(1754013396.301:142): avc:  denied  { create } for  pid=5998 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   79.142207][   T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   79.199674][ T5988] overlayfs: overlapping lowerdir path
[   79.226656][   T43] usb 5-1: Invalid ep0 maxpacket: 16
[   79.403444][   T43] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[   79.465261][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19'.
[   79.467593][   T43] usb 5-1: Invalid ep0 maxpacket: 16
[   79.533473][   T43] usb usb5-port1: unable to enumerate USB device
[   79.639339][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   79.669410][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   79.685065][ T6017] netlink: 'syz.2.19': attribute type 4 has an invalid length.
[   79.710981][ T6017] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19'.
[   80.648812][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'.
[   80.721114][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   80.897938][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   80.993101][ T6036] mkiss: ax0: crc mode is auto.
[   80.998176][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.157621][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.202923][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.227735][ T5881] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[   81.250437][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.272886][ T6051] block nbd2: NBD_DISCONNECT
[   81.284327][ T6051] block nbd2: Send disconnect failed -22
[   81.285942][ T5881] usb 1-1: config 0 descriptor??
[   81.305305][ T6047] block nbd2: Disconnected due to user request.
[   81.312666][ T6047] block nbd2: shutting down sockets
[   81.726282][ T6058] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   81.857057][ T5881] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[   82.193207][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   82.574364][ T5937] usb 1-1: USB disconnect, device number 2
[   83.160076][   T30] kauditd_printk_skb: 43 callbacks suppressed
[   83.211001][   T30] audit: type=1400 audit(1754013400.811:186): avc:  denied  { setopt } for  pid=6073 comm="syz.2.33" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.214196][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'.
[   83.562292][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.791309][ T5881] usb 3-1: Using ep0 maxpacket: 8
[   83.848380][ T6083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6083 comm=syz.4.35
[   83.994586][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   84.258786][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.457986][ T5881] pvrusb2: Hardware description: Terratec Grabster AV400
[   84.489552][ T5881] pvrusb2: **********
[   84.506186][ T5881] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   84.576152][ T5881] pvrusb2: Important functionality might not be entirely working.
[   84.610493][ T5881] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   84.700374][ T5881] pvrusb2: **********
[   84.997348][   T30] audit: type=1400 audit(1754013402.411:187): avc:  denied  { create } for  pid=6089 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   85.180974][ T6092] atomic_op ffff88805698e198 conn xmit_atomic 0000000000000000
[   85.195323][ T2340] pvrusb2: Invalid write control endpoint
[   85.205859][ T5881] usb 3-1: USB disconnect, device number 2
[   85.211917][   T30] audit: type=1400 audit(1754013402.421:188): avc:  denied  { listen } for  pid=6089 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   85.407729][   T30] audit: type=1400 audit(1754013402.431:189): avc:  denied  { accept } for  pid=6089 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   85.437815][   T30] audit: type=1400 audit(1754013402.821:190): avc:  denied  { create } for  pid=6091 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.513339][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'.
[   85.523018][   T30] audit: type=1400 audit(1754013402.821:191): avc:  denied  { bind } for  pid=6091 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.550068][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'.
[   85.590739][   T30] audit: type=1400 audit(1754013402.841:192): avc:  denied  { write } for  pid=6091 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   85.612924][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'.
[   85.665936][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'.
[   85.684336][ T2340] pvrusb2: Invalid write control endpoint
[   85.690369][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   85.696594][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'.
[   85.772789][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   85.786469][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   85.797155][ T2340] pvrusb2: Device being rendered inoperable
[   85.806257][ T6110] netlink: 224 bytes leftover after parsing attributes in process `syz.1.40'.
[   85.814075][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   85.891771][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'.
[   85.905557][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   85.932671][   T30] audit: type=1400 audit(1754013403.591:193): avc:  denied  { setopt } for  pid=6107 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   85.966383][ T2340] pvrusb2: Attached sub-driver cx25840
[   85.976009][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   85.989710][ T6097] delete_channel: no stack
[   85.997399][   T30] audit: type=1400 audit(1754013403.601:194): avc:  denied  { bind } for  pid=6107 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.023834][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   86.027277][ T6106] netlink: 'syz.1.40': attribute type 4 has an invalid length.
[   86.094418][   T30] audit: type=1400 audit(1754013403.601:195): avc:  denied  { name_bind } for  pid=6107 comm="syz.4.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   86.115983][    C0] vkms_vblank_simulate: vblank timer overrun
[   86.216608][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.176799][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.44'.
[   87.380382][    T9] cfg80211: failed to load regulatory.db
[   87.727084][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'.
[   87.755909][ T6128] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   87.965769][ T6122] mkiss: ax0: crc mode is auto.
[   88.034258][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'.
[   89.064414][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   89.064431][   T30] audit: type=1400 audit(1754013406.731:203): avc:  denied  { read } for  pid=6138 comm="syz.2.50" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.129738][   T30] audit: type=1400 audit(1754013406.781:204): avc:  denied  { ioctl } for  pid=6138 comm="syz.2.50" path="socket:[8090]" dev="sockfs" ino=8090 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   89.164943][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   89.475821][ T6136] mkiss: ax0: crc mode is auto.
[   89.680488][ T2985] Bluetooth: hci5: Frame reassembly failed (-84)
[   89.808158][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.53'.
[   90.076088][   T36] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[   90.109061][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'.
[   90.769806][   T30] audit: type=1400 audit(1754013408.431:205): avc:  denied  { setopt } for  pid=6165 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   90.805047][ T6150] Falling back ldisc for ptm2.
[   91.092654][   T30] audit: type=1400 audit(1754013408.431:206): avc:  denied  { connect } for  pid=6165 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   91.101444][ T6157] Falling back ldisc for ptm1.
[   91.204086][   T30] audit: type=1400 audit(1754013408.681:207): avc:  denied  { setopt } for  pid=6165 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   91.232282][   T30] audit: type=1400 audit(1754013408.851:208): avc:  denied  { read write } for  pid=6165 comm="syz.1.56" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   91.333348][   T30] audit: type=1400 audit(1754013408.851:209): avc:  denied  { open } for  pid=6165 comm="syz.1.56" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   91.465681][   T30] audit: type=1400 audit(1754013409.131:210): avc:  denied  { write } for  pid=6177 comm="syz.3.59" name="icmp" dev="proc" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   91.566627][   T30] audit: type=1400 audit(1754013409.221:211): avc:  denied  { write } for  pid=6177 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   91.610481][   T30] audit: type=1400 audit(1754013409.221:212): avc:  denied  { connect } for  pid=6177 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   91.692247][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   92.105341][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.328486][    T9] usb 2-1: Using ep0 maxpacket: 32
[   92.352680][ T6191] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   92.361148][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[   92.370053][    T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   92.389891][    T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[   92.411506][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.466955][    T9] usb 2-1: Product: syz
[   92.471150][    T9] usb 2-1: Manufacturer: syz
[   93.505788][    T9] usb 2-1: SerialNumber: syz
[   93.720407][    T9] usb 2-1: Cannot retrieve CPort count: 0
[   93.732230][    T9] usb 2-1: Cannot retrieve CPort count: -5
[   93.738301][    T9] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -5
[   93.929690][    T9] usb 2-1: USB disconnect, device number 2
[   94.231179][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   94.231195][   T30] audit: type=1400 audit(1754013411.891:218): avc:  denied  { read write } for  pid=6206 comm="syz.4.66" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   94.263278][ T6207] FAULT_INJECTION: forcing a failure.
[   94.263278][ T6207] name failslab, interval 1, probability 0, space 0, times 1
[   94.277220][ T6207] CPU: 1 UID: 0 PID: 6207 Comm: syz.4.66 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[   94.277250][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   94.277259][ T6207] Call Trace:
[   94.277265][ T6207]  <TASK>
[   94.277272][ T6207]  dump_stack_lvl+0x16c/0x1f0
[   94.277305][ T6207]  should_fail_ex+0x512/0x640
[   94.277329][ T6207]  ? fs_reclaim_acquire+0xae/0x150
[   94.277357][ T6207]  ? tomoyo_encode2+0x100/0x3e0
[   94.277376][ T6207]  should_failslab+0xc2/0x120
[   94.277398][ T6207]  __kmalloc_noprof+0xd2/0x510
[   94.277415][ T6207]  ? d_absolute_path+0x136/0x1a0
[   94.277442][ T6207]  tomoyo_encode2+0x100/0x3e0
[   94.277464][ T6207]  tomoyo_encode+0x29/0x50
[   94.277482][ T6207]  tomoyo_realpath_from_path+0x18f/0x6e0
[   94.277509][ T6207]  tomoyo_path_number_perm+0x245/0x580
[   94.277535][ T6207]  ? tomoyo_path_number_perm+0x237/0x580
[   94.277563][ T6207]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   94.277598][ T6207]  ? find_held_lock+0x2b/0x80
[   94.277641][ T6207]  ? find_held_lock+0x2b/0x80
[   94.277660][ T6207]  ? hook_file_ioctl_common+0x145/0x410
[   94.277689][ T6207]  ? __fget_files+0x20e/0x3c0
[   94.277712][ T6207]  security_file_ioctl+0x9b/0x240
[   94.277732][ T6207]  __x64_sys_ioctl+0xb7/0x210
[   94.277760][ T6207]  do_syscall_64+0xcd/0x4c0
[   94.277778][ T6207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.277796][ T6207] RIP: 0033:0x7efdd078eb69
[   94.277811][ T6207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.277826][ T6207] RSP: 002b:00007efdd1690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   94.277844][ T6207] RAX: ffffffffffffffda RBX: 00007efdd09b5fa0 RCX: 00007efdd078eb69
[   94.277855][ T6207] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004
[   94.277866][ T6207] RBP: 00007efdd1690090 R08: 0000000000000000 R09: 0000000000000000
[   94.277876][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.277886][ T6207] R13: 0000000000000000 R14: 00007efdd09b5fa0 R15: 00007ffeb98b83e8
[   94.277909][ T6207]  </TASK>
[   94.511046][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.527218][ T6207] ERROR: Out of memory at tomoyo_realpath_from_path.
[   94.528116][   T30] audit: type=1400 audit(1754013411.891:219): avc:  denied  { open } for  pid=6206 comm="syz.4.66" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   94.732385][   T10] usb 4-1: Using ep0 maxpacket: 8
[   94.780716][   T10] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.814386][   T10] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 150, changing to 11
[   94.896302][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[   94.972554][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40
[   94.992440][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.002237][   T10] usb 4-1: Product: syz
[   95.015376][   T10] usb 4-1: Manufacturer: syz
[   95.020489][   T10] usb 4-1: SerialNumber: syz
[   95.102415][ T2058] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.362787][ T6221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   95.369512][ T6221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   95.377814][ T6221] vhci_hcd vhci_hcd.0: Device attached
[   95.494606][ T6222] vhci_hcd: connection closed
[   95.575261][ T2985] vhci_hcd: stop threads
[   95.653370][ T5895] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[   95.744980][ T2985] vhci_hcd: release socket
[   95.848775][ T2985] vhci_hcd: disconnect device
[   95.934326][ T2058] usb 3-1: Using ep0 maxpacket: 16
[   96.397361][ T2058] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   96.412250][ T2058] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   96.428046][ T2058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.446877][ T2058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.456772][ T2058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.464954][ T2058] usb 3-1: Product: syz
[   96.469264][ T2058] usb 3-1: Manufacturer: syz
[   96.474271][ T2058] usb 3-1: SerialNumber: syz
[   97.740199][ T2058] usb 3-1: 0:2 : does not exist
[   97.888369][ T2058] usb 3-1: USB disconnect, device number 3
[   98.342271][   T10] usbhid 4-1:1.0: can't add hid device: -71
[   98.342374][   T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[   98.382266][   T10] usb 4-1: USB disconnect, device number 2
[   98.436073][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.440767][   T30] audit: type=1400 audit(1754013416.091:220): avc:  denied  { read write } for  pid=6243 comm="syz.2.75" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.440829][   T30] audit: type=1400 audit(1754013416.101:221): avc:  denied  { open } for  pid=6243 comm="syz.2.75" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   98.474257][   T30] audit: type=1400 audit(1754013416.131:222): avc:  denied  { mounton } for  pid=6241 comm="syz.0.74" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   98.682842][ T6249] binder: 6243:6249 ioctl 4018620d 0 returned -22
[   98.747260][   T30] audit: type=1400 audit(1754013416.351:223): avc:  denied  { ioctl } for  pid=6243 comm="syz.2.75" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   99.123116][   T30] audit: type=1400 audit(1754013416.781:224): avc:  denied  { execute } for  pid=6248 comm="syz.3.77" name="file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.178870][   T30] audit: type=1400 audit(1754013416.831:225): avc:  denied  { execute_no_trans } for  pid=6248 comm="syz.3.77" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   99.181115][   T30] audit: type=1400 audit(1754013416.841:226): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   99.211444][ T6256] netlink: 'syz.2.78': attribute type 10 has an invalid length.
[   99.217892][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.220075][ T6256] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   99.426836][   T30] audit: type=1400 audit(1754013417.091:227): avc:  denied  { accept } for  pid=6258 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  100.833929][ T6284] __nla_validate_parse: 2 callbacks suppressed
[  100.833951][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'.
[  100.849355][ T5895] vhci_hcd: vhci_device speed not set
[  100.906013][   T30] audit: type=1400 audit(1754013418.571:228): avc:  denied  { create } for  pid=6286 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  101.008169][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'.
[  101.060631][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'.
[  101.075508][   T30] audit: type=1400 audit(1754013418.741:229): avc:  denied  { connect } for  pid=6289 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.110639][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'.
[  101.177691][   T30] audit: type=1400 audit(1754013418.741:230): avc:  denied  { bind } for  pid=6289 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.203280][ T6288] netlink: 'syz.2.84': attribute type 4 has an invalid length.
[  101.388632][   T30] audit: type=1400 audit(1754013419.051:231): avc:  denied  { read append } for  pid=6291 comm="syz.1.87" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  101.772304][   T30] audit: type=1400 audit(1754013419.051:232): avc:  denied  { view } for  pid=6296 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  101.848017][   T30] audit: type=1400 audit(1754013419.091:233): avc:  denied  { open } for  pid=6291 comm="syz.1.87" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  102.268723][   T30] audit: type=1400 audit(1754013419.891:234): avc:  denied  { unlink } for  pid=6299 comm="syz.4.90" name="#1" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.510376][   T30] audit: type=1400 audit(1754013419.901:235): avc:  denied  { mount } for  pid=6299 comm="syz.4.90" name="/" dev="overlay" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  103.518661][   T30] audit: type=1400 audit(1754013420.511:236): avc:  denied  { setopt } for  pid=6307 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  103.831069][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'.
[  103.866073][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'.
[  103.888715][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[  103.949970][ T6319] mkiss: ax0: crc mode is auto.
[  104.054954][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'.
[  104.235001][ T6329] /dev/nullb0: Can't open blockdev
[  105.179879][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  105.180916][   T30] audit: type=1400 audit(1754013422.761:253): avc:  denied  { name_connect } for  pid=6334 comm="syz.1.102" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  105.824948][   T30] audit: type=1400 audit(1754013422.811:254): avc:  denied  { append } for  pid=6340 comm="syz.2.105" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  105.908711][   T30] audit: type=1400 audit(1754013423.151:255): avc:  denied  { connect } for  pid=6340 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  106.085795][   T30] audit: type=1400 audit(1754013423.401:256): avc:  denied  { read } for  pid=6334 comm="syz.1.102" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  106.286908][   T30] audit: type=1400 audit(1754013423.401:257): avc:  denied  { ioctl } for  pid=6334 comm="syz.1.102" path="/dev/sg0" dev="devtmpfs" ino=779 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  106.542888][   T30] audit: type=1400 audit(1754013423.491:258): avc:  denied  { read write } for  pid=6356 comm="syz.3.106" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  106.573706][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'.
[  106.601927][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'.
[  106.642816][   T30] audit: type=1400 audit(1754013423.491:259): avc:  denied  { open } for  pid=6356 comm="syz.3.106" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  106.711866][ T6368] mkiss: ax0: crc mode is auto.
[  106.954682][   T30] audit: type=1400 audit(1754013423.511:260): avc:  denied  { ioctl } for  pid=6356 comm="syz.3.106" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  107.154986][   T30] audit: type=1400 audit(1754013423.601:261): avc:  denied  { create } for  pid=6358 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  107.236635][   T30] audit: type=1326 audit(1754013423.941:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd078eb69 code=0x7ffc0000
[  107.435179][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  108.123868][ T5823] usb 4-1: config 0 has an invalid interface number: 98 but max is 0
[  108.142302][ T5823] usb 4-1: config 0 has no interface number 0
[  108.170339][ T5823] usb 4-1: config 0 interface 98 has no altsetting 0
[  108.185219][ T5823] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  108.199767][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.292424][ T5823] usb 4-1: Product: syz
[  108.296663][ T5823] usb 4-1: Manufacturer: syz
[  108.302712][ T5823] usb 4-1: SerialNumber: syz
[  108.316077][ T5823] usb 4-1: config 0 descriptor??
[  108.610133][ T5823] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  108.719901][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'.
[  108.729488][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.742889][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.832842][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.849015][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.123180][ T5823] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
[  109.372535][ T2058] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  109.532309][ T2058] usb 3-1: Using ep0 maxpacket: 16
[  109.552402][ T2058] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  109.577591][ T6401] netlink: 'syz.1.120': attribute type 64 has an invalid length.
[  109.585655][ T6401] netlink: 'syz.1.120': attribute type 4 has an invalid length.
[  109.593648][ T6401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.120'.
[  109.616372][ T2058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.179602][ T2058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.362644][ T2058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.447192][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  110.447210][   T30] audit: type=1400 audit(1754013428.111:294): avc:  denied  { read append } for  pid=6403 comm="syz.1.121" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.495813][ T5823] usb 4-1: can't restore configuration #0 (error=-71)
[  110.500682][ T2058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.520525][ T5823] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[  110.633307][ T2058] usb 3-1: Product: syz
[  110.638068][ T2058] usb 3-1: Manufacturer: syz
[  110.647671][ T2058] usb 3-1: SerialNumber: syz
[  110.656625][ T5823] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  110.658551][   T30] audit: type=1400 audit(1754013428.111:295): avc:  denied  { open } for  pid=6403 comm="syz.1.121" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.690805][ T5895] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  110.744326][ T5823] usb 4-1: USB disconnect, device number 3
[  110.885979][ T5895] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  110.885988][   T30] audit: type=1400 audit(1754013428.551:296): avc:  denied  { firmware_load } for  pid=5895 comm="kworker/0:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  110.914609][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.995608][   T30] audit: type=1400 audit(1754013428.661:297): avc:  denied  { write } for  pid=6410 comm="syz.3.124" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  111.049721][ T5895] ------------[ cut here ]------------
[  111.055665][ T5895] WARNING: CPU: 0 PID: 5895 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80
[  111.065509][ T5895] Modules linked in:
[  111.069879][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  111.082391][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.092555][ T5895] Workqueue: events request_firmware_work_func
[  111.098813][ T5895] RIP: 0010:kernfs_get.part.0+0x6e/0x80
[  111.104454][ T5895] Code: f8 97 5b ff 85 ed 74 1c e8 af 9c 5b ff be 04 00 00 00 48 89 df e8 12 a4 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 93 9c 5b ff 90 <0f> 0b 90 eb d9 48 89 df e8 f5 9b c1 ff eb c0 0f 1f 00 90 90 90 90
[  111.124293][ T5895] RSP: 0018:ffffc900049bf790 EFLAGS: 00010293
[  111.130378][ T5895] RAX: 0000000000000000 RBX: ffff88805ea211e0 RCX: ffffffff825fe688
[  111.138571][ T5895] RDX: ffff8880545e2440 RSI: ffffffff825fe6ad RDI: 0000000000000005
[  111.146723][ T5895] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  111.154919][ T5895] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888029f490b0
[  111.163617][ T5895] R13: ffff88805ba0f9b0 R14: 0000000000000000 R15: ffff88805ba0f9a8
[  111.172495][ T5895] FS:  0000000000000000(0000) GS:ffff888124719000(0000) knlGS:0000000000000000
[  111.182206][ T5895] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.188817][ T5895] CR2: 00007fd10ace56c0 CR3: 0000000078666000 CR4: 00000000003526f0
[  111.198230][ T5895] Call Trace:
[  111.201528][ T5895]  <TASK>
[  111.204894][ T5895]  kernfs_get+0x1f/0x30
[  111.209066][ T5895]  kobject_add_internal+0x353/0x9b0
[  111.214720][ T5895]  kobject_add+0x16e/0x240
[  111.216445][ T2058] usb 3-1: 0:2 : does not exist
[  111.219188][ T5895]  ? __pfx_kobject_add+0x10/0x10
[  111.219316][ T5895]  get_device_parent+0x399/0x4e0
[  111.234772][ T5895]  device_add+0x1ad/0x1a70
[  111.239231][ T5895]  ? __pfx_device_add+0x10/0x10
[  111.244465][ T5895]  ? __init_waitqueue_head+0xca/0x150
[  111.250078][ T5895]  firmware_fallback_sysfs+0x2ec/0xbe0
[  111.255821][ T5895]  _request_firmware+0xfe9/0x1470
[  111.260870][ T5895]  ? __pfx__request_firmware+0x10/0x10
[  111.266627][ T5895]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  111.273473][ T5895]  ? debug_object_deactivate+0x1ec/0x3a0
[  111.279168][ T5895]  request_firmware_work_func+0xea/0x250
[  111.285717][ T5895]  ? __pfx_request_firmware_work_func+0x10/0x10
[  111.292015][ T5895]  ? rcu_is_watching+0x12/0xc0
[  111.297733][ T5895]  process_one_work+0x9cf/0x1b70
[  111.303114][ T5895]  ? __pfx_process_one_work+0x10/0x10
[  111.308524][ T5895]  ? assign_work+0x1a0/0x250
[  111.313267][ T5895]  worker_thread+0x6c8/0xf10
[  111.317928][ T5895]  ? __kthread_parkme+0x19e/0x250
[  111.323031][ T5895]  ? __pfx_worker_thread+0x10/0x10
[  111.328181][ T5895]  kthread+0x3c5/0x780
[  111.332411][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.337126][ T5895]  ? rcu_is_watching+0x12/0xc0
[  111.341935][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.346624][ T5895]  ret_from_fork+0x5d4/0x6f0
[  111.351280][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.355962][ T5895]  ret_from_fork_asm+0x1a/0x30
[  111.360756][ T5895]  </TASK>
[  111.363826][ T5895] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  111.371111][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) 
[  111.382845][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.392921][ T5895] Workqueue: events request_firmware_work_func
[  111.399078][ T5895] Call Trace:
[  111.402338][ T5895]  <TASK>
[  111.405250][ T5895]  dump_stack_lvl+0x3d/0x1f0
[  111.409850][ T5895]  vpanic+0x6a3/0x780
[  111.413824][ T5895]  ? __pfx_vpanic+0x10/0x10
[  111.418324][ T5895]  ? kernfs_get.part.0+0x6e/0x80
[  111.423254][ T5895]  panic+0xca/0xd0
[  111.426964][ T5895]  ? __pfx_panic+0x10/0x10
[  111.431380][ T5895]  ? check_panic_on_warn+0x1f/0xb0
[  111.436487][ T5895]  check_panic_on_warn+0xab/0xb0
[  111.441415][ T5895]  __warn+0xf6/0x3c0
[  111.445307][ T5895]  ? kernfs_get.part.0+0x6e/0x80
[  111.450238][ T5895]  report_bug+0x3c3/0x580
[  111.454569][ T5895]  ? kernfs_get.part.0+0x6e/0x80
[  111.459507][ T5895]  handle_bug+0x184/0x210
[  111.463857][ T5895]  exc_invalid_op+0x17/0x50
[  111.468350][ T5895]  asm_exc_invalid_op+0x1a/0x20
[  111.473204][ T5895] RIP: 0010:kernfs_get.part.0+0x6e/0x80
[  111.478739][ T5895] Code: f8 97 5b ff 85 ed 74 1c e8 af 9c 5b ff be 04 00 00 00 48 89 df e8 12 a4 c1 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 93 9c 5b ff 90 <0f> 0b 90 eb d9 48 89 df e8 f5 9b c1 ff eb c0 0f 1f 00 90 90 90 90
[  111.498341][ T5895] RSP: 0018:ffffc900049bf790 EFLAGS: 00010293
[  111.504404][ T5895] RAX: 0000000000000000 RBX: ffff88805ea211e0 RCX: ffffffff825fe688
[  111.512364][ T5895] RDX: ffff8880545e2440 RSI: ffffffff825fe6ad RDI: 0000000000000005
[  111.520318][ T5895] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  111.528269][ T5895] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888029f490b0
[  111.536225][ T5895] R13: ffff88805ba0f9b0 R14: 0000000000000000 R15: ffff88805ba0f9a8
[  111.544192][ T5895]  ? kernfs_get.part.0+0x48/0x80
[  111.549122][ T5895]  ? kernfs_get.part.0+0x6d/0x80
[  111.554048][ T5895]  kernfs_get+0x1f/0x30
[  111.558189][ T5895]  kobject_add_internal+0x353/0x9b0
[  111.563379][ T5895]  kobject_add+0x16e/0x240
[  111.567781][ T5895]  ? __pfx_kobject_add+0x10/0x10
[  111.572714][ T5895]  get_device_parent+0x399/0x4e0
[  111.577648][ T5895]  device_add+0x1ad/0x1a70
[  111.582088][ T5895]  ? __pfx_device_add+0x10/0x10
[  111.586932][ T5895]  ? __init_waitqueue_head+0xca/0x150
[  111.592303][ T5895]  firmware_fallback_sysfs+0x2ec/0xbe0
[  111.597763][ T5895]  _request_firmware+0xfe9/0x1470
[  111.602777][ T5895]  ? __pfx__request_firmware+0x10/0x10
[  111.608218][ T5895]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  111.614012][ T5895]  ? debug_object_deactivate+0x1ec/0x3a0
[  111.619632][ T5895]  request_firmware_work_func+0xea/0x250
[  111.625249][ T5895]  ? __pfx_request_firmware_work_func+0x10/0x10
[  111.631474][ T5895]  ? rcu_is_watching+0x12/0xc0
[  111.636230][ T5895]  process_one_work+0x9cf/0x1b70
[  111.641181][ T5895]  ? __pfx_process_one_work+0x10/0x10
[  111.646543][ T5895]  ? assign_work+0x1a0/0x250
[  111.651123][ T5895]  worker_thread+0x6c8/0xf10
[  111.655704][ T5895]  ? __kthread_parkme+0x19e/0x250
[  111.660719][ T5895]  ? __pfx_worker_thread+0x10/0x10
[  111.665817][ T5895]  kthread+0x3c5/0x780
[  111.669868][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.674438][ T5895]  ? rcu_is_watching+0x12/0xc0
[  111.679193][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.683770][ T5895]  ret_from_fork+0x5d4/0x6f0
[  111.688342][ T5895]  ? __pfx_kthread+0x10/0x10
[  111.692917][ T5895]  ret_from_fork_asm+0x1a/0x30
[  111.697695][ T5895]  </TASK>
[  111.700963][ T5895] Kernel Offset: disabled
[  111.705267][ T5895] Rebooting in 86400 seconds..