last executing test programs:

16m42.960636567s ago: executing program 4 (id=660):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0xb962)

16m42.492795861s ago: executing program 4 (id=663):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
r2 = dup3(r1, r0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$unix(0x1, 0x5, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800000700", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}}, 0x0)

16m42.291098103s ago: executing program 4 (id=665):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
getgroups(0x5, &(0x7f0000000380)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
socket$inet(0x2, 0x3, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{0xff}, {0x0, 0x4}, {0x0, 0x0, 0x10}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xd7}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {0xad}, {}, {0x2}, {0x5, 0x0, 0xfe}, {0x0, 0xfe}, {0x20, 0x0, 0x0, '\x00', 0x2}, {}, {0x0, 0x0, 0x5}, {}, {0x7f}, {0x0, 0xfd}]}})

16m39.069146118s ago: executing program 4 (id=673):
mkdir(&(0x7f0000000380)='./file1\x00', 0xf)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

16m38.826344431s ago: executing program 4 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

16m38.539483244s ago: executing program 4 (id=677):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x8, 0x6, 0x0, 0x2, 0xfffd, 0x6, 0x1, 0x5})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x5000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1)

16m37.983349928s ago: executing program 32 (id=677):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x8, 0x6, 0x0, 0x2, 0xfffd, 0x6, 0x1, 0x5})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x5000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1)

16m16.210292613s ago: executing program 2 (id=728):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4)
sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10)

16m15.932427713s ago: executing program 2 (id=729):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
add_key(&(0x7f0000000d00)='ceph\x00', 0x0, &(0x7f0000000d40)="63010ea7b8d27c073f000000", 0xc, 0xfffffffffffffffe)
ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000100)={0x2, 0x0, [{0x40000001, 0x6, 0x4, 0x80, 0x8, 0xdda2}, {0x80000001, 0x40, 0x7, 0x7, 0x401, 0xc, 0x9}]})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0)
r8 = msgget$private(0x0, 0x0)
msgrcv(r8, 0x0, 0x0, 0x1, 0x0)
msgrcv(r8, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000)
msgsnd(r8, &(0x7f0000000000)={0x3}, 0x8, 0x800)
dup(0xffffffffffffffff)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
socketpair(0xb, 0x80000, 0xff, &(0x7f00000001c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

16m13.083576433s ago: executing program 2 (id=734):
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)

16m12.006806339s ago: executing program 2 (id=737):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x12, 0x1, 0xfffffffffffffffe}, {0x10000, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0)
sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x80}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

16m11.583362279s ago: executing program 2 (id=740):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = dup(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

16m11.327819795s ago: executing program 2 (id=742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x10000000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

15m55.603092416s ago: executing program 33 (id=742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x10000000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

16.783077891s ago: executing program 3 (id=2950):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r10=>0x0)
io_submit(r10, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)

13.285248059s ago: executing program 0 (id=2959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2000, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40ad12", 0x1b}], 0x1)

12.368310708s ago: executing program 0 (id=2960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[<r5=>0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4})
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x86fc, 0x2, 0x8000, 0x400252}, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0xffffffff, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x8798, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d92", 0x5}], 0x1)
pipe(&(0x7f00000007c0))

12.164278107s ago: executing program 1 (id=2961):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(0x0, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)

11.34159161s ago: executing program 0 (id=2963):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010102, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xffdffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0xc, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x400000, 0x1f, 0xfffffffffffffffe}, {0x3, 0xfffffffc, 0x2}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

10.473802755s ago: executing program 5 (id=2965):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
io_setup(0x3ff, &(0x7f0000000500)=<r8=>0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)

9.963731218s ago: executing program 3 (id=2966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0xa, 0x801, 0x84)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x4, &(0x7f0000000040), 0x44)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r4, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="55b32bbd7000fedbdf25100000005637dbb9581e86c6baa2105f0f4415169d"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800)
mkdir(&(0x7f0000000080)='./file0\x00', 0x13c)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c9071200f4c20102030109021200f9ff0000cb842f00"], 0x0)

9.76524733s ago: executing program 0 (id=2967):
fsopen(&(0x7f0000000040)='zonefs\x00', 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fed", 0x6b}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
socket(0x15, 0x5, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)

9.135748052s ago: executing program 1 (id=2968):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000ff47141fcd46b68ba6a5d953ee1100000000006c80d35a23ad00ffffffff950000000000000022dd8f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mkdir(0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r7, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)

8.120117562s ago: executing program 1 (id=2969):
fsopen(&(0x7f0000000040)='zonefs\x00', 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fed", 0x6b}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2715, 0x0, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)

8.087740689s ago: executing program 6 (id=2970):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00'})
io_setup(0x10000, &(0x7f0000000800))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000076, 0x20000014)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
io_setup(0x4001, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7.722367535s ago: executing program 5 (id=2971):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x8b2c, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x41, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1001f0)
r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0xffffffa6, 0x0, 0x0)
io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383})
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r9 = dup3(r7, r8, 0x0)
ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180))
close_range(r6, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r11, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041)

6.864492792s ago: executing program 0 (id=2972):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00'})
io_setup(0x10000, &(0x7f0000000800))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000076, 0x20000014)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_setup(0x4001, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
io_setup(0x9, &(0x7f0000002e40))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000b29000/0x1000)=nil, 0x1000, 0x7, 0x0)
socket$kcm(0x2, 0xa, 0x2)

6.197483557s ago: executing program 6 (id=2973):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r1, 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
lseek(r7, 0x98b, 0x2)
getdents64(r7, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

6.165072519s ago: executing program 3 (id=2974):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[<r5=>0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4})
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x86fc, 0x2, 0x8000, 0x400252}, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0xffffffff, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x8798, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d92", 0x5}], 0x1)
pipe(&(0x7f00000007c0))

6.063354831s ago: executing program 5 (id=2975):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00')
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x2, "fa02c80a3a1e38dd031dd7504fe580963900"})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
syz_emit_ethernet(0xa2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
munlockall()
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000400)={0x2, "5660359c3245d1c42b17afad7d48ed5100000000000000010000000000000008"})
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108)

4.987545235s ago: executing program 3 (id=2976):
fsopen(&(0x7f0000000040)='zonefs\x00', 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fed", 0x6b}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2715, 0x0, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)

4.753226695s ago: executing program 1 (id=2977):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)}}], 0x1, 0x810)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010102, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xffdffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0xc, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x400000, 0x1f, 0xfffffffffffffffe}, {0x3, 0xfffffffc, 0x2}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

3.854588598s ago: executing program 5 (id=2978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000ff47141fcd46b68ba6a5d953ee1100000000006c80d35a23ad00ffffffff950000000000000022dd8f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mkdir(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r7, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f0000001a40)=@rc={0x1f, @fixed}, 0x80, 0x0}, 0xffffff80}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)

3.852776596s ago: executing program 6 (id=2979):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r1, 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
lseek(r7, 0x98b, 0x2)
getdents64(r7, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.624944683s ago: executing program 1 (id=2980):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r9=>0x0)
read$FUSE(r7, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0)

2.725841009s ago: executing program 5 (id=2981):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2000, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40ad12", 0x1b}], 0x1)

1.958423015s ago: executing program 0 (id=2982):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f000040b000/0x1000)=nil, 0x1000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(0x0, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}])
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)

1.809098887s ago: executing program 5 (id=2983):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00')
mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x8000, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000058, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x4048010)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0201"], 0xf)
r4 = socket(0x10, 0x2, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000140), &(0x7f0000001640)=0x4)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x84)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r7, 0x7}}, 0x48)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0})

1.658295254s ago: executing program 3 (id=2984):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00'})
io_setup(0x10000, &(0x7f0000000800))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000076, 0x20000014)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
io_setup(0x4001, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.291755575s ago: executing program 6 (id=2985):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil)
syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac"], 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}})
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"})
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1})
socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r5, 0xffffffffffffffff, 0x0)

984.60936ms ago: executing program 6 (id=2986):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x1}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0xc, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x400000, 0x1f, 0xfffffffffffffffe}, {0x3, 0xfffffffc, 0x2}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mknod(0x0, 0x6000, 0x77b)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

187.264961ms ago: executing program 1 (id=2987):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00')
mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x8000, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000058, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x4048010)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0201"], 0xf)
r4 = socket(0x10, 0x2, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000140), &(0x7f0000001640)=0x4)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x84)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r7, 0x7}}, 0x48)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0})

1.321124ms ago: executing program 3 (id=2988):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r3, &(0x7f0000000340), 0x8)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000000000000000000000400000000"], 0x24, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
creat(0x0, 0x248)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0xfae76000)
r4 = socket(0x5, 0x1, 0xf9d5)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0)

0s ago: executing program 6 (id=2989):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2000, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18)
syz_usb_connect(0x6, 0x24, &(0x7f0000000d80)=ANY=[@ANYRES8=r6, @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES32=r7], 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40ad12", 0x1b}], 0x1)

kernel console output (not intermixed with test programs):

tooth: hci1: Opcode 0x0c1a failed: -4
[  807.814310][T13806] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  808.168853][   T30] audit: type=1326 audit(1766661151.119:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.411544][   T30] audit: type=1326 audit(1766661151.119:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.437241][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  808.437598][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  808.437681][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  808.530343][   T30] audit: type=1326 audit(1766661151.119:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.655340][   T30] audit: type=1326 audit(1766661151.119:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.678812][    C1] vkms_vblank_simulate: vblank timer overrun
[  808.789214][   T30] audit: type=1326 audit(1766661151.119:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.812681][    C1] vkms_vblank_simulate: vblank timer overrun
[  808.843093][T13827] [U] 
[  808.929305][   T30] audit: type=1326 audit(1766661151.119:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  808.991404][   T30] audit: type=1326 audit(1766661151.119:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  809.065151][T12879] Bluetooth: hci2: command 0x0401 tx timeout
[  809.096907][   T30] audit: type=1326 audit(1766661151.119:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  809.129088][   T30] audit: type=1326 audit(1766661151.119:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  809.153281][   T30] audit: type=1326 audit(1766661151.119:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  809.176744][    C1] vkms_vblank_simulate: vblank timer overrun
[  809.209099][T13838] mkiss: ax0: crc mode is auto.
[  810.170991][ T5138] Bluetooth: hci1: command 0x0406 tx timeout
[  810.171007][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  810.183137][T12879] Bluetooth: hci5: command 0x0406 tx timeout
[  811.127463][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1891'.
[  812.049058][T13863] [U] 
[  812.117558][T13864] mkiss: ax0: crc mode is auto.
[  813.687642][T13879] mkiss: ax0: crc mode is auto.
[  814.363924][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  814.363936][   T30] audit: type=1326 audit(1766661157.299:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13891 comm="syz.0.1899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x0
[  814.531447][   T30] audit: type=1326 audit(1766661157.369:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.5.1900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x0
[  814.733807][T13907] [U] 
[  815.561839][T13913] [U] 
[  815.816433][T13925] mkiss: ax0: crc mode is auto.
[  815.901854][   T30] audit: type=1326 audit(1766661158.799:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13914 comm="syz.0.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x0
[  820.833636][T13966] mkiss: ax0: crc mode is auto.
[  821.099030][T13967] [U] 
[  821.259863][   T30] audit: type=1326 audit(1766661164.209:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13976 comm="syz.3.1915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x0
[  821.299283][T13957] [U] 
[  821.477718][T13986] mkiss: ax0: crc mode is auto.
[  822.826671][T14000] [U] 
[  822.937801][T13997] [U] 
[  823.212785][T14012] mkiss: ax0: crc mode is auto.
[  823.726960][   T30] audit: type=1326 audit(1766661166.619:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.1.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x0
[  825.838165][   T30] audit: type=1326 audit(1766661168.789:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.022663][   T30] audit: type=1326 audit(1766661168.789:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.087098][T14030] [U] 
[  826.111229][   T30] audit: type=1326 audit(1766661168.789:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.272843][   T30] audit: type=1326 audit(1766661168.789:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.330801][   T30] audit: type=1326 audit(1766661168.789:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.451744][   T30] audit: type=1326 audit(1766661168.809:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  826.758436][   T30] audit: type=1326 audit(1766661168.809:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  827.245845][T14047] [U] 
[  827.584622][   T30] audit: type=1326 audit(1766661168.809:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  827.759100][T14067] team_slave_0: entered promiscuous mode
[  827.764826][T14067] team_slave_1: entered promiscuous mode
[  827.770966][T14067] macsec1: entered promiscuous mode
[  827.776256][T14067] team0: entered promiscuous mode
[  827.782836][T14067] macsec1: entered allmulticast mode
[  827.788139][T14067] team0: entered allmulticast mode
[  827.793296][T14067] team_slave_0: entered allmulticast mode
[  827.799057][T14067] team_slave_1: entered allmulticast mode
[  827.808781][T14067] team0: Device macsec1 is already an upper device of the team interface
[  828.594418][   T30] audit: type=1326 audit(1766661168.809:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  828.626673][T14067] team0: left allmulticast mode
[  828.642692][T14067] team_slave_0: left allmulticast mode
[  828.664323][T14067] team_slave_1: left allmulticast mode
[  828.678972][T14056] [U] 
[  828.683677][T14067] team0: left promiscuous mode
[  828.690359][T14067] team_slave_0: left promiscuous mode
[  828.695814][T14067] team_slave_1: left promiscuous mode
[  828.724401][   T30] audit: type=1326 audit(1766661168.809:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  828.775693][   T30] audit: type=1326 audit(1766661168.819:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  828.877663][   T30] audit: type=1326 audit(1766661168.819:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  829.102765][   T30] audit: type=1326 audit(1766661168.819:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  829.239887][T14074] [U] 
[  829.402891][T14090] [U] 
[  834.142687][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  834.142719][   T30] audit: type=1326 audit(1766661177.009:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  834.558546][   T30] audit: type=1326 audit(1766661177.009:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  834.707516][T14138] [U] 
[  834.751936][   T30] audit: type=1326 audit(1766661177.019:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  834.863037][   T30] audit: type=1326 audit(1766661177.019:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  834.908192][   T30] audit: type=1326 audit(1766661177.019:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  834.993265][   T30] audit: type=1326 audit(1766661177.019:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  835.095469][   T30] audit: type=1326 audit(1766661177.019:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  835.259436][   T30] audit: type=1326 audit(1766661177.029:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  835.347133][   T30] audit: type=1326 audit(1766661177.029:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  835.459983][   T30] audit: type=1326 audit(1766661177.029:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.6.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  835.497270][T14149] mkiss: ax0: crc mode is auto.
[  839.415805][T14213] mkiss: ax0: crc mode is auto.
[  840.705820][T14230] mkiss: ax0: crc mode is auto.
[  840.948401][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  840.948416][   T30] audit: type=1326 audit(1766661183.899:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.5.1967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x0
[  844.514262][ T5900] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  844.686755][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  844.743399][ T5900] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  844.751570][ T5900] usb 4-1: config 0 has no interface number 0
[  844.774947][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  844.792479][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.802578][ T5900] usb 4-1: Product: syz
[  844.823560][ T5900] usb 4-1: Manufacturer: syz
[  844.828156][ T5900] usb 4-1: SerialNumber: syz
[  844.858723][ T5900] usb 4-1: config 0 descriptor??
[  844.883264][ T5900] hub 4-1:0.132: bad descriptor, ignoring hub
[  844.894967][ T5900] hub 4-1:0.132: probe with driver hub failed with error -5
[  844.934662][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input66
[  845.481536][T14287] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1979'.
[  845.503318][T14287] ./file0: Can't open blockdev
[  845.681645][T14291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1980'.
[  845.695467][T14291] ./file0: Can't open blockdev
[  846.063127][T14294] batadv_slave_1: entered promiscuous mode
[  847.363493][T14280] batadv_slave_1: left promiscuous mode
[  847.533099][   T42] usb 4-1: USB disconnect, device number 32
[  847.677288][T14317] mkiss: ax0: crc mode is auto.
[  848.230174][T14320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1985'.
[  848.252032][T14320] ./file0: Can't open blockdev
[  849.872390][T14339] mkiss: ax0: crc mode is auto.
[  850.565137][T14361] [U] 
[  851.508238][T14376] [U] 
[  852.129115][   T30] audit: type=1326 audit(1766661195.079:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.6.1997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x0
[  852.361664][   T30] audit: type=1326 audit(1766661195.309:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.1.1999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x0
[  854.260732][T14413] team_slave_0: entered promiscuous mode
[  854.266482][T14413] team_slave_1: entered promiscuous mode
[  854.272366][T14413] macsec1: entered promiscuous mode
[  854.277703][T14413] team0: entered promiscuous mode
[  854.284858][T14413] macsec1: entered allmulticast mode
[  854.307125][T14413] team0: entered allmulticast mode
[  854.312340][T14413] team_slave_0: entered allmulticast mode
[  854.318257][T14413] team_slave_1: entered allmulticast mode
[  854.328685][T14413] team0: Device macsec1 is already an upper device of the team interface
[  855.010109][T14413] team0: left allmulticast mode
[  855.022675][T14413] team_slave_0: left allmulticast mode
[  855.035387][T14413] team_slave_1: left allmulticast mode
[  855.061238][T14413] team0: left promiscuous mode
[  855.069515][T14413] team_slave_0: left promiscuous mode
[  855.074995][T14413] team_slave_1: left promiscuous mode
[  855.148974][T14412] mkiss: ax0: crc mode is auto.
[  855.683505][T14421] mkiss: ax0: crc mode is auto.
[  858.985465][T14466] mkiss: ax0: crc mode is auto.
[  861.209896][T14494] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2020'.
[  861.285376][T14494] ./file0: Can't open blockdev
[  861.832343][   T30] audit: type=1326 audit(1766661204.779:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14495 comm="syz.5.2021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x0
[  863.567220][T14522] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2026'.
[  863.646440][T14522] ./file0: Can't open blockdev
[  863.787455][T14504] [U] 
[  863.812347][T14519] mkiss: ax0: crc mode is auto.
[  864.716348][   T30] audit: type=1326 audit(1766661207.259:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  864.862645][   T30] audit: type=1326 audit(1766661207.259:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  864.980537][   T30] audit: type=1326 audit(1766661207.259:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  865.412662][   T30] audit: type=1326 audit(1766661207.259:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  865.533187][T14544] [U] 
[  865.544732][   T30] audit: type=1326 audit(1766661207.259:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  865.706127][   T30] audit: type=1326 audit(1766661207.259:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  865.729619][    C0] vkms_vblank_simulate: vblank timer overrun
[  865.902603][   T30] audit: type=1326 audit(1766661207.259:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  865.926082][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.319035][   T30] audit: type=1326 audit(1766661207.259:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  866.342545][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.365268][   T30] audit: type=1326 audit(1766661207.269:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.5.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[  866.465578][T14552] mkiss: ax0: crc mode is auto.
[  866.714971][T14559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2033'.
[  866.757902][T14558] ./file0: Can't open blockdev
[  867.803341][T14577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2038'.
[  867.855621][T14563] mkiss: ax0: crc mode is auto.
[  867.856145][T14577] ./file0: Can't open blockdev
[  868.137285][T14583] team_slave_0: entered promiscuous mode
[  868.142960][T14583] team_slave_1: entered promiscuous mode
[  868.148650][T14583] macsec1: entered promiscuous mode
[  868.153858][T14583] team0: entered promiscuous mode
[  868.159146][T14583] macsec1: entered allmulticast mode
[  868.164462][T14583] team0: entered allmulticast mode
[  868.169542][T14583] team_slave_0: entered allmulticast mode
[  868.175411][T14583] team_slave_1: entered allmulticast mode
[  868.181783][T14583] team0: Device macsec1 is already an upper device of the team interface
[  868.193132][T14583] team0: left allmulticast mode
[  868.197976][T14583] team_slave_0: left allmulticast mode
[  868.203440][T14583] team_slave_1: left allmulticast mode
[  868.208880][T14583] team0: left promiscuous mode
[  868.213916][T14583] team_slave_0: left promiscuous mode
[  868.219315][T14583] team_slave_1: left promiscuous mode
[  869.080759][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  869.080777][   T30] audit: type=1326 audit(1766661211.589:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  869.180495][   T30] audit: type=1326 audit(1766661211.599:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  869.672595][   T30] audit: type=1326 audit(1766661211.599:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  869.910487][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  869.930982][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  869.937714][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  870.143419][   T30] audit: type=1326 audit(1766661211.599:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  870.253791][   T30] audit: type=1326 audit(1766661211.599:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  870.398491][   T30] audit: type=1326 audit(1766661211.609:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  870.537209][   T30] audit: type=1326 audit(1766661211.609:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  870.582852][T14607] mkiss: ax0: crc mode is auto.
[  870.635292][   T30] audit: type=1326 audit(1766661211.609:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  870.762715][   T30] audit: type=1326 audit(1766661211.609:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  871.010012][   T30] audit: type=1326 audit(1766661211.609:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  872.690833][T14631] team_slave_0: entered promiscuous mode
[  872.696509][T14631] team_slave_1: entered promiscuous mode
[  872.702222][T14631] macsec1: entered promiscuous mode
[  872.707436][T14631] team0: entered promiscuous mode
[  872.712767][T14631] macsec1: entered allmulticast mode
[  872.718030][T14631] team0: entered allmulticast mode
[  872.723136][T14631] team_slave_0: entered allmulticast mode
[  872.728837][T14631] team_slave_1: entered allmulticast mode
[  872.735400][T14631] team0: Device macsec1 is already an upper device of the team interface
[  872.756571][T14631] team0: left allmulticast mode
[  872.761438][T14631] team_slave_0: left allmulticast mode
[  872.766950][T14631] team_slave_1: left allmulticast mode
[  872.772394][T14631] team0: left promiscuous mode
[  872.777488][T14631] team_slave_0: left promiscuous mode
[  872.782883][T14631] team_slave_1: left promiscuous mode
[  874.746481][T14651] mkiss: ax0: crc mode is auto.
[  875.039280][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'.
[  875.702315][T14665] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  875.708536][T14665] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  875.778205][T14665] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  875.797784][T14665] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  875.826135][T14677] mkiss: ax0: crc mode is auto.
[  876.367403][T14687] team_slave_0: entered promiscuous mode
[  876.373102][T14687] team_slave_1: entered promiscuous mode
[  876.380847][T14687] macsec1: entered promiscuous mode
[  876.386084][T14687] team0: entered promiscuous mode
[  876.391374][T14687] macsec1: entered allmulticast mode
[  876.396662][T14687] team0: entered allmulticast mode
[  876.401751][T14687] team_slave_0: entered allmulticast mode
[  876.407491][T14687] team_slave_1: entered allmulticast mode
[  876.414127][T14687] team0: Device macsec1 is already an upper device of the team interface
[  876.423508][T14687] team0: left allmulticast mode
[  876.428345][T14687] team_slave_0: left allmulticast mode
[  876.434456][T14687] team_slave_1: left allmulticast mode
[  876.439898][T14687] team0: left promiscuous mode
[  876.445148][T14687] team_slave_0: left promiscuous mode
[  876.450548][T14687] team_slave_1: left promiscuous mode
[  876.976799][ T5138] Bluetooth: hci2: command 0x0401 tx timeout
[  877.787053][ T5138] Bluetooth: hci4: command 0x0405 tx timeout
[  877.853647][ T5138] Bluetooth: hci5: command 0x0406 tx timeout
[  877.859715][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[  878.408432][T14699] [U] 
[  878.714093][T14714] [U] 
[  879.941299][T14734] team_slave_0: entered promiscuous mode
[  879.947011][T14734] team_slave_1: entered promiscuous mode
[  879.952943][T14734] macsec1: entered promiscuous mode
[  879.958292][T14734] team0: entered promiscuous mode
[  879.963607][T14734] macsec1: entered allmulticast mode
[  879.968870][T14734] team0: entered allmulticast mode
[  879.974003][T14734] team_slave_0: entered allmulticast mode
[  879.979697][T14734] team_slave_1: entered allmulticast mode
[  879.986332][T14734] team0: Device macsec1 is already an upper device of the team interface
[  880.035384][T14734] team0: left allmulticast mode
[  880.040285][T14734] team_slave_0: left allmulticast mode
[  880.045792][T14734] team_slave_1: left allmulticast mode
[  880.051239][T14734] team0: left promiscuous mode
[  880.056371][T14734] team_slave_0: left promiscuous mode
[  880.063246][T14734] team_slave_1: left promiscuous mode
[  880.786823][T14729] [U] 
[  883.252792][ T5870] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  883.782894][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  883.804437][ T5870] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  884.075294][ T5870] usb 4-1: config 0 has no interface number 0
[  884.138456][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  884.152269][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.199175][ T5870] usb 4-1: Product: syz
[  884.244524][ T5870] usb 4-1: Manufacturer: syz
[  884.264953][ T5870] usb 4-1: SerialNumber: syz
[  884.289395][ T5870] usb 4-1: config 0 descriptor??
[  884.316728][ T5870] hub 4-1:0.132: bad descriptor, ignoring hub
[  884.334116][ T5870] hub 4-1:0.132: probe with driver hub failed with error -5
[  884.503489][T14795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2084'.
[  884.542143][T14795] ./file0: Can't open blockdev
[  884.818403][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input67
[  884.970420][T14769] batadv_slave_1: entered promiscuous mode
[  885.003570][T14768] batadv_slave_1: left promiscuous mode
[  885.044593][ T5870] usb 4-1: USB disconnect, device number 33
[  887.113545][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  887.113582][   T30] audit: type=1326 audit(1766661228.349:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  888.492085][   T30] audit: type=1326 audit(1766661228.349:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  888.539528][   T30] audit: type=1326 audit(1766661228.389:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  888.662629][   T30] audit: type=1326 audit(1766661228.389:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  888.686215][    C1] vkms_vblank_simulate: vblank timer overrun
[  888.769768][   T30] audit: type=1326 audit(1766661228.389:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  888.808957][   T30] audit: type=1326 audit(1766661228.389:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  889.633662][   T30] audit: type=1326 audit(1766661228.389:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  889.657468][   T30] audit: type=1326 audit(1766661228.389:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  889.700700][   T30] audit: type=1326 audit(1766661228.389:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  889.724682][   T30] audit: type=1326 audit(1766661228.389:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x7ffc0000
[  889.997784][T14820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2090'.
[  890.109171][T14820] ./file0: Can't open blockdev
[  891.385427][T14845] mkiss: ax0: crc mode is auto.
[  893.674257][T14870] mkiss: ax0: crc mode is auto.
[  893.685191][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  893.685203][   T30] audit: type=1326 audit(1766661236.619:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.5.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x0
[  895.075670][T14881] [U] 
[  896.258625][T14910] mkiss: ax0: crc mode is auto.
[  898.850801][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2111'.
[  899.057453][T14927] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  899.086148][T14927] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  899.101231][T14927] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  899.107916][T14927] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  899.336578][T14941] [U] 
[  899.402782][T14323] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  899.544357][T14955] mkiss: ax0: crc mode is auto.
[  899.689972][T14323] usb 2-1: Using ep0 maxpacket: 16
[  899.714676][T14323] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  899.737100][T14323] usb 2-1: config 0 has no interface number 0
[  899.802263][T14323] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  899.830190][T14323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.867726][T14323] usb 2-1: Product: syz
[  899.883662][T14323] usb 2-1: Manufacturer: syz
[  899.913351][T14323] usb 2-1: SerialNumber: syz
[  900.004990][T14323] usb 2-1: config 0 descriptor??
[  900.103942][T14323] hub 2-1:0.132: bad descriptor, ignoring hub
[  900.110024][T14323] hub 2-1:0.132: probe with driver hub failed with error -5
[  900.215133][T14323] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input68
[  900.333514][ T5138] Bluetooth: hci2: command 0x0401 tx timeout
[  900.575284][T14938] batadv_slave_1: entered promiscuous mode
[  901.142725][ T5138] Bluetooth: hci5: command 0x0406 tx timeout
[  901.142795][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  901.154952][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[  901.233417][T14963] mkiss: ax0: crc mode is auto.
[  902.049187][T14961] batadv_slave_1: left promiscuous mode
[  902.212970][ T5870] usb 2-1: USB disconnect, device number 30
[  902.657263][T14986] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2123'.
[  902.718720][T14986] ./file0: Can't open blockdev
[  905.712809][T15020] [U] 
[  907.102266][T14994] could not allocate digest TFM handle cryptd(blake2b-160)
[  908.366674][T15031] mkiss: ax0: crc mode is auto.
[  908.374053][T15031] [U] 
[  908.791358][T15059] mkiss: ax0: crc mode is auto.
[  908.917710][T15061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2137'.
[  908.951617][T15061] ./file0: Can't open blockdev
[  910.315660][T15074] could not allocate digest TFM handle cryptd(blake2b-160)
[  910.678000][T15064] could not allocate digest TFM handle cryptd(blake2b-160)
[  911.006731][T15071] [U] 
[  911.942137][T15096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2143'.
[  911.995337][T15096] ./file0: Can't open blockdev
[  912.751930][T15102] mkiss: ax0: crc mode is auto.
[  914.342347][T15125] could not allocate digest TFM handle cryptd(blake2b-160)
[  915.377851][T15144] mkiss: ax0: crc mode is auto.
[  917.328569][T15162] could not allocate digest TFM handle cryptd(blake2b-160)
[  918.534198][   T30] audit: type=1326 audit(1766661261.489:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.585975][   T30] audit: type=1326 audit(1766661261.489:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.632200][   T30] audit: type=1326 audit(1766661261.509:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.702691][   T30] audit: type=1326 audit(1766661261.509:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.745711][   T30] audit: type=1326 audit(1766661261.509:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.770197][   T30] audit: type=1326 audit(1766661261.509:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.795439][   T30] audit: type=1326 audit(1766661261.509:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.819395][   T30] audit: type=1326 audit(1766661261.509:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.843280][   T30] audit: type=1326 audit(1766661261.509:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.867946][   T30] audit: type=1326 audit(1766661261.509:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15182 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  918.955345][T15186] [U] 
[  922.075073][T15223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2168'.
[  922.222993][T15223] ./file0: Can't open blockdev
[  923.007818][T15235] mkiss: ax0: crc mode is auto.
[  924.103031][T15236] [U] 
[  924.840608][T15238] [U] 
[  925.293379][T15254] could not allocate digest TFM handle cryptd(blake2b-160)
[  925.695433][T15273] mkiss: ax0: crc mode is auto.
[  926.628358][T15269] [U] 
[  927.210963][T15284] mkiss: ax0: crc mode is auto.
[  927.526944][T15296] could not allocate digest TFM handle cryptd(blake2b-160)
[  928.078504][T15294] mkiss: ax0: crc mode is auto.
[  928.220964][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'.
[  928.848428][T15302] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  928.854549][T15302] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  928.908149][T15302] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  928.923945][T15302] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  929.246625][T15320] mkiss: ax0: crc mode is auto.
[  930.172748][T12879] Bluetooth: hci2: command 0x0401 tx timeout
[  930.783651][T15338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2192'.
[  930.855217][T15338] ./file0: Can't open blockdev
[  930.963145][T12879] Bluetooth: hci4: command 0x0405 tx timeout
[  930.989353][T12879] Bluetooth: hci5: command 0x0406 tx timeout
[  930.996030][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  931.294454][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  931.303940][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  931.310210][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  931.516789][T15344] [U] 
[  932.033403][T15347] could not allocate digest TFM handle cryptd(blake2b-160)
[  933.199806][T15362] mkiss: ax0: crc mode is auto.
[  934.719514][T15383] syz.1.2199 (15383): drop_caches: 2
[  935.282725][T15385] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  935.334634][T15365] [U] 
[  935.348494][T15385] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  935.355056][T15391] could not allocate digest TFM handle cryptd(blake2b-160)
[  935.414246][T15385] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  935.454053][T15385] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  935.643327][T15402] mkiss: ax0: crc mode is auto.
[  936.145598][T15408] syz.0.2206 (15408): drop_caches: 2
[  936.812430][T15423] mkiss: ax0: crc mode is auto.
[  936.817443][ T5827] Bluetooth: hci2: command 0x0401 tx timeout
[  937.438439][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  937.455048][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  937.533541][ T5827] Bluetooth: hci5: command 0x0406 tx timeout
[  937.626422][T15426] could not allocate digest TFM handle cryptd(blake2b-160)
[  938.187650][T15442] syz.1.2210 (15442): drop_caches: 2
[  938.262676][ T5891] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  938.505144][ T5891] usb 6-1: Using ep0 maxpacket: 16
[  938.516602][ T5891] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  938.526793][ T5891] usb 6-1: config 0 has no interface number 0
[  938.536539][ T5891] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  938.548163][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.578587][ T5891] usb 6-1: Product: syz
[  938.597078][ T5891] usb 6-1: Manufacturer: syz
[  938.607390][ T5891] usb 6-1: SerialNumber: syz
[  938.631139][ T5891] usb 6-1: config 0 descriptor??
[  938.669694][ T5891] hub 6-1:0.132: bad descriptor, ignoring hub
[  938.718390][ T5891] hub 6-1:0.132: probe with driver hub failed with error -5
[  938.748678][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input69
[  939.101080][T15457] batadv_slave_1: entered promiscuous mode
[  939.523071][T15456] syz.0.2213 (15456): drop_caches: 2
[  939.568135][T15450] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  939.576805][T15450] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  939.583118][T15450] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  939.589745][T15450] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  940.575755][ T5827] Bluetooth: hci2: command 0x0401 tx timeout
[  941.018487][T15458] batadv_slave_1: left promiscuous mode
[  941.425186][T15470] ./file0: Can't open blockdev
[  941.466180][ T5900] usb 6-1: USB disconnect, device number 12
[  941.603963][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  941.603980][   T30] audit: type=1326 audit(1766661284.549:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15485 comm="syz.0.2221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22efd8f6c9 code=0x0
[  941.633122][ T5827] Bluetooth: hci5: command 0x0406 tx timeout
[  941.633180][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  941.633217][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  942.303117][T15495] could not allocate digest TFM handle cryptd(blake2b-160)
[  942.352806][T15462] [U] 
[  943.178898][T15506] [U] 
[  944.522587][T15538] mkiss: ax0: crc mode is auto.
[  945.512442][T15541] could not allocate digest TFM handle cryptd(blake2b-160)
[  945.876021][T15558] mkiss: ax0: crc mode is auto.
[  945.975326][   T30] audit: type=1326 audit(1766661288.919:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.2234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x0
[  947.530513][T15578] [U] 
[  948.526517][T15590] mkiss: ax0: crc mode is auto.
[  949.127421][T15599] syz.5.2241 (15599): drop_caches: 2
[  949.937413][T15616] syz.6.2243 (15616): drop_caches: 2
[  950.502122][T15630] [U] 
[  951.674151][T15640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2247'.
[  951.779924][T15636] ./file0: Can't open blockdev
[  952.214000][   T30] audit: type=1326 audit(1766661295.159:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  952.422661][   T30] audit: type=1326 audit(1766661295.159:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  952.542841][   T30] audit: type=1326 audit(1766661295.159:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  952.587318][   T30] audit: type=1326 audit(1766661295.159:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.146911][   T30] audit: type=1326 audit(1766661295.159:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.185626][   T30] audit: type=1326 audit(1766661295.159:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.209597][   T30] audit: type=1326 audit(1766661295.159:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.237926][   T30] audit: type=1326 audit(1766661295.159:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.326103][   T30] audit: type=1326 audit(1766661295.159:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.515024][   T30] audit: type=1326 audit(1766661295.159:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15646 comm="syz.6.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[  953.571027][T15650] mkiss: ax0: crc mode is auto.
[  953.647172][T15652] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  953.666517][T15652] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  953.772932][T15652] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  953.782391][T15652] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  954.709279][T15679] [U] 
[  955.124167][T15695] syz.5.2258 (15695): drop_caches: 2
[  955.126292][T15703] mkiss: ax0: crc mode is auto.
[  955.154763][T15697] could not allocate digest TFM handle cryptd(blake2b-160)
[  955.216497][T12879] Bluetooth: hci2: command 0x0401 tx timeout
[  955.692869][T12879] Bluetooth: hci4: command 0x0405 tx timeout
[  955.852796][T12879] Bluetooth: hci5: command 0x0406 tx timeout
[  955.859071][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[  957.236164][T15722] mkiss: ax0: crc mode is auto.
[  957.388555][T15734] syz.5.2264 (15734): drop_caches: 2
[  959.716878][T15752] syz.0.2268 (15752): drop_caches: 2
[  959.721371][T15755] veth0_to_team: entered promiscuous mode
[  959.728404][T15755] veth0_to_team: entered allmulticast mode
[  959.969386][T15750] mkiss: ax0: crc mode is auto.
[  960.268169][T15765] syz.5.2272 (15765): drop_caches: 2
[  961.325245][T15783] siw: device registration error -23
[  961.468770][T15784] syz.1.2274 (15784): drop_caches: 2
[  962.400882][T15793] could not allocate digest TFM handle cryptd(blake2b-160)
[  962.610218][T15800] mkiss: ax0: crc mode is auto.
[  962.753117][T15812] syz.6.2279 (15812): drop_caches: 2
[  964.167739][T15822] could not allocate digest TFM handle cryptd(blake2b-160)
[  964.416446][T15827] could not allocate digest TFM handle cryptd(blake2b-160)
[  964.708844][T15820] syz.0.2282 (15820): drop_caches: 2
[  965.010054][T15845] siw: device registration error -23
[  965.296852][T15847] mkiss: ax0: crc mode is auto.
[  965.367675][T15849] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2288'.
[  965.386399][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2288'.
[  965.771851][T15841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  965.794530][T15841] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  965.922760][T15841] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  965.928865][T15841] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  966.707345][T15869] syz.1.2290 (15869): drop_caches: 2
[  966.879463][T15874] syz.6.2292 (15874): drop_caches: 2
[  967.098712][T15867] could not allocate digest TFM handle cryptd(blake2b-160)
[  967.375024][ T5827] Bluetooth: hci2: command 0x0401 tx timeout
[  967.820583][T15871] [U] 
[  967.876076][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  967.932675][ T5827] Bluetooth: hci5: command 0x0406 tx timeout
[  967.932766][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[  968.100523][T15885] mkiss: ax0: crc mode is auto.
[  968.660521][T15898] veth0_to_team: entered promiscuous mode
[  968.666382][T15898] veth0_to_team: entered allmulticast mode
[  969.318346][T15900] syz.6.2297 (15900): drop_caches: 2
[  970.686405][T15912] could not allocate digest TFM handle cryptd(blake2b-160)
[  970.850372][T15910] mkiss: ax0: crc mode is auto.
[  972.460535][T15934] mkiss: ax0: crc mode is auto.
[  973.498766][T15944] could not allocate digest TFM handle cryptd(blake2b-160)
[  973.985803][T15939] mkiss: ax0: crc mode is auto.
[  974.069944][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  974.069959][   T30] audit: type=1326 audit(1766661317.019:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  974.240296][   T30] audit: type=1326 audit(1766661317.019:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  974.403367][   T30] audit: type=1326 audit(1766661317.019:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  974.489771][   T30] audit: type=1326 audit(1766661317.019:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  974.625621][   T30] audit: type=1326 audit(1766661317.019:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  974.742896][   T30] audit: type=1326 audit(1766661317.049:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  975.181277][   T30] audit: type=1326 audit(1766661317.049:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  975.244945][T15959] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2310'.
[  975.256596][T15959] ./file0: Can't open blockdev
[  975.305714][T15964] mkiss: ax0: crc mode is auto.
[  975.452713][   T30] audit: type=1326 audit(1766661317.049:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  975.483466][   T30] audit: type=1326 audit(1766661317.049:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  975.533889][   T30] audit: type=1326 audit(1766661317.049:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15942 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff9b8f6c9 code=0x7ffc0000
[  977.141625][T15987] syz.6.2315 (15987): drop_caches: 2
[  977.192715][T15988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2317'.
[  977.272008][T15990] syz.3.2316 (15990): drop_caches: 2
[  977.544279][T15994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2318'.
[  977.589049][T15994] ./file0: Can't open blockdev
[  977.891637][T15983] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  977.903082][T15983] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  977.913201][T15983] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  977.953324][T15983] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  978.349592][T15998] veth0_to_team: entered promiscuous mode
[  978.355452][T15998] veth0_to_team: entered allmulticast mode
[  979.132705][T12879] Bluetooth: hci2: command 0x0401 tx timeout
[  979.872094][T16025] syz.1.2321 (16025): drop_caches: 2
[  979.932755][ T5827] Bluetooth: hci4: command 0x0405 tx timeout
[  979.938824][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[  980.012769][T12879] Bluetooth: hci5: command 0x0406 tx timeout
[  982.901728][T16051] veth0_to_team: entered promiscuous mode
[  982.907569][T16051] veth0_to_team: entered allmulticast mode
[  983.827893][T16060] mkiss: ax0: crc mode is auto.
[  984.543312][T16067] could not allocate digest TFM handle cryptd(blake2b-160)
[  985.406480][T16095] syz.6.2339 (16095): drop_caches: 2
[  985.454904][T16098] syz.5.2340 (16098): drop_caches: 2
[  985.492641][ T5891] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  985.764172][ T5891] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[  985.781298][ T5891] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[  985.807451][ T5891] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[  985.835064][ T5891] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  985.850891][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.874244][ T5891] usb 4-1: Product: syz
[  985.881373][ T5891] usb 4-1: Manufacturer: syz
[  985.886398][ T5891] usb 4-1: SerialNumber: syz
[  986.444502][ T5900] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  986.659368][ T5900] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[  986.676765][ T5900] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[  986.687413][ T5900] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[  987.271588][T16113] syz.5.2342 (16113): drop_caches: 2
[  987.306147][T16112] batadv_slave_1: entered promiscuous mode
[  987.316000][ T5900] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  987.325333][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.333843][ T5900] usb 2-1: Product: syz
[  987.338184][ T5900] usb 2-1: Manufacturer: syz
[  987.343193][ T5900] usb 2-1: SerialNumber: syz
[  988.359881][T16059] batadv_slave_1: left promiscuous mode
[  988.443997][T14323] usb 4-1: USB disconnect, device number 34
[  988.623104][T16124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2347'.
[  988.682782][T16124] ./file0: Can't open blockdev
[  989.019829][ T5936] usb 2-1: USB disconnect, device number 31
[  989.100628][T16131] syz.5.2349 (16131): drop_caches: 2
[  989.144437][T16121] [U] 
[  989.692331][T16133] could not allocate digest TFM handle cryptd(blake2b-160)
[  990.790164][T16150] syz.6.2351 (16150): drop_caches: 2
[  990.816440][T16151] syz.3.2352 (16151): drop_caches: 2
[  991.818125][T16155] could not allocate digest TFM handle cryptd(blake2b-160)
[  992.735348][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  992.767276][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  992.775922][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  993.598931][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  993.598944][   T30] audit: type=1326 audit(1766661336.129:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.651916][T16160] could not allocate digest TFM handle cryptd(blake2b-160)
[  993.672782][   T30] audit: type=1326 audit(1766661336.129:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.699934][   T30] audit: type=1326 audit(1766661336.139:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.742047][   T30] audit: type=1326 audit(1766661336.139:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.767882][   T30] audit: type=1326 audit(1766661336.139:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.796178][   T30] audit: type=1326 audit(1766661336.139:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.821232][   T30] audit: type=1326 audit(1766661336.139:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.849570][   T30] audit: type=1326 audit(1766661336.139:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.904948][   T30] audit: type=1326 audit(1766661336.139:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  993.930092][   T30] audit: type=1326 audit(1766661336.139:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16173 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[  995.894339][T16198] mkiss: ax0: crc mode is auto.
[  996.174331][T16208] syz.6.2363 (16208): drop_caches: 2
[  997.277485][T16209] mkiss: ax0: crc mode is auto.
[ 1000.856861][T16251] mkiss: ax0: crc mode is auto.
[ 1000.866697][T16237] syz.0.2370 (16237): drop_caches: 2
[ 1004.359309][T16289] mkiss: ax0: crc mode is auto.
[ 1005.436366][T16294] veth0_to_team: entered promiscuous mode
[ 1005.442130][T16294] veth0_to_team: entered allmulticast mode
[ 1005.922165][T16304] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2384'.
[ 1005.963289][T16304] ./file0: Can't open blockdev
[ 1006.641214][T16300] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1007.152728][T16308] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1007.731991][T16318] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1008.553164][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2389'.
[ 1009.350271][T16329] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1009.359239][T16329] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1009.501701][T16329] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1009.549357][T16329] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1009.944161][T16349] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1009.962057][T16341] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1010.172787][T12879] Bluetooth: hci2: command 0x0401 tx timeout
[ 1010.249520][T16367] syz.5.2397 (16367): drop_caches: 2
[ 1010.396526][T16372] syz.3.2398 (16372): drop_caches: 2
[ 1010.672819][T16376] mkiss: ax0: crc mode is auto.
[ 1011.374179][T12879] Bluetooth: hci4: command 0x0405 tx timeout
[ 1011.532692][T12879] Bluetooth: hci1: command 0x0406 tx timeout
[ 1011.612835][T12879] Bluetooth: hci5: command 0x0406 tx timeout
[ 1013.136386][T16398] mkiss: ax0: crc mode is auto.
[ 1013.164815][T16401] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1014.601045][T16425] syz.1.2409 (16425): drop_caches: 2
[ 1015.695501][T16439] syz.5.2412 (16439): drop_caches: 2
[ 1016.012952][ T5938] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1016.892999][ T5938] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1016.901896][ T5938] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1016.925664][T16451] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2416'.
[ 1017.003552][T16450] ./file0: Can't open blockdev
[ 1017.153024][ T5938] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1017.180619][ T5938] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1017.205009][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.237422][T16453] mkiss: ax0: crc mode is auto.
[ 1017.246533][ T5938] usb 7-1: Product: syz
[ 1017.252504][ T5938] usb 7-1: Manufacturer: syz
[ 1017.326967][ T5938] usb 7-1: SerialNumber: syz
[ 1017.800781][T16458] syz.1.2418 (16458): drop_caches: 2
[ 1019.531507][ T5950] usb 7-1: USB disconnect, device number 8
[ 1020.012955][ T5891] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[ 1020.961865][ T5891] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1020.975209][ T5891] usb 6-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1020.992255][ T5891] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1021.025484][ T5891] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1021.042685][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.051004][ T5891] usb 6-1: Product: syz
[ 1021.055508][ T5891] usb 6-1: Manufacturer: syz
[ 1021.060114][ T5891] usb 6-1: SerialNumber: syz
[ 1021.358001][T16494] syz.3.2424 (16494): drop_caches: 2
[ 1021.620362][ T5891] usb 6-1: can't set config #255, error -71
[ 1021.639015][T16505] syz.1.2426 (16505): drop_caches: 2
[ 1021.649006][ T5891] usb 6-1: USB disconnect, device number 13
[ 1021.841140][T16507] syz.6.2428 (16507): drop_caches: 2
[ 1021.864118][T16509] siw: device registration error -23
[ 1022.746915][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1022.746948][   T30] audit: type=1326 audit(1766661365.569:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.083768][   T30] audit: type=1326 audit(1766661365.579:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.108802][   T30] audit: type=1326 audit(1766661365.579:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.134281][   T30] audit: type=1326 audit(1766661365.589:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.158161][   T30] audit: type=1326 audit(1766661365.589:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.182781][   T30] audit: type=1326 audit(1766661365.589:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.215867][   T30] audit: type=1326 audit(1766661365.589:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.239629][   T30] audit: type=1326 audit(1766661365.589:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.270463][   T30] audit: type=1326 audit(1766661365.589:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1023.312101][   T30] audit: type=1326 audit(1766661365.599:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1024.374607][T16536] syz.6.2433 (16536): drop_caches: 2
[ 1024.687471][T16524] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1025.616230][T16546] mkiss: ax0: crc mode is auto.
[ 1028.352771][T16576] mkiss: ax0: crc mode is auto.
[ 1030.668751][T16588] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1030.699762][T16589] [U] 
[ 1031.154868][T16610] [U] 
[ 1031.972318][T16625] syz.3.2452 (16625): drop_caches: 2
[ 1032.053062][T16618] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1032.175377][ T5950] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1032.394307][ T5950] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1032.407692][ T5950] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1032.438940][ T5950] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1032.605173][ T5950] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1032.616205][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.629269][ T5950] usb 2-1: Product: syz
[ 1032.640580][ T5950] usb 2-1: Manufacturer: syz
[ 1032.646765][ T5950] usb 2-1: SerialNumber: syz
[ 1034.030299][T16637] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1034.959212][ T5936] usb 2-1: USB disconnect, device number 32
[ 1035.118364][T16658] [U] 
[ 1036.475491][T16666] mkiss: ax0: crc mode is auto.
[ 1036.668768][T16676] syz.5.2461 (16676): drop_caches: 2
[ 1038.356876][T16695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2465'.
[ 1038.432668][T16695] ./file0: Can't open blockdev
[ 1038.625301][T16682] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1038.792691][ T5936] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1038.965567][ T5936] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1038.981735][T16708] syz.1.2466 (16708): drop_caches: 2
[ 1038.993054][ T5936] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1039.006777][ T5936] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1039.030955][ T5936] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1039.051227][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.070866][ T5936] usb 7-1: Product: syz
[ 1039.080346][ T5936] usb 7-1: Manufacturer: syz
[ 1039.086092][ T5936] usb 7-1: SerialNumber: syz
[ 1039.369912][T16712] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1039.850274][T16720] [U] 
[ 1040.446173][T16726] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2471'.
[ 1040.474837][T16726] ./file0: Can't open blockdev
[ 1041.043215][ T5936] usb 7-1: USB disconnect, device number 9
[ 1041.531553][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1041.531565][   T30] audit: type=1326 audit(1766661384.059:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.703758][   T30] audit: type=1326 audit(1766661384.059:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.738046][T16735] team_slave_0: entered promiscuous mode
[ 1041.744034][T16735] team_slave_1: entered promiscuous mode
[ 1041.749830][T16735] batadv1: entered promiscuous mode
[ 1041.756212][T16735] macsec1: entered promiscuous mode
[ 1041.761582][   T30] audit: type=1326 audit(1766661384.069:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.791767][T16735] team0: entered promiscuous mode
[ 1041.798302][T16735] vlan1: entered promiscuous mode
[ 1041.803071][   T30] audit: type=1326 audit(1766661384.079:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.830936][T16735] macsec1: entered allmulticast mode
[ 1041.840566][T16735] team0: entered allmulticast mode
[ 1041.856162][T16735] team_slave_0: entered allmulticast mode
[ 1041.869191][T16735] team_slave_1: entered allmulticast mode
[ 1041.876091][T16735] batadv1: entered allmulticast mode
[ 1041.896670][T16735] team0: Device macsec1 is already an upper device of the team interface
[ 1041.907612][   T30] audit: type=1326 audit(1766661384.079:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.969001][   T30] audit: type=1326 audit(1766661384.079:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1041.992936][   T30] audit: type=1326 audit(1766661384.079:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1042.023460][   T30] audit: type=1326 audit(1766661384.079:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1042.047674][   T30] audit: type=1326 audit(1766661384.089:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1042.075516][   T30] audit: type=1326 audit(1766661384.089:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1042.099945][T16735] team0: left allmulticast mode
[ 1042.104885][T16735] team_slave_0: left allmulticast mode
[ 1042.110541][T16735] team_slave_1: left allmulticast mode
[ 1042.116033][T16735] batadv1: left allmulticast mode
[ 1042.124090][T16735] team0: left promiscuous mode
[ 1042.129156][T16735] vlan1: left promiscuous mode
[ 1042.135808][T16735] team_slave_0: left promiscuous mode
[ 1042.141225][T16735] team_slave_1: left promiscuous mode
[ 1042.146857][T16735] batadv1: left promiscuous mode
[ 1044.134171][T16757] [U] 
[ 1044.950790][T16763] mkiss: ax0: crc mode is auto.
[ 1046.780932][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1046.780965][   T30] audit: type=1326 audit(1766661389.699:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1046.852970][   T30] audit: type=1326 audit(1766661389.699:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.127396][   T30] audit: type=1326 audit(1766661389.709:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.152787][   T30] audit: type=1326 audit(1766661389.709:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.177369][   T30] audit: type=1326 audit(1766661389.709:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.201210][   T30] audit: type=1326 audit(1766661389.709:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.237220][   T30] audit: type=1326 audit(1766661389.709:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.312891][   T30] audit: type=1326 audit(1766661389.709:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.377251][   T30] audit: type=1326 audit(1766661389.709:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.428809][   T30] audit: type=1326 audit(1766661389.709:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16788 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1047.930365][T16807] syz.5.2487 (16807): drop_caches: 2
[ 1048.498376][T16814] overlayfs: failed to resolve './bus': -2
[ 1048.839243][T16810] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1051.162735][T16843] ./file0: Can't open blockdev
[ 1051.183313][T16836] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2496'.
[ 1051.319109][T16845] syz.6.2495 (16845): drop_caches: 2
[ 1051.431716][T16849] mkiss: ax0: crc mode is auto.
[ 1051.920628][ T5938] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[ 1052.491720][ T5938] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1052.531262][ T5938] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1052.561799][ T5938] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1052.592411][T16856] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1053.459123][ T5938] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1053.472949][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.481044][ T5938] usb 2-1: Product: syz
[ 1053.939052][ T5938] usb 2-1: can't set config #255, error -71
[ 1053.965832][ T5938] usb 2-1: USB disconnect, device number 33
[ 1054.218258][T14323] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1054.244134][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1054.261208][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.268167][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.872679][T14323] usb 7-1: Using ep0 maxpacket: 16
[ 1054.880002][T14323] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 1054.889092][T14323] usb 7-1: config 0 has no interface number 0
[ 1054.901701][T14323] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1055.025808][T14323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.173838][T14323] usb 7-1: Product: syz
[ 1055.178060][T14323] usb 7-1: Manufacturer: syz
[ 1055.226458][T14323] usb 7-1: SerialNumber: syz
[ 1055.339578][T14323] usb 7-1: config 0 descriptor??
[ 1055.355166][T14323] hub 7-1:0.132: bad descriptor, ignoring hub
[ 1055.404837][T14323] hub 7-1:0.132: probe with driver hub failed with error -5
[ 1055.441901][T14323] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input70
[ 1056.715931][T16912] syz.3.2508 (16912): drop_caches: 2
[ 1056.772676][   T42] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1056.934223][   T42] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1056.950776][   T42] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1056.987281][   T42] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1057.025204][   T42] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1057.038892][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.047353][   T42] usb 2-1: Product: syz
[ 1057.051975][   T42] usb 2-1: Manufacturer: syz
[ 1057.061123][   T42] usb 2-1: SerialNumber: syz
[ 1057.506838][ T5950] usb 7-1: USB disconnect, device number 10
[ 1058.202861][T16925] [U] 
[ 1058.810302][   T42] usb 2-1: USB disconnect, device number 34
[ 1060.208663][T16928] [U] 
[ 1061.252012][T16956] mkiss: ax0: crc mode is auto.
[ 1062.222927][ T5891] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1062.422657][ T5891] usb 4-1: Using ep0 maxpacket: 16
[ 1062.429624][ T5891] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1062.439072][ T5891] usb 4-1: config 0 has no interface number 0
[ 1062.455757][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1062.502911][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.621288][ T5891] usb 4-1: Product: syz
[ 1062.631712][ T5891] usb 4-1: Manufacturer: syz
[ 1062.642146][ T5891] usb 4-1: SerialNumber: syz
[ 1062.938237][ T5891] usb 4-1: config 0 descriptor??
[ 1063.090970][T16975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2522'.
[ 1063.197380][ T5891] hub 4-1:0.132: bad descriptor, ignoring hub
[ 1063.237749][ T5891] hub 4-1:0.132: probe with driver hub failed with error -5
[ 1063.268907][T16974] ./file0: Can't open blockdev
[ 1063.757233][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input71
[ 1064.655393][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2526'.
[ 1064.762141][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'.
[ 1065.314908][ T5938] usb 4-1: USB disconnect, device number 35
[ 1066.109344][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1066.109357][   T30] audit: type=1326 audit(1766661408.629:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.203157][   T30] audit: type=1326 audit(1766661408.629:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.262629][   T30] audit: type=1326 audit(1766661408.629:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.411398][   T30] audit: type=1326 audit(1766661408.629:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.512057][   T30] audit: type=1326 audit(1766661408.639:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.537850][   T30] audit: type=1326 audit(1766661408.639:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.561737][   T30] audit: type=1326 audit(1766661408.639:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.594819][   T30] audit: type=1326 audit(1766661408.639:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.677668][   T30] audit: type=1326 audit(1766661408.639:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1066.820003][   T30] audit: type=1326 audit(1766661408.639:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17000 comm="syz.6.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1067.041762][T17022] [U] 
[ 1067.042638][T14323] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[ 1067.225836][T14323] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1067.235141][T14323] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1067.253531][T14323] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1067.392214][T14323] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1067.428579][T14323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.445585][T14323] usb 2-1: Product: syz
[ 1067.455456][T14323] usb 2-1: Manufacturer: syz
[ 1067.468130][T14323] usb 2-1: SerialNumber: syz
[ 1068.792313][T17042] [U] 
[ 1071.442652][   T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1071.656757][ T5950] usb 2-1: USB disconnect, device number 35
[ 1071.766693][T17072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2541'.
[ 1071.817142][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2541'.
[ 1071.827063][T17072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2541'.
[ 1072.111773][   T42] usb 6-1: Using ep0 maxpacket: 16
[ 1072.136783][   T42] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1072.183275][   T42] usb 6-1: config 0 has no interface number 0
[ 1072.217850][   T42] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1072.237581][T17076] [U] 
[ 1072.241556][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.249973][   T42] usb 6-1: Product: syz
[ 1072.434817][   T42] usb 6-1: Manufacturer: syz
[ 1072.439528][   T42] usb 6-1: SerialNumber: syz
[ 1073.000969][   T42] usb 6-1: config 0 descriptor??
[ 1073.014774][   T42] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1073.038203][   T42] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1073.051822][   T42] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input72
[ 1073.221506][T17086] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2545'.
[ 1073.931625][T17090] ./file0: Can't open blockdev
[ 1075.292995][ T5950] usb 6-1: USB disconnect, device number 14
[ 1075.496108][T17116] syz.3.2549 (17116): drop_caches: 2
[ 1075.882907][T17118] [U] 
[ 1078.021889][T17146] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2555'.
[ 1078.144942][T17146] ./file0: Can't open blockdev
[ 1078.418587][T17157] syz.0.2556 (17157): drop_caches: 2
[ 1078.627819][T17154] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1079.728818][T17174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2562'.
[ 1079.769256][T17174] ./file0: Can't open blockdev
[ 1079.782796][ T5950] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1079.992846][ T5950] usb 4-1: Using ep0 maxpacket: 16
[ 1080.011495][ T5950] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1080.023490][ T5950] usb 4-1: config 0 has no interface number 0
[ 1080.041483][ T5950] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1080.067105][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.083116][ T5950] usb 4-1: Product: syz
[ 1080.094326][ T5950] usb 4-1: Manufacturer: syz
[ 1080.103445][ T5950] usb 4-1: SerialNumber: syz
[ 1080.119815][ T5950] usb 4-1: config 0 descriptor??
[ 1080.130786][ T5950] hub 4-1:0.132: bad descriptor, ignoring hub
[ 1080.162902][ T5950] hub 4-1:0.132: probe with driver hub failed with error -5
[ 1080.182468][ T5950] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input73
[ 1080.752759][   T42] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[ 1081.164610][   T42] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1081.177055][   T42] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1081.192607][   T42] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1081.266623][   T42] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1081.291534][   T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.314940][   T42] usb 7-1: Product: syz
[ 1081.325060][   T42] usb 7-1: Manufacturer: syz
[ 1081.342800][   T42] usb 7-1: SerialNumber: syz
[ 1081.569819][T17184] syz.5.2563 (17184): drop_caches: 2
[ 1082.662856][ T5900] usb 4-1: USB disconnect, device number 36
[ 1083.924402][T17224] ./file0: Can't open blockdev
[ 1083.953445][ T5938] usb 7-1: USB disconnect, device number 11
[ 1084.014964][T17227] [U] 
[ 1084.478992][T14323] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[ 1084.606835][T17241] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2576'.
[ 1084.688332][T17241] ./file0: Can't open blockdev
[ 1084.956215][T14323] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1084.966158][T14323] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1084.984887][T14323] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1085.016014][T14323] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1085.027368][T14323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.035483][T14323] usb 2-1: Product: syz
[ 1085.039813][T14323] usb 2-1: Manufacturer: syz
[ 1085.044556][T14323] usb 2-1: SerialNumber: syz
[ 1085.370813][T17250] syz.3.2577 (17250): drop_caches: 2
[ 1085.972669][T14323] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1086.178197][T14323] usb 6-1: Using ep0 maxpacket: 16
[ 1086.185496][T14323] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1086.195813][T14323] usb 6-1: config 0 has no interface number 0
[ 1086.226719][T14323] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1086.236304][T14323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.249508][T14323] usb 6-1: Product: syz
[ 1086.272871][T14323] usb 6-1: Manufacturer: syz
[ 1086.316559][T14323] usb 6-1: SerialNumber: syz
[ 1086.330661][T14323] usb 6-1: config 0 descriptor??
[ 1086.346589][T14323] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1086.358676][T14323] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1086.493620][T14323] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input74
[ 1086.601981][T17266] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2582'.
[ 1086.646897][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2582'.
[ 1087.241327][T17268] batadv_slave_1: entered promiscuous mode
[ 1087.910448][ T5891] usb 2-1: USB disconnect, device number 36
[ 1088.508101][T17285] siw: device registration error -23
[ 1088.853293][T17270] batadv_slave_1: left promiscuous mode
[ 1089.116661][ T5950] usb 6-1: USB disconnect, device number 15
[ 1089.462415][T17302] syz.1.2588 (17302): drop_caches: 2
[ 1089.748948][T17297] [U] 
[ 1089.908103][T17311] syz.6.2590 (17311): drop_caches: 2
[ 1091.229946][T17326] syz.3.2593 (17326): drop_caches: 2
[ 1091.796340][T17328] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1093.695343][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2598'.
[ 1094.586296][T17371] [U] 
[ 1095.082325][T17382] mkiss: ax0: crc mode is auto.
[ 1095.521919][T17398] syz.3.2605 (17398): drop_caches: 2
[ 1097.754222][T17428] syz.1.2609 (17428): drop_caches: 2
[ 1101.096254][T17459] kAFS: No cell specified
[ 1101.385812][T17464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2618'.
[ 1101.403663][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'.
[ 1102.341132][T17482] syz.6.2620 (17482): drop_caches: 2
[ 1102.493739][T17491] syz.3.2622 (17491): drop_caches: 2
[ 1104.492771][T14323] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1105.054702][T14323] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1105.063638][T14323] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1105.077181][T14323] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1105.172620][ T5938] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[ 1106.015252][T14323] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1106.024604][T14323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.033848][ T5938] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1106.043169][ T5938] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1106.072653][ T5938] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1106.082191][T14323] usb 7-1: Product: syz
[ 1106.106603][T14323] usb 7-1: Manufacturer: syz
[ 1106.140445][T14323] usb 7-1: SerialNumber: syz
[ 1106.150073][ T5938] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1106.159781][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.185360][ T5938] usb 2-1: Product: syz
[ 1106.192872][ T5938] usb 2-1: Manufacturer: syz
[ 1106.197516][ T5938] usb 2-1: SerialNumber: syz
[ 1106.382756][   T42] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1106.542667][   T42] usb 6-1: Using ep0 maxpacket: 16
[ 1106.600611][   T42] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1106.627717][   T42] usb 6-1: config 0 has no interface number 0
[ 1106.647577][   T42] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1106.677589][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.699260][   T42] usb 6-1: Product: syz
[ 1106.706502][   T42] usb 6-1: Manufacturer: syz
[ 1106.711211][   T42] usb 6-1: SerialNumber: syz
[ 1106.730518][   T42] usb 6-1: config 0 descriptor??
[ 1106.750479][   T42] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1106.761337][   T42] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1106.827898][   T42] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input75
[ 1107.188597][T17526] batadv_slave_1: entered promiscuous mode
[ 1107.218955][T17525] batadv_slave_1: left promiscuous mode
[ 1107.903927][   T42] usb 2-1: USB disconnect, device number 37
[ 1108.261160][    T9] usb 7-1: USB disconnect, device number 12
[ 1108.520183][T17551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2635'.
[ 1108.571998][T17551] ./file0: Can't open blockdev
[ 1109.552637][    T9] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[ 1109.715965][    T9] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1109.750188][    T9] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1109.781716][    T9] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1109.796003][    T9] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1109.824631][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.864418][    T9] usb 7-1: Product: syz
[ 1109.877082][    T9] usb 7-1: Manufacturer: syz
[ 1109.881685][    T9] usb 7-1: SerialNumber: syz
[ 1110.250168][T17578] syz.5.2641 (17578): drop_caches: 2
[ 1110.785436][ T5938] usb 6-1: USB disconnect, device number 16
[ 1111.332155][T17590] syz.5.2643 (17590): drop_caches: 2
[ 1111.421954][T17588] [U] 
[ 1112.456697][    T9] usb 7-1: USB disconnect, device number 13
[ 1113.277237][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1113.277251][   T30] audit: type=1326 audit(1766661456.089:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1113.384480][   T30] audit: type=1326 audit(1766661456.089:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1113.590111][T17624] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2650'.
[ 1113.612985][T17624] ./file0: Can't open blockdev
[ 1113.627117][   T30] audit: type=1326 audit(1766661456.089:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1113.860464][T17603] [U] 
[ 1113.952644][   T30] audit: type=1326 audit(1766661456.089:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.052716][   T30] audit: type=1326 audit(1766661456.089:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.144495][   T30] audit: type=1326 audit(1766661456.089:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.249969][   T30] audit: type=1326 audit(1766661456.089:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.351301][   T30] audit: type=1326 audit(1766661456.089:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.412161][   T30] audit: type=1326 audit(1766661456.089:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.523441][   T30] audit: type=1326 audit(1766661456.089:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.6.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1298f6c9 code=0x7ffc0000
[ 1114.761156][T17633] siw: device registration error -23
[ 1115.616142][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1115.645627][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.661520][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.830649][T17643] syz.6.2653 (17643): drop_caches: 2
[ 1116.342691][T16348] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[ 1116.453092][ T5900] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[ 1116.505890][T16348] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1116.686777][T16348] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1116.698585][T16348] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1116.738330][ T5900] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1116.782198][ T5900] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1116.801803][ T5900] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1116.812460][T16348] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1116.824130][T16348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.842595][T16348] usb 4-1: Product: syz
[ 1116.849026][T16348] usb 4-1: Manufacturer: syz
[ 1116.875210][ T5900] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1116.892197][T16348] usb 4-1: SerialNumber: syz
[ 1116.919736][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.982896][ T5900] usb 2-1: Product: syz
[ 1116.987125][ T5900] usb 2-1: Manufacturer: syz
[ 1117.003994][ T5900] usb 2-1: SerialNumber: syz
[ 1119.055343][ T5900] usb 4-1: USB disconnect, device number 37
[ 1119.465936][ T5900] usb 2-1: USB disconnect, device number 38
[ 1119.734857][T17698] siw: device registration error -23
[ 1120.086497][T17702] mkiss: ax0: crc mode is auto.
[ 1120.575892][ T5938] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1120.623839][T17713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2668'.
[ 1120.656243][T17713] ./file0: Can't open blockdev
[ 1121.093451][ T5938] usb 7-1: Using ep0 maxpacket: 16
[ 1121.109846][ T5938] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[ 1121.118348][ T5938] usb 7-1: config 0 has no interface number 0
[ 1121.126726][ T5938] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1121.148991][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.215769][ T5938] usb 7-1: Product: syz
[ 1121.232625][ T5938] usb 7-1: Manufacturer: syz
[ 1121.237251][ T5938] usb 7-1: SerialNumber: syz
[ 1121.282212][ T5938] usb 7-1: config 0 descriptor??
[ 1121.323667][ T5938] hub 7-1:0.132: bad descriptor, ignoring hub
[ 1121.330296][ T5938] hub 7-1:0.132: probe with driver hub failed with error -5
[ 1121.380466][ T5938] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input76
[ 1121.631501][T17710] batadv_slave_1: entered promiscuous mode
[ 1121.720104][T17709] batadv_slave_1: left promiscuous mode
[ 1122.056797][T17728] syz.1.2670 (17728): drop_caches: 2
[ 1122.233273][T17734] syz.5.2672 (17734): drop_caches: 2
[ 1122.536133][T17740] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2673'.
[ 1122.607307][T17740] ./file0: Can't open blockdev
[ 1122.823255][   T42] usb 7-1: USB disconnect, device number 14
[ 1125.925733][    T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1126.004063][T17774] syz.5.2678 (17774): drop_caches: 2
[ 1126.511083][    T9] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1126.681144][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1126.681195][   T30] audit: type=1326 audit(1766661469.539:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1126.717429][    T9] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1126.763001][    T9] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1126.798675][   T30] audit: type=1326 audit(1766661469.539:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1126.911915][   T30] audit: type=1326 audit(1766661469.539:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.016455][   T30] audit: type=1326 audit(1766661469.539:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.106675][   T30] audit: type=1326 audit(1766661469.539:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.371470][   T30] audit: type=1326 audit(1766661469.539:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.409521][   T30] audit: type=1326 audit(1766661469.539:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.435648][   T30] audit: type=1326 audit(1766661469.539:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.502648][   T30] audit: type=1326 audit(1766661469.539:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1127.632218][   T30] audit: type=1326 audit(1766661469.539:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17777 comm="syz.3.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c23b8f6c9 code=0x7ffc0000
[ 1129.519379][T17800] [U] 
[ 1130.145444][    T9] usb 7-1: string descriptor 0 read error: -71
[ 1130.157382][    T9] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1131.002258][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1131.301761][    T9] usb 7-1: can't set config #255, error -71
[ 1131.353601][    T9] usb 7-1: USB disconnect, device number 15
[ 1131.692255][T17822] [U] 
[ 1131.760121][T17835] syz.5.2689 (17835): drop_caches: 2
[ 1135.524335][T17881] syz.1.2698 (17881): drop_caches: 2
[ 1138.249334][T17905] siw: device registration error -23
[ 1139.103521][T17912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2706'.
[ 1139.115205][T17912] ./file0: Can't open blockdev
[ 1139.412665][ T5938] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1140.106416][ T5938] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1140.127618][ T5938] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1140.143428][ T5938] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1140.158859][ T5938] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1140.168965][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.180495][ T5938] usb 7-1: Product: syz
[ 1140.184940][ T5938] usb 7-1: Manufacturer: syz
[ 1140.189850][ T5938] usb 7-1: SerialNumber: syz
[ 1140.304100][T17925] syz.5.2708 (17925): drop_caches: 2
[ 1140.545321][T17931] syz.1.2709 (17931): drop_caches: 2
[ 1141.529694][T17937] [U] 
[ 1141.964864][T17940] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1142.259010][T14323] usb 7-1: USB disconnect, device number 16
[ 1142.344609][T17951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2713'.
[ 1142.405848][T17951] ./file0: Can't open blockdev
[ 1143.668523][T17963] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1147.012652][ T5950] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 1147.174706][ T5950] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1147.197909][ T5950] usb 6-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1147.286679][ T5950] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1147.335637][ T5950] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1147.354881][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.425429][ T5950] usb 6-1: Product: syz
[ 1147.465398][ T5950] usb 6-1: Manufacturer: syz
[ 1147.492673][ T5950] usb 6-1: SerialNumber: syz
[ 1149.299818][   T42] usb 6-1: USB disconnect, device number 17
[ 1151.772750][ T5938] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 1152.064165][ T5938] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1152.082676][ T5938] usb 6-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1152.132593][ T5938] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1152.298801][ T5938] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1152.359587][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.379783][ T5938] usb 6-1: Product: syz
[ 1152.388170][ T5938] usb 6-1: Manufacturer: syz
[ 1152.434490][ T5938] usb 6-1: SerialNumber: syz
[ 1152.665895][T18073] syz.0.2736 (18073): drop_caches: 2
[ 1153.969751][   T42] usb 6-1: USB disconnect, device number 18
[ 1155.332789][T18103] siw: device registration error -23
[ 1155.786607][T18099] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2741'.
[ 1155.852277][T18099] ./file0: Can't open blockdev
[ 1156.027257][T18087] [U] 
[ 1157.002658][ T5938] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1157.164191][ T5938] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1157.175215][ T5938] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1157.188416][ T5938] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1157.235259][ T5938] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1157.252513][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.262473][ T5938] usb 4-1: Product: syz
[ 1157.266841][ T5938] usb 4-1: Manufacturer: syz
[ 1157.271538][ T5938] usb 4-1: SerialNumber: syz
[ 1159.294254][ T5900] usb 4-1: USB disconnect, device number 38
[ 1163.662667][ T5938] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[ 1164.331867][ T5938] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1164.350965][ T5938] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1164.380646][ T5938] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1164.665792][T18204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2761'.
[ 1164.677000][T18204] ./file0: Can't open blockdev
[ 1164.687499][ T5938] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1164.696614][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1164.706137][ T5938] usb 2-1: Product: syz
[ 1164.710395][ T5938] usb 2-1: Manufacturer: syz
[ 1164.715331][ T5938] usb 2-1: SerialNumber: syz
[ 1165.390877][T18214] overlayfs: failed to resolve './bus': -2
[ 1165.544182][T18211] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1166.089299][ T5900] usb 2-1: USB disconnect, device number 39
[ 1166.350061][T18236] team_slave_0: entered promiscuous mode
[ 1166.355815][T18236] team_slave_1: entered promiscuous mode
[ 1166.361794][T18236] macsec1: entered promiscuous mode
[ 1166.367275][T18236] team0: entered promiscuous mode
[ 1166.375423][T18236] macsec1: entered allmulticast mode
[ 1166.380920][T18236] team0: entered allmulticast mode
[ 1166.386102][T18236] team_slave_0: entered allmulticast mode
[ 1166.391889][T18236] team_slave_1: entered allmulticast mode
[ 1166.403070][T18236] team0: Device macsec1 is already an upper device of the team interface
[ 1167.382778][T18243] siw: device registration error -23
[ 1167.861334][T18236] team0: left allmulticast mode
[ 1167.992645][T18236] team_slave_0: left allmulticast mode
[ 1167.999759][T18236] team_slave_1: left allmulticast mode
[ 1168.006417][T18236] team0: left promiscuous mode
[ 1168.012013][T18236] team_slave_0: left promiscuous mode
[ 1168.017481][T18236] team_slave_1: left promiscuous mode
[ 1169.436166][T18265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2773'.
[ 1169.468532][T18265] ./file0: Can't open blockdev
[ 1172.690042][T18302] team_slave_0: entered promiscuous mode
[ 1172.695797][T18302] team_slave_1: entered promiscuous mode
[ 1172.701732][T18302] macsec1: entered promiscuous mode
[ 1172.707053][T18302] team0: entered promiscuous mode
[ 1172.714137][T18302] macsec1: entered allmulticast mode
[ 1172.719657][T18302] team0: entered allmulticast mode
[ 1172.725013][T18302] team_slave_0: entered allmulticast mode
[ 1172.730746][T18302] team_slave_1: entered allmulticast mode
[ 1172.740788][T18302] team0: Device macsec1 is already an upper device of the team interface
[ 1173.512103][T18302] team0: left allmulticast mode
[ 1173.517852][T18302] team_slave_0: left allmulticast mode
[ 1173.531465][T18302] team_slave_1: left allmulticast mode
[ 1173.543862][T18302] team0: left promiscuous mode
[ 1173.548990][T18302] team_slave_0: left promiscuous mode
[ 1173.554487][T18302] team_slave_1: left promiscuous mode
[ 1173.857043][T18311] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1174.845910][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'.
[ 1175.277775][T18324] [U] 
[ 1176.442721][T18341] dvmrp0: entered allmulticast mode
[ 1177.075766][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1177.088432][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.103730][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.303527][   T42] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1179.505713][T18393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2799'.
[ 1179.575306][T18393] ./file0: Can't open blockdev
[ 1179.782609][   T42] usb 4-1: Using ep0 maxpacket: 16
[ 1179.853400][   T42] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1179.893644][   T42] usb 4-1: config 0 has no interface number 0
[ 1179.926841][   T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1179.952345][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.022868][   T42] usb 4-1: Product: syz
[ 1180.032620][   T42] usb 4-1: Manufacturer: syz
[ 1180.042666][   T42] usb 4-1: SerialNumber: syz
[ 1180.084481][   T42] usb 4-1: config 0 descriptor??
[ 1180.096749][   T42] hub 4-1:0.132: bad descriptor, ignoring hub
[ 1180.155799][   T42] hub 4-1:0.132: probe with driver hub failed with error -5
[ 1180.188834][   T42] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input77
[ 1180.514940][T18402] batadv_slave_1: entered promiscuous mode
[ 1181.171528][T18408] siw: device registration error -23
[ 1182.294892][T18401] batadv_slave_1: left promiscuous mode
[ 1182.513244][ T5938] usb 4-1: USB disconnect, device number 39
[ 1183.146432][T18424] siw: device registration error -23
[ 1183.396286][T18425] dvmrp0: entered allmulticast mode
[ 1186.538170][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2811'.
[ 1186.578925][T18473] ./file0: Can't open blockdev
[ 1187.945073][T18489] [U] 
[ 1189.129859][T18488] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1189.882289][T18523] siw: device registration error -23
[ 1190.772625][ T5938] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[ 1191.072965][ T5938] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1191.098242][ T5938] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1191.386348][ T5938] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1191.481870][T18543] siw: device registration error -23
[ 1193.001374][ T5938] usb 2-1: string descriptor 0 read error: -71
[ 1193.007828][ T5938] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1193.020809][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.031417][ T5938] usb 2-1: can't set config #255, error -71
[ 1193.038812][ T5938] usb 2-1: USB disconnect, device number 40
[ 1193.190275][T18555] syz.3.2825 (18555): drop_caches: 2
[ 1193.764964][T18563] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1194.382862][T14323] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1194.687474][T14323] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1194.703287][T14323] usb 6-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1194.775518][T18585] siw: device registration error -23
[ 1195.236819][T14323] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1195.338502][T14323] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1195.357047][T14323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.431727][T14323] usb 6-1: Product: syz
[ 1195.458917][T14323] usb 6-1: Manufacturer: syz
[ 1195.488914][T14323] usb 6-1: SerialNumber: syz
[ 1196.929861][ T5870] usb 6-1: USB disconnect, device number 19
[ 1197.246899][T18604] Invalid source name
[ 1197.527370][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1197.527385][   T30] audit: type=1400 audit(1766661540.399:1614): avc:  denied  { getopt } for  pid=18603 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1197.672230][T18619] syz.0.2836 (18619): drop_caches: 2
[ 1198.026507][T18618] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1199.372999][T18636] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1199.547161][T18646] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1200.280738][T18665] dvmrp0: entered allmulticast mode
[ 1201.983721][T18682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2848'.
[ 1203.460172][T18705] siw: device registration error -23
[ 1204.136056][T18711] siw: device registration error -23
[ 1204.594100][T18713] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2854'.
[ 1204.680620][T18713] ./file0: Can't open blockdev
[ 1207.025843][T18731] [U] 
[ 1209.174420][T18795] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2870'.
[ 1209.355860][   T30] audit: type=1400 audit(1766661552.279:1615): avc:  denied  { mount } for  pid=18790 comm="syz.1.2870" name="/" dev="hugetlbfs" ino=61681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 1213.166226][T18838] syz.0.2879 (18838): drop_caches: 2
[ 1215.506629][T18864] Invalid source name
[ 1218.693050][T18903] Invalid source name
[ 1219.107197][T18917] Invalid source name
[ 1219.312634][    T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1219.464774][    T9] usb 2-1: config 0 has no interfaces?
[ 1219.485574][    T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1219.504748][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.537303][    T9] usb 2-1: Product: syz
[ 1219.551459][    T9] usb 2-1: Manufacturer: syz
[ 1219.568274][    T9] usb 2-1: SerialNumber: syz
[ 1219.588394][    T9] usb 2-1: config 0 descriptor??
[ 1219.922682][T16348] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1220.295629][T16348] usb 6-1: config 0 has no interfaces?
[ 1220.313740][T16348] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1220.332245][T16348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.376175][T16348] usb 6-1: Product: syz
[ 1220.421498][T16348] usb 6-1: Manufacturer: syz
[ 1220.522241][T16348] usb 6-1: SerialNumber: syz
[ 1220.593459][T16348] usb 6-1: config 0 descriptor??
[ 1222.457150][T16348] usb 2-1: USB disconnect, device number 41
[ 1223.687765][    T9] usb 6-1: USB disconnect, device number 20
[ 1224.548324][   T30] audit: type=1326 audit(1766661567.069:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1224.668106][   T30] audit: type=1326 audit(1766661567.069:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1224.790847][   T30] audit: type=1326 audit(1766661567.069:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1224.852927][   T30] audit: type=1326 audit(1766661567.069:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1224.934654][   T30] audit: type=1326 audit(1766661567.079:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1224.994390][   T30] audit: type=1326 audit(1766661567.079:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1225.045904][   T30] audit: type=1326 audit(1766661567.079:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1225.106551][   T30] audit: type=1326 audit(1766661567.079:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1225.167471][   T30] audit: type=1326 audit(1766661567.079:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1225.242758][   T30] audit: type=1326 audit(1766661567.079:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.5.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063c18f6c9 code=0x7ffc0000
[ 1225.684047][T18993] dvmrp0: entered allmulticast mode
[ 1227.653512][T19008] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2910'.
[ 1227.711092][T19008] ./file0: Can't open blockdev
[ 1228.388846][T19018] siw: device registration error -23
[ 1231.209595][T19060] Invalid source name
[ 1231.972654][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1232.727901][    T9] usb 2-1: config 0 has no interfaces?
[ 1232.772756][    T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1232.782063][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.792646][    T9] usb 2-1: Product: syz
[ 1232.796793][    T9] usb 2-1: Manufacturer: syz
[ 1232.801354][    T9] usb 2-1: SerialNumber: syz
[ 1232.842989][    T9] usb 2-1: config 0 descriptor??
[ 1234.562680][T16348] usb 2-1: USB disconnect, device number 42
[ 1235.952862][T19085] [U] 
[ 1236.041237][T19114] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2927'.
[ 1236.954086][T19127] syz.5.2928 (19127): drop_caches: 2
[ 1238.572367][ T1295] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1238.581898][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.604988][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.827516][T19147] Invalid source name
[ 1239.483372][T14323] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1239.644303][T14323] usb 7-1: config 0 has no interfaces?
[ 1239.651908][T14323] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1239.666197][T14323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.687147][T14323] usb 7-1: Product: syz
[ 1239.695077][T14323] usb 7-1: Manufacturer: syz
[ 1239.708434][T14323] usb 7-1: SerialNumber: syz
[ 1239.729956][T14323] usb 7-1: config 0 descriptor??
[ 1240.621375][T19163] Invalid source name
[ 1240.723377][ T5936] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[ 1240.807321][T19165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2937'.
[ 1240.818310][T19165] ./file0: Can't open blockdev
[ 1240.924019][ T5936] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1240.945136][ T5936] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1240.978968][ T5936] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1241.030043][ T5936] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1241.048549][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.066214][ T5936] usb 4-1: Product: syz
[ 1241.075164][ T5936] usb 4-1: Manufacturer: syz
[ 1241.087140][ T5936] usb 4-1: SerialNumber: syz
[ 1241.482675][ T5936] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1241.664515][ T5936] usb 2-1: config 0 has no interfaces?
[ 1241.674568][ T5936] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1241.689671][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.719213][ T5936] usb 2-1: Product: syz
[ 1241.807005][ T5900] usb 7-1: USB disconnect, device number 17
[ 1242.319479][ T5936] usb 2-1: Manufacturer: syz
[ 1242.378650][ T5936] usb 2-1: SerialNumber: syz
[ 1242.469244][ T5936] usb 2-1: config 0 descriptor??
[ 1242.742422][ T5936] usb 4-1: USB disconnect, device number 40
[ 1244.117774][ T5936] usb 2-1: USB disconnect, device number 43
[ 1244.301081][T19210] Invalid source name
[ 1244.972481][T16348] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1245.501781][T16348] usb 2-1: config 0 has no interfaces?
[ 1245.510952][T16348] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1245.523842][T16348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.542725][T16348] usb 2-1: Product: syz
[ 1245.557271][T19222] syz.0.2946 (19222): drop_caches: 2
[ 1245.564922][T16348] usb 2-1: Manufacturer: syz
[ 1245.579123][T16348] usb 2-1: SerialNumber: syz
[ 1245.601268][T16348] usb 2-1: config 0 descriptor??
[ 1246.640596][T19236] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2949'.
[ 1246.698138][T19236] ./file0: Can't open blockdev
[ 1247.427129][ T5900] usb 2-1: USB disconnect, device number 44
[ 1247.735344][T19250] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2952'.
[ 1250.878222][T19288] siw: device registration error -23
[ 1251.602639][T16348] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[ 1252.275870][T16348] usb 7-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1252.285339][T16348] usb 7-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1252.295981][T16348] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1252.307198][T16348] usb 7-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1252.324274][T16348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1252.342233][T16348] usb 7-1: Product: syz
[ 1252.355082][T16348] usb 7-1: Manufacturer: syz
[ 1252.367747][T16348] usb 7-1: SerialNumber: syz
[ 1252.604578][ T5938] usb 7-1: USB disconnect, device number 18
[ 1253.580926][T19303] ./file0: Can't open blockdev
[ 1255.922654][ T5950] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[ 1256.085160][ T5950] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32
[ 1256.145718][ T5950] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config
[ 1256.212757][ T5950] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249
[ 1256.283375][ T5950] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1256.297854][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.334862][ T5950] usb 4-1: Product: syz
[ 1256.372048][ T5950] usb 4-1: Manufacturer: syz
[ 1256.392946][ T5950] usb 4-1: SerialNumber: syz
[ 1257.705157][ T5938] usb 4-1: USB disconnect, device number 41
[ 1257.929136][T19369] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2973'.
[ 1259.107376][T19372] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1259.469212][T19395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2977'.
[ 1259.511563][T19395] ./file0: Can't open blockdev
[ 1261.046200][T19405] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2979'.
[ 1261.445264][T19415] siw: device registration error -23
[ 1262.197810][T19423] Invalid source name
[ 1262.852657][ T5900] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1262.891153][T19435] [U] 
[ 1263.005964][ T5900] usb 6-1: config 0 has no interfaces?
[ 1263.017811][ T5900] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1263.047267][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.089380][ T5900] usb 6-1: Product: syz
[ 1263.104392][ T5900] usb 6-1: Manufacturer: syz
[ 1263.185245][ T5900] usb 6-1: SerialNumber: syz
[ 1263.215978][ T5900] usb 6-1: config 0 descriptor??
[ 1263.377230][T19442] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2986'.
[ 1263.918012][T19446] Invalid source name
[ 1264.017426][T19449] ==================================================================
[ 1264.025515][T19449] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[ 1264.033504][T19449] Read of size 8 at addr ffff88807b9ab030 by task syz.3.2988/19449
[ 1264.041391][T19449] 
[ 1264.043724][T19449] CPU: 0 UID: 0 PID: 19449 Comm: syz.3.2988 Not tainted syzkaller #0 PREEMPT(full) 
[ 1264.043752][T19449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1264.043765][T19449] Call Trace:
[ 1264.043772][T19449]  <TASK>
[ 1264.043781][T19449]  dump_stack_lvl+0x116/0x1f0
[ 1264.043820][T19449]  print_report+0xcd/0x630
[ 1264.043844][T19449]  ? __virt_addr_valid+0x81/0x610
[ 1264.043873][T19449]  ? __phys_addr+0xe8/0x180
[ 1264.043902][T19449]  ? sysfs_remove_file_ns+0x63/0x70
[ 1264.043924][T19449]  kasan_report+0xe0/0x110
[ 1264.043947][T19449]  ? sysfs_remove_file_ns+0x63/0x70
[ 1264.043973][T19449]  sysfs_remove_file_ns+0x63/0x70
[ 1264.043996][T19449]  driver_remove_file+0x4a/0x60
[ 1264.044021][T19449]  bus_remove_driver+0x224/0x2c0
[ 1264.044052][T19449]  driver_unregister+0x76/0xb0
[ 1264.044076][T19449]  comedi_device_detach_locked+0x12f/0xa50
[ 1264.044107][T19449]  do_devconfig_ioctl+0x555/0x710
[ 1264.044136][T19449]  ? __mutex_lock+0x1c5/0x1060
[ 1264.044161][T19449]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1264.044201][T19449]  ? find_held_lock+0x2b/0x80
[ 1264.044231][T19449]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1264.044257][T19449]  ? irqentry_exit+0x3b/0x90
[ 1264.044277][T19449]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1264.044301][T19449]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1264.044333][T19449]  ? do_vfs_ioctl+0x128/0x14f0
[ 1264.044363][T19449]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1264.044393][T19449]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1264.044426][T19449]  ? hook_file_ioctl_common+0x145/0x410
[ 1264.044458][T19449]  ? selinux_file_ioctl+0x180/0x270
[ 1264.044480][T19449]  ? selinux_file_ioctl+0xb4/0x270
[ 1264.044503][T19449]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1264.044526][T19449]  __x64_sys_ioctl+0x18e/0x210
[ 1264.044556][T19449]  do_syscall_64+0xcd/0xfa0
[ 1264.044576][T19449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.044599][T19449] RIP: 0033:0x7f1c23b8f6c9
[ 1264.044623][T19449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1264.044644][T19449] RSP: 002b:00007f1c24a0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1264.044665][T19449] RAX: ffffffffffffffda RBX: 00007f1c23de6090 RCX: 00007f1c23b8f6c9
[ 1264.044680][T19449] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 1264.044693][T19449] RBP: 00007f1c23c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1264.044707][T19449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1264.044721][T19449] R13: 00007f1c23de6128 R14: 00007f1c23de6090 R15: 00007ffcda4c9ad8
[ 1264.044745][T19449]  </TASK>
[ 1264.044752][T19449] 
[ 1264.300995][T19449] Allocated by task 18413:
[ 1264.305401][T19449]  kasan_save_stack+0x33/0x60
[ 1264.310076][T19449]  kasan_save_track+0x14/0x30
[ 1264.314741][T19449]  __kasan_kmalloc+0xaa/0xb0
[ 1264.319323][T19449]  inode_doinit_use_xattr+0x54/0x410
[ 1264.324605][T19449]  inode_doinit_with_dentry+0x10c8/0x12e0
[ 1264.330331][T19449]  selinux_d_instantiate+0x26/0x30
[ 1264.335451][T19449]  security_d_instantiate+0x142/0x1a0
[ 1264.340821][T19449]  d_splice_alias_ops+0x92/0x840
[ 1264.345757][T19449]  kernfs_iop_lookup+0x23f/0x2d0
[ 1264.350694][T19449]  __lookup_slow+0x251/0x460
[ 1264.355283][T19449]  walk_component+0x353/0x5b0
[ 1264.359970][T19449]  link_path_walk+0x627/0xe20
[ 1264.364650][T19449]  path_openat+0x1b0/0x2cb0
[ 1264.369149][T19449]  do_filp_open+0x20b/0x470
[ 1264.373648][T19449]  do_sys_openat2+0x11b/0x1d0
[ 1264.378318][T19449]  __x64_sys_openat+0x174/0x210
[ 1264.383250][T19449]  do_syscall_64+0xcd/0xfa0
[ 1264.387742][T19449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.393624][T19449] 
[ 1264.395933][T19449] Freed by task 18413:
[ 1264.399981][T19449]  kasan_save_stack+0x33/0x60
[ 1264.404647][T19449]  kasan_save_track+0x14/0x30
[ 1264.409325][T19449]  __kasan_save_free_info+0x3b/0x60
[ 1264.414528][T19449]  __kasan_slab_free+0x5f/0x80
[ 1264.419353][T19449]  kfree+0x2b8/0x6d0
[ 1264.423277][T19449]  inode_doinit_use_xattr+0x1da/0x410
[ 1264.428660][T19449]  inode_doinit_with_dentry+0x10c8/0x12e0
[ 1264.434377][T19449]  selinux_d_instantiate+0x26/0x30
[ 1264.439488][T19449]  security_d_instantiate+0x142/0x1a0
[ 1264.444854][T19449]  d_splice_alias_ops+0x92/0x840
[ 1264.449789][T19449]  kernfs_iop_lookup+0x23f/0x2d0
[ 1264.454728][T19449]  __lookup_slow+0x251/0x460
[ 1264.459320][T19449]  walk_component+0x353/0x5b0
[ 1264.463995][T19449]  link_path_walk+0x627/0xe20
[ 1264.468681][T19449]  path_openat+0x1b0/0x2cb0
[ 1264.473186][T19449]  do_filp_open+0x20b/0x470
[ 1264.477684][T19449]  do_sys_openat2+0x11b/0x1d0
[ 1264.482355][T19449]  __x64_sys_openat+0x174/0x210
[ 1264.487203][T19449]  do_syscall_64+0xcd/0xfa0
[ 1264.491700][T19449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.497582][T19449] 
[ 1264.499893][T19449] The buggy address belongs to the object at ffff88807b9ab000
[ 1264.499893][T19449]  which belongs to the cache kmalloc-256 of size 256
[ 1264.513936][T19449] The buggy address is located 48 bytes inside of
[ 1264.513936][T19449]  freed 256-byte region [ffff88807b9ab000, ffff88807b9ab100)
[ 1264.527643][T19449] 
[ 1264.529956][T19449] The buggy address belongs to the physical page:
[ 1264.536365][T19449] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b9aa
[ 1264.545130][T19449] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1264.553620][T19449] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1264.561153][T19449] page_type: f5(slab)
[ 1264.565127][T19449] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000d48080 dead000000000004
[ 1264.573715][T19449] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1264.582306][T19449] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000d48080 dead000000000004
[ 1264.590975][T19449] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1264.599646][T19449] head: 00fff00000000001 ffffea0001ee6a81 00000000ffffffff 00000000ffffffff
[ 1264.608316][T19449] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1264.616986][T19449] page dumped because: kasan: bad access detected
[ 1264.623397][T19449] page_owner tracks the page as allocated
[ 1264.629096][T19449] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5201, tgid 5201 (udevadm), ts 26003483935, free_ts 25932592601
[ 1264.649283][T19449]  post_alloc_hook+0x1c0/0x230
[ 1264.654057][T19449]  get_page_from_freelist+0x10a3/0x3a30
[ 1264.659605][T19449]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1264.665498][T19449]  alloc_pages_mpol+0x1fb/0x550
[ 1264.670353][T19449]  new_slab+0x24a/0x360
[ 1264.674508][T19449]  ___slab_alloc+0xdae/0x1a60
[ 1264.679285][T19449]  __slab_alloc.constprop.0+0x63/0x110
[ 1264.684741][T19449]  __kmalloc_cache_noprof+0x477/0x780
[ 1264.690126][T19449]  inode_doinit_use_xattr+0x54/0x410
[ 1264.695415][T19449]  inode_doinit_with_dentry+0x10c8/0x12e0
[ 1264.701129][T19449]  selinux_d_instantiate+0x26/0x30
[ 1264.706241][T19449]  security_d_instantiate+0x142/0x1a0
[ 1264.711607][T19449]  d_splice_alias_ops+0x92/0x840
[ 1264.716543][T19449]  kernfs_iop_lookup+0x23f/0x2d0
[ 1264.721474][T19449]  __lookup_slow+0x251/0x460
[ 1264.726057][T19449]  walk_component+0x353/0x5b0
[ 1264.730731][T19449] page last free pid 5201 tgid 5201 stack trace:
[ 1264.737043][T19449]  __free_frozen_pages+0x7df/0x1160
[ 1264.742246][T19449]  rcu_core+0x79c/0x1530
[ 1264.746487][T19449]  handle_softirqs+0x219/0x8e0
[ 1264.751254][T19449]  __irq_exit_rcu+0x109/0x170
[ 1264.755928][T19449]  irq_exit_rcu+0x9/0x30
[ 1264.760177][T19449]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1264.765811][T19449]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1264.771792][T19449] 
[ 1264.774097][T19449] Memory state around the buggy address:
[ 1264.779802][T19449]  ffff88807b9aaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1264.787859][T19449]  ffff88807b9aaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1264.795909][T19449] >ffff88807b9ab000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1264.803954][T19449]                                      ^
[ 1264.809658][T19449]  ffff88807b9ab080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1264.817706][T19449]  ffff88807b9ab100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1264.825838][T19449] ==================================================================
[ 1264.843313][T19449] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1264.850529][T19449] CPU: 0 UID: 0 PID: 19449 Comm: syz.3.2988 Not tainted syzkaller #0 PREEMPT(full) 
[ 1264.859900][T19449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1264.869946][T19449] Call Trace:
[ 1264.873204][T19449]  <TASK>
[ 1264.876114][T19449]  dump_stack_lvl+0x3d/0x1f0
[ 1264.880702][T19449]  vpanic+0x640/0x6f0
[ 1264.884674][T19449]  panic+0xca/0xd0
[ 1264.888380][T19449]  ? __pfx_panic+0x10/0x10
[ 1264.892776][T19449]  ? sysfs_remove_file_ns+0x63/0x70
[ 1264.897953][T19449]  ? preempt_schedule_common+0x44/0xc0
[ 1264.903395][T19449]  ? preempt_schedule_thunk+0x16/0x30
[ 1264.908758][T19449]  check_panic_on_warn+0xab/0xb0
[ 1264.913684][T19449]  end_report+0x107/0x170
[ 1264.917993][T19449]  kasan_report+0xee/0x110
[ 1264.922387][T19449]  ? sysfs_remove_file_ns+0x63/0x70
[ 1264.927566][T19449]  sysfs_remove_file_ns+0x63/0x70
[ 1264.932574][T19449]  driver_remove_file+0x4a/0x60
[ 1264.937424][T19449]  bus_remove_driver+0x224/0x2c0
[ 1264.942353][T19449]  driver_unregister+0x76/0xb0
[ 1264.947100][T19449]  comedi_device_detach_locked+0x12f/0xa50
[ 1264.952896][T19449]  do_devconfig_ioctl+0x555/0x710
[ 1264.957904][T19449]  ? __mutex_lock+0x1c5/0x1060
[ 1264.962646][T19449]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1264.968180][T19449]  ? find_held_lock+0x2b/0x80
[ 1264.972848][T19449]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1264.978287][T19449]  ? irqentry_exit+0x3b/0x90
[ 1264.982861][T19449]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1264.988652][T19449]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1264.994529][T19449]  ? do_vfs_ioctl+0x128/0x14f0
[ 1264.999288][T19449]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1265.004307][T19449]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1265.011144][T19449]  ? hook_file_ioctl_common+0x145/0x410
[ 1265.016685][T19449]  ? selinux_file_ioctl+0x180/0x270
[ 1265.021862][T19449]  ? selinux_file_ioctl+0xb4/0x270
[ 1265.026951][T19449]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1265.032734][T19449]  __x64_sys_ioctl+0x18e/0x210
[ 1265.037482][T19449]  do_syscall_64+0xcd/0xfa0
[ 1265.041963][T19449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.047832][T19449] RIP: 0033:0x7f1c23b8f6c9
[ 1265.052239][T19449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1265.071829][T19449] RSP: 002b:00007f1c24a0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1265.080252][T19449] RAX: ffffffffffffffda RBX: 00007f1c23de6090 RCX: 00007f1c23b8f6c9
[ 1265.088202][T19449] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[ 1265.096151][T19449] RBP: 00007f1c23c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 1265.104112][T19449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1265.112056][T19449] R13: 00007f1c23de6128 R14: 00007f1c23de6090 R15: 00007ffcda4c9ad8
[ 1265.120081][T19449]  </TASK>
[ 1265.123416][T19449] Kernel Offset: disabled
[ 1265.127818][T19449] Rebooting in 86400 seconds..