last executing test programs:

23m14.731115413s ago: executing program 1 (id=1559):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfff8}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xdad, 0x7d, 0x2, 0x10, 0x7f, 0x6, 0x200, 0x1ff, 0x2005c, 0x9, 0x3, 0x2, 0x0, 0x6, 0xef95, 0x0, 0x2ad, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x8, 0x0, 0xc, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0xfffff951, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0xc, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x7, 0x1, 0x20000004, 0x82, 0x0, 0x44b, 0x7, 0x5, 0x4, 0x1, 0x40], [0x10000007, 0x2, 0x12f, 0x6, 0x10, 0xfffffff7, 0x129432e6, 0xfffffffe, 0xf9, 0xd, 0x2bf, 0x48a, 0x1000, 0xfffffffc, 0x5, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0x7f, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x5, 0xfb, 0x5, 0x800, 0x5f31, 0x4, 0x1, 0x2, 0x1, 0x20006, 0x4, 0xd, 0x8, 0xf, 0x6, 0x0, 0xa, 0x3, 0x9, 0x2009, 0x2, 0x7f, 0x9, 0x101, 0x3, 0x9, 0xffffffff, 0x17, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x26, 0x80000000, 0x4, 0x7f, 0x400000ff, 0x8cf, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1a619c23, 0x0, 0x1f0, 0x6, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xb4a, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x2006, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff5, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x20003, 0x0, 0x1, 0xffff, 0x0, 0x9d, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x7, 0x7, 0x5, 0x1, 0x6, 0x5, 0x2, 0x3, 0x80ce7, 0x1ff, 0x3, 0x5, 0x5, 0x1003, 0x101, 0xfffe, 0x6, 0x7ffb, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4, 0x15c, 0x60a7, 0xfffff800, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x800, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x1, 0x1, 0x40007, 0x1, 0x6c1e, 0xfffffffe, 0x4, 0x8, 0xb1c, 0x1, 0x1fc, 0xffff3444, 0xfff]}, 0x45c)
readv(r0, &(0x7f0000000940)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000880)=""/168, 0xa8}], 0x5)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
io_setup(0x443, &(0x7f0000001100)=<r3=>0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0)
io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x5}])
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000a80)={@empty, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff, 0x38f, 0x9, 0x100, 0x6, 0x10000, r4})
r5 = io_uring_setup(0x3581, &(0x7f0000000100)={0x0, 0xa9db, 0x10000, 0x3, 0x291})
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f54}]}}}]}, 0x3c}}, 0x40)

23m11.632522229s ago: executing program 1 (id=1569):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x1})
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280))
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000140)={r0, 0x0, 0x800, 0x40, 0x100000001, 0x4, [0xc2, 0x5, 0x6, 0x8, 0x9, 0x4]})
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5ea", 0xbf}, {0x0}, {0x0}], 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = signalfd(r3, &(0x7f0000000340)={[0xabed2e56]}, 0x8)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'})
syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$UHID_CREATE2(r4, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xe5, 0x6, 0x6, 0x10000, 0xfffff83b, 0xd, "14311500226e3821a35023156a3193e98b41dadab38c39817dde4074edf2badea7a6a07de11b6822ac83b4f1438c3dad3866463525113f23571d0eb0b5480012658ae5a775de6f1283a77bc94c796a4b514bb40bf4ee6a65e19ab59fef72e6aaf0301b6c55c2087f92a8e2178799642f709379b98325e0003f8a0651d5a556576b00516ae081eb67b080ce8df8833797ce2dc68f38fc394b3ed0840c91bc7c9514ec6586f7264596c0321f2316de272eccf6a853da26392c0bd17ec97d2e5b82d8fec565447cdf0a74b460c56b7193b88260ec458a534776c1f6257a8bc9b679b2c662e232"}}, 0x1fd)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

23m10.575861568s ago: executing program 1 (id=1570):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$dri(0x0, 0x202, 0x521941)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000300)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x14})
setns(0xc9, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010428bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c0012800800010067747000300002", @ANYRES32, @ANYBLOB="080002", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x480c4)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0xfffffff3, 0x4}, 0x10)
write(r5, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000500)=ANY=[@ANYBLOB="448168af4bb5c5628ca0e3cd0091d21d0b0000000000000067c65999b59c4110110f65d8a4f1c53c4879e4e59db6c19975268aaf486474bb658f6dae290adb0a0a17dd0533b993c05d650100000000000000be241150d9015e3852b41c60a918be25fb9e385101129ad3d2bec131ec04c4823aeb41e2f6d47ea338b2053f8b6e4e4a946cd721cd3630385281fa382e05d3dbf27e4f250a0a2bf61e0873e263624d224aeac6d74b0a7ee1222d0392bea9c2dfb5f761b648b385c91548d9f4d8343e0d6c307b56b06d490f19185ee4990a71858fb70173da35e045f65cdbd7c8e54b1fba8599332136720cb6f0ea6e8564d5689c", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00008000000600110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x40010)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68)

23m10.12539896s ago: executing program 1 (id=1575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

23m10.025497037s ago: executing program 1 (id=1576):
setns(0xc9, 0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r5 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)

23m8.898617219s ago: executing program 1 (id=1578):
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x119)
inotify_init1(0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x10041)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file2\x00', &(0x7f0000000280)='fuseblk\x00', 0x8080, &(0x7f00000002c0)='/%-/\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

22m53.714715635s ago: executing program 32 (id=1578):
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x119)
inotify_init1(0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x10041)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file2\x00', &(0x7f0000000280)='fuseblk\x00', 0x8080, &(0x7f00000002c0)='/%-/\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

21m17.48222983s ago: executing program 5 (id=1763):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x1})
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280))
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000140)={r0, 0x0, 0x800, 0x40, 0x100000001, 0x4, [0xc2, 0x5, 0x6, 0x8, 0x9, 0x4]})
writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5ea", 0xbf}, {0x0}, {0x0}], 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = signalfd(r2, &(0x7f0000000340)={[0xabed2e56]}, 0x8)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000})
r4 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253})
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'})
syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$UHID_CREATE2(r3, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xe5, 0x6, 0x6, 0x10000, 0xfffff83b, 0xd, "14311500226e3821a35023156a3193e98b41dadab38c39817dde4074edf2badea7a6a07de11b6822ac83b4f1438c3dad3866463525113f23571d0eb0b5480012658ae5a775de6f1283a77bc94c796a4b514bb40bf4ee6a65e19ab59fef72e6aaf0301b6c55c2087f92a8e2178799642f709379b98325e0003f8a0651d5a556576b00516ae081eb67b080ce8df8833797ce2dc68f38fc394b3ed0840c91bc7c9514ec6586f7264596c0321f2316de272eccf6a853da26392c0bd17ec97d2e5b82d8fec565447cdf0a74b460c56b7193b88260ec458a534776c1f6257a8bc9b679b2c662e232"}}, 0x1fd)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

21m14.12066555s ago: executing program 5 (id=1768):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3b2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

21m13.395364437s ago: executing program 5 (id=1769):
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001cc0)=""/225, 0xe1}], 0x2}, 0x800}], 0x1, 0x2, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x0, '\x00', @b})
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

21m12.21081026s ago: executing program 5 (id=1771):
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000001cc0)=""/225, 0xe1}], 0x2}, 0x800}], 0x1, 0x2, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x0, '\x00', @b})
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

21m10.944099135s ago: executing program 5 (id=1773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000432000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\xecW\xeb')
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
syz_open_procfs(r0, &(0x7f00000000c0)='attr/current\x00')

21m9.918417961s ago: executing program 5 (id=1777):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000005c0)=0x9)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='sou{V\x99', &(0x7f0000000740)='%\xff:2\x82|\xda\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xf5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7q\x1c\xc8\x8a\xb9l\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$eU\xc6\xd9@\xf3KUq\xcb\xbf\x86Eb;&\x0e\\\x13\xd4>U=l0Z\x88\xc1\x8f\xb4\xf0\x88C\xf7/\xb2B\xe2\x0f\xdb\xf51\xd3\xdf\xed\xf7\xfe\x9c\xd9\x94\x94\xdec\x01\x88\xd5\xe5\xf5Y\xbc_\x9a\xb5Y\xb21Ps\xb4\x99\x8e\xf0B\x1b \xcb\xd3n\x85\xc6S\xf9N\xf9\x1d\x8a\x1f~\b\xfdT\xf1i\x85\xcdg[i\x14p\x19\xf5C;\\z,\xc9\x06\xd8}\x13\xf0\xb4R\xc8\xd7\x0e\xd4J`\x1b\xaecE\xba\x9e\x90A}\x98qY%\x81\x95p\xa1\xee\xb8\x1c&k/s\xf4t\xbf{\x18TwtF\xbd\xbd\xb8\x15\xe9\xa3\x9c\\\xa8\x9ex\xda97Bc/\x12\x9f\x14_\t\xcei,J+\x90\xb2\x0fs.\f(yA3\'1\xfa\xdc\b\xa83s8\x88x\xc8\xc3\xca\xf8\b&1\xeb\xf9P', 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
r6 = dup2(r5, r5)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0xfffffdef)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])

20m54.667253s ago: executing program 33 (id=1777):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000005c0)=0x9)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='sou{V\x99', &(0x7f0000000740)='%\xff:2\x82|\xda\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xf5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7q\x1c\xc8\x8a\xb9l\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$eU\xc6\xd9@\xf3KUq\xcb\xbf\x86Eb;&\x0e\\\x13\xd4>U=l0Z\x88\xc1\x8f\xb4\xf0\x88C\xf7/\xb2B\xe2\x0f\xdb\xf51\xd3\xdf\xed\xf7\xfe\x9c\xd9\x94\x94\xdec\x01\x88\xd5\xe5\xf5Y\xbc_\x9a\xb5Y\xb21Ps\xb4\x99\x8e\xf0B\x1b \xcb\xd3n\x85\xc6S\xf9N\xf9\x1d\x8a\x1f~\b\xfdT\xf1i\x85\xcdg[i\x14p\x19\xf5C;\\z,\xc9\x06\xd8}\x13\xf0\xb4R\xc8\xd7\x0e\xd4J`\x1b\xaecE\xba\x9e\x90A}\x98qY%\x81\x95p\xa1\xee\xb8\x1c&k/s\xf4t\xbf{\x18TwtF\xbd\xbd\xb8\x15\xe9\xa3\x9c\\\xa8\x9ex\xda97Bc/\x12\x9f\x14_\t\xcei,J+\x90\xb2\x0fs.\f(yA3\'1\xfa\xdc\b\xa83s8\x88x\xc8\xc3\xca\xf8\b&1\xeb\xf9P', 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
r6 = dup2(r5, r5)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0xfffffdef)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])

18m16.844640027s ago: executing program 3 (id=2118):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

18m16.055100269s ago: executing program 3 (id=2121):
r0 = socket$inet6(0xa, 0x1, 0x7f)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, 0xffffffffffffffff, 0xfe, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x1000, [0xc5eb, 0x5, 0x1, 0xcff9, 0x4, 0x81], 0x1, &(0x7f00000000c0)=[{}], &(0x7f00000003c0)=""/4096}, &(0x7f0000001440)=0x78)
bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x2, 0x0, 0x2}}, 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="320002b100000000"], 0x8)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)

18m12.837363968s ago: executing program 3 (id=2129):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0)
read(r2, &(0x7f0000000400)=""/256, 0x100)
io_uring_register$IORING_REGISTER_FILES(r1, 0x25, &(0x7f0000000000)=[r1], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d")
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x2004c000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)

18m11.445798567s ago: executing program 3 (id=2133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0001f1ff07000800ffd000000000cde1d36283c9c4fb74dab28618ff503e0d102bad18820402e9abffba95c8b150a61e68165079a4650b3e3f286936cd36a18fdecba5b399febcf1cdafbb88adbdfbd4ea6194aeb140f6f246d6994e7f6c43600c7595d4e199b82592e83d1ab7bf5e81dc8270f3cfa8485c5d65782285e92e8095c79f650fc5ad96b12246066ba9b40d1a8974397843548a7580030b647cd513830cceb64293ebb9d5a7bfe185cb145bc5dad1db495084b3fac53a4e0cc14d180fe70f2eecd961dfbf0e10c2454cf3df33000000000000000000"], 0xde)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/profiling', 0x202, 0x18)
r5 = timerfd_create(0x9, 0x0)
timerfd_settime(r5, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x67}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x59ea, 0xaf, &(0x7f0000000180)=""/175, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
pread64(r3, &(0x7f00000002c0)=""/124, 0x7c, 0x7)
preadv(r2, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x25, 0x100, 0x400)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r6 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x1c2)
socket$nl_generic(0x10, 0x3, 0x10)

18m7.954030849s ago: executing program 3 (id=2138):
unshare(0x28000600) (async, rerun: 32)
unshare(0x20040280) (rerun: 32)

18m7.491300006s ago: executing program 3 (id=2139):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x1000000, 0x0)

17m51.927895984s ago: executing program 34 (id=2139):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x1000000, 0x0)

15m3.657389465s ago: executing program 2 (id=2431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x26)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

15m1.817009946s ago: executing program 2 (id=2433):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xfd, 0x0, 0x42}, 0x10)
setns(0xc9, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00')
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x103080)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x10701, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendfile(r0, r1, &(0x7f0000000100)=0x5, 0xff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01003400000000000000000000000000000003000000002e009d4743f1a9e42cff35e18a35cab8a9"], &(0x7f00000001c0)=""/238, 0x1b, 0xee, 0x0, 0x4}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @loopback, @remote}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x606d, 0x0, 0x1ff}}}}}}, 0x0)
add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000002c80)={'syz', 0x1}, &(0x7f0000002cc0)='5', 0x1, 0xfffffffffffffffe)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000001580)={0x2020}, 0x2020)

14m59.846018792s ago: executing program 2 (id=2438):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x26)
r6 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

14m58.047647672s ago: executing program 2 (id=2442):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
fcntl$setpipe(r0, 0x407, 0xf9)

14m54.113712345s ago: executing program 2 (id=2449):
setns(0xc9, 0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)

14m52.92300419s ago: executing program 2 (id=2451):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000554000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000027d000/0x3000)=nil, &(0x7f0000a16000/0x4000)=nil, &(0x7f000084e000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x21b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000040000006d7eff7fd8000000950000000000000038484492a684227429f7c9f1c6a1e56af3a695dd88d9a0abca86e63c3ee43a03090000081ff0e39faaca71ef2c1d4e17784f934b8dfb526700050000009993b547bfac2f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x7, 0x3833, 0x3e}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0], 0x0, 0x10, 0x4}, 0x94)
socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)

14m37.646680384s ago: executing program 35 (id=2451):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000554000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000027d000/0x3000)=nil, &(0x7f0000a16000/0x4000)=nil, &(0x7f000084e000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x21b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000040000006d7eff7fd8000000950000000000000038484492a684227429f7c9f1c6a1e56af3a695dd88d9a0abca86e63c3ee43a03090000081ff0e39faaca71ef2c1d4e17784f934b8dfb526700050000009993b547bfac2f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x7, 0x3833, 0x3e}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r0], 0x0, 0x10, 0x4}, 0x94)
socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)

4m43.782053942s ago: executing program 8 (id=3652):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r10, &(0x7f0000000180)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x8e, "3202c6f00c4187bf034ac169de5dfbc60057be4767a5b0d32e7251bfdaa26fa986ac39183e44b1e4c95e991883bcc625628b07c6321f1421c90ab922d151c0ec11629c37426f7a780a0a5bfad39707d35025df5dde50d0fac73e3672a1c030fa0bda1e8ff5421fc8d1aa903ff846e67acd66c887fd5146e544549aafe567b70ecc10d9a5271285434dbd875dd2af"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x81, 0x3, "aa7ad2"}, &(0x7f00000000c0)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000500)={0x20, 0x83, 0x3, '!Na'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, '\x00\x00'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "a1f00b"}})
syz_usb_control_io$lan78xx(r10, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x21, 0x5b, {0x5b, 0xb, "58d1aa3c7a3bbfad4944708e85278725c0f846ff5fc91911c92725aefc9070396b8c7524e81cf9998104de7e9c7840b425e547014d6279d854d2d681d6e3b6a57ef03cf844560eadcf3dfe9aec928901e854483038da9a22da"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x1, 0x15, "4a25b3638c7d96a7056140ea9c3661fc2018d5cfb6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "a5274f035d51710a0a7d66e0103b803ab0808daf1c86df911eb9c55858f124fc0f273ed2c6b43c16e41664ab9abe17"}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)

4m38.360160282s ago: executing program 8 (id=3667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4m37.159427149s ago: executing program 8 (id=3669):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x800, 0x0)
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c)
writev(r3, &(0x7f0000001200), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000001580), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001ac0)={0x7, @pix_mp={0x7, 0xffff, 0x20493859, 0x6, 0x6, [{0x830, 0x4}, {0x4}, {0x7ff, 0xff}, {0x5, 0xfffffffe}, {0x6}, {0x0, 0x8}, {0xc66, 0x3}, {0x2, 0x10000}], 0x9, 0x9, 0x4, 0x1}})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r8, &(0x7f0000004000)=""/4099, 0x1003)

4m35.751055864s ago: executing program 8 (id=3672):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r8 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
fcntl$setpipe(r0, 0x407, 0xf9)

4m32.314648521s ago: executing program 8 (id=3679):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = fanotify_init(0xf00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x6, 0x0, 0x8}}, 0xff76)
fanotify_mark(r1, 0x1, 0x800002b, 0xffffffffffffffff, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0xffc99a3b, 0x0, 0x6, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3, 0x0, 0xffffffff})
r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])

4m27.884009099s ago: executing program 8 (id=3687):
read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000))
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000180)={0x3, 0x3, 0x40})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x20008002)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc10c5541, &(0x7f0000000040)=0x94d9)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000000c0)={0xb, 0x2, 0x1000, 0x6})
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')

4m12.249801402s ago: executing program 36 (id=3687):
read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000))
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000180)={0x3, 0x3, 0x40})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x20008002)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc10c5541, &(0x7f0000000040)=0x94d9)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000000c0)={0xb, 0x2, 0x1000, 0x6})
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')

44.0398376s ago: executing program 7 (id=4137):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r10, &(0x7f0000000180)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x8e, "3202c6f00c4187bf034ac169de5dfbc60057be4767a5b0d32e7251bfdaa26fa986ac39183e44b1e4c95e991883bcc625628b07c6321f1421c90ab922d151c0ec11629c37426f7a780a0a5bfad39707d35025df5dde50d0fac73e3672a1c030fa0bda1e8ff5421fc8d1aa903ff846e67acd66c887fd5146e544549aafe567b70ecc10d9a5271285434dbd875dd2af"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x81, 0x3, "aa7ad2"}, &(0x7f00000000c0)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000500)={0x20, 0x83, 0x3, '!Na'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, '\x00\x00'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "a1f00b"}})
syz_usb_control_io$lan78xx(r10, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x21, 0x5b, {0x5b, 0xb, "58d1aa3c7a3bbfad4944708e85278725c0f846ff5fc91911c92725aefc9070396b8c7524e81cf9998104de7e9c7840b425e547014d6279d854d2d681d6e3b6a57ef03cf844560eadcf3dfe9aec928901e854483038da9a22da"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x1, 0x15, "4a25b3638c7d96a7056140ea9c3661fc2018d5cfb6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "a5274f035d51710a0a7d66e0103b803ab0808daf1c86df911eb9c55858f124fc0f273ed2c6b43c16e41664ab9abe17"}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)

38.609799345s ago: executing program 7 (id=4143):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

37.342160201s ago: executing program 7 (id=4147):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='pimreg1\x00', 0x10)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24044080)

36.106762447s ago: executing program 7 (id=4150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

34.207163419s ago: executing program 7 (id=4151):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xfd, 0x0, 0x42}, 0x10)
setns(0xc9, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00')
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x10701, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
sendfile(r0, r1, &(0x7f0000000100)=0x5, 0xff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01003400000000000000000000000000000003000000002e009d4743f1a9e42cff35e18a35cab8a9"], &(0x7f00000001c0)=""/238, 0x1b, 0xee, 0x0, 0x4}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @loopback, @remote}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x606d, 0x0, 0x1ff}}}}}}, 0x0)
add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000002c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000001580)={0x2020}, 0x2020)

32.624424786s ago: executing program 7 (id=4154):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x800, 0x0)
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c)
writev(r3, &(0x7f0000001200), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000001580), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001ac0)={0x7, @pix_mp={0x7, 0xffff, 0x20493859, 0x6, 0x6, [{0x830, 0x4}, {0x4}, {0x7ff, 0xff}, {0x5, 0xfffffffe}, {0x6}, {0x0, 0x8}, {0xc66, 0x3}, {0x2, 0x10000}], 0x9, 0x9, 0x4, 0x1}})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r8, &(0x7f0000004000)=""/4099, 0x1003)

16.794973512s ago: executing program 37 (id=4154):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x800, 0x0)
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c)
writev(r3, &(0x7f0000001200), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000001580), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001ac0)={0x7, @pix_mp={0x7, 0xffff, 0x20493859, 0x6, 0x6, [{0x830, 0x4}, {0x4}, {0x7ff, 0xff}, {0x5, 0xfffffffe}, {0x6}, {0x0, 0x8}, {0xc66, 0x3}, {0x2, 0x10000}], 0x9, 0x9, 0x4, 0x1}})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r8, &(0x7f0000004000)=""/4099, 0x1003)

16.758450649s ago: executing program 4 (id=4186):
r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000000))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socket$alg(0x26, 0x5, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9)
eventfd2(0x5, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4000000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)

14.521031212s ago: executing program 4 (id=4188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

14.456357102s ago: executing program 9 (id=4189):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r9, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r11, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

14.299118708s ago: executing program 4 (id=4191):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
r3 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7})
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)
readv(0xffffffffffffffff, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000080))
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

12.576653932s ago: executing program 4 (id=4193):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r10, &(0x7f0000000180)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x8e, "3202c6f00c4187bf034ac169de5dfbc60057be4767a5b0d32e7251bfdaa26fa986ac39183e44b1e4c95e991883bcc625628b07c6321f1421c90ab922d151c0ec11629c37426f7a780a0a5bfad39707d35025df5dde50d0fac73e3672a1c030fa0bda1e8ff5421fc8d1aa903ff846e67acd66c887fd5146e544549aafe567b70ecc10d9a5271285434dbd875dd2af"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x81, 0x3, "aa7ad2"}, &(0x7f00000000c0)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000500)={0x20, 0x83, 0x3, '!Na'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, '\x00\x00'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "a1f00b"}})
syz_usb_control_io$lan78xx(r10, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x21, 0x5b, {0x5b, 0xb, "58d1aa3c7a3bbfad4944708e85278725c0f846ff5fc91911c92725aefc9070396b8c7524e81cf9998104de7e9c7840b425e547014d6279d854d2d681d6e3b6a57ef03cf844560eadcf3dfe9aec928901e854483038da9a22da"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x1, 0x15, "4a25b3638c7d96a7056140ea9c3661fc2018d5cfb6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "a5274f035d51710a0a7d66e0103b803ab0808daf1c86df911eb9c55858f124fc0f273ed2c6b43c16e41664ab9abe17"}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)

12.366847754s ago: executing program 9 (id=4194):
r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000000))
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socket$alg(0x26, 0x5, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
eventfd2(0x5, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4000000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)

11.519698193s ago: executing program 6 (id=4196):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
r3 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x800, 0x20001, 0x2d7})
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)
readv(0xffffffffffffffff, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000080))
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

10.24521235s ago: executing program 9 (id=4198):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x3, "a5add5"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000dc0)={0x0, 0x14, 0x8, "4455d595974a1087"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x79, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0xf, 0xc0, 0x80, "", [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "84"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x3ff, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x36, 0xbf, [0x7, 0x7, 0x1000]}, @obex={0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x7f, 0x40}, @acm={0x4, 0x24, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x54, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x3, 0xfa}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x2, 0x4, 0x4, 0xff}, 0xc3, &(0x7f0000000100)={0x5, 0xf, 0xc3, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x21, 0x1a, 0x9, 0x6}, @generic={0x8b, 0x10, 0xb, "b63bdc327720cab3e222fb3ddaf82dc8c802f2913b78e79606919fa27a7350cafd5b91c3d121b5d8c63523d621da11f4b3a288d118f15887eb66fa09d6247c282e34fb6d66d523c8599b0bdc597dcea00a9bc4c030a30e77ff759b95f9c37dfb04972b3975ece729ca583a38f7df45c4b922a77528f0063240bef4e8405187adacdbb2d383dedf7a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb, 0x2, 0xcb8}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x4, 0xf, 0x3, [0xff00, 0x3f00]}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x4040)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r2 = creat(0x0, 0xc9028ba210c11f88)
creat(0x0, 0x15)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x7, 0x0, [{0x80000008, 0x3, 0x2, 0x1, 0x200, 0xf4e, 0x3}, {0x1, 0x10000, 0x1, 0x6, 0x7f, 0x8, 0x3}, {0x40000001, 0x9, 0x2, 0x8, 0x7ff, 0x5, 0x4}, {0xb, 0x7, 0x5, 0x30011dce, 0x7, 0x7, 0x7fff}, {0x8d0d1d7ed734f3d6, 0x3, 0x3, 0x2, 0x6, 0x9, 0x7}, {0x1, 0xbd1, 0x0, 0x0, 0x5, 0x123, 0xcc}, {0x40000000, 0x1, 0x0, 0x100, 0x7, 0x7fff, 0xfffffffb}]})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"])
io_setup(0x6, &(0x7f0000000d80)=<r4=>0x0)
r5 = eventfd2(0x83, 0x80001)
io_submit(r4, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r5, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r5}])

8.287195881s ago: executing program 6 (id=4199):
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000554000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000027d000/0x3000)=nil, &(0x7f0000a16000/0x4000)=nil, &(0x7f000084e000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x21b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x1, 0x3)
write(r4, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)

7.931184073s ago: executing program 0 (id=4201):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1, 0x1002}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x5, 0x1, 0x3})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000002cc0)={0x0, 0x1000, &(0x7f0000001cc0)=""/4096})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff37, 0xd4}, 0x94)

7.305994367s ago: executing program 6 (id=4202):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

7.185444138s ago: executing program 0 (id=4203):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c00028005002300000000000800", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r8 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
fcntl$setpipe(r0, 0x407, 0xf9)

5.585336172s ago: executing program 0 (id=4204):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r11, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

5.581565592s ago: executing program 9 (id=4205):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
listen(0xffffffffffffffff, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

5.538760847s ago: executing program 6 (id=4206):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r7=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r9, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r11, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

4.444261396s ago: executing program 4 (id=4207):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

4.422325764s ago: executing program 9 (id=4208):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x80000)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe74)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000000140)="0a74e2", 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b405000000fb2f88ccd6d7a0385c504c3e6100004708990e54114f5fc7b10b9e007112180000000000bc3010"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x2f9e, 0x200, 0x2, 0x159}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9273, 0x4, 0x1, 0x336, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf424, 0x8000, 0x2, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc670, 0x40000, 0x3, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb49c, 0x20, 0x2, 0x23e}, 0xffffffffffffffff, 0x0, <r9=>0x0}], 0x4, &(0x7f0000001dc0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x97f, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40))
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r9, 0x0, &(0x7f0000002300)=@IORING_OP_SENDMSG_ZC={0x30, 0x4b, 0x4, r0, 0x0, &(0x7f00000022c0)={&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000002180), 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="d800000000000000840000000f00000054c9b3819b20d121f9ad853c4e55f0255af68e262c3b80947670d0766a51511e9eaede76cc69c93f465c7e071997c75f812baf3923ad5c8a3bbbcd9f18d864bbaf75b81f8808c877bcdff8618b192a60675aae02db79c7f663294b2a9d39974f1be21ceeecf38cb11b21e0b086b0f8813e6de05ccce201a8dce649df6b2086f9ec432fe10a72eb257276d896f87e9f149cd04ac2069d2723e1b36ed17d3c360ebd64ebbc2b627f217cf28672e6e9a7f4edb198543c9b67e2421c88652fed287ff427aa173d2e347b"], 0xd8}, 0x8, 0x4000, 0x0, {0x0, r10}})
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100))
syz_emit_ethernet(0xe7, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0)
syz_ublk_setup_io_uring(0x2d69, &(0x7f00000001c0)={0x0, 0xbf64, 0x609, 0x2, 0x2de}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000006c0))
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]})
close_range(r11, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)

4.253047871s ago: executing program 0 (id=4209):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda", 0xc, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6800000000000000170100000200000050000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f40000000018e4ffffffffffff160100000400000006"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8", 0x58}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x80, "", [{{0x9, 0x4, 0x0, 0x5d, 0x1, 0x3, 0x1, 0x1, 0x82, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xb57}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x0, 0x9, 0x6, 0x20, 0x3e}, 0x10d, &(0x7f0000000600)={0x5, 0xf, 0x10d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x2, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x2}, @generic={0xfa, 0x10, 0xb, "5e87ed9ef3a4b345ab063ace5b22ea5b9279a230a35fb857a3751a9cf270431b8dfbc6b7caaff2af432a35e291490a440074e84b7a2a8cd7902e5f7be757d98abe97760c5a7f0b80dd3f647b2ed47fdbcdf80ac407901cc70ed595936bfdce9082372c655520fa657c37bdde56c33e231facdded10c35170c5e753715db1b06a176d668a472a6ba5ea2a3cf89e716407b7beef540761ff29eca5fbe1126c8afd196a58077e8d9a0d270af6c34618f28e4fed16f57493e40e35c58c3c8f35eb74caeb51d1d12e598d48271752ea6db7bd4c2f5aa276b31a4b70e9a9c91b70ab18492dd3b7be3cc90b3fd66a0a4cf0cb4d15f4bc0c794dbd"}]}, 0x7, [{0x47, &(0x7f0000000740)=@string={0x47, 0x3, "82f5da9e6f9c650e383ed28a9dc1ab22bbb4f45f57c79260c4d2ecc1957c0c9c89e1c9cb333d322e845a4bf25b711e93ff49ee99aea315f7de439eac9232c4d0a6d6aeec14"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42c}}, {0xc3, &(0x7f0000000c00)=@string={0xc3, 0x3, "b60c7c2c0b14158d780af76430e1d64b59e1076b22af6cbc7d3523c218bc0159874b185b069622fa226e7c48276600e1abb04f1443c1a12f94889b87490d38077aab5f708edc45b381e07cdc902829b2b8bf11157e4777667d625fb447263c3aca58c39b342ac6ee9f3a589b641ab0eafa37d657f7cc763485b5b27650f498d378653521055cc997a68b916fb01fdceceae868169fddb2a77777f187b449cd52e01590edd639c7a56279d94d53359978fad5bf68071ec27706cd882cdc5fcd72fe"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x7045}}]})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.720146702s ago: executing program 4 (id=4210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r10, &(0x7f0000000180)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xe, 0x8e, "3202c6f00c4187bf034ac169de5dfbc60057be4767a5b0d32e7251bfdaa26fa986ac39183e44b1e4c95e991883bcc625628b07c6321f1421c90ab922d151c0ec11629c37426f7a780a0a5bfad39707d35025df5dde50d0fac73e3672a1c030fa0bda1e8ff5421fc8d1aa903ff846e67acd66c887fd5146e544549aafe567b70ecc10d9a5271285434dbd875dd2af"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x81, 0x3, "aa7ad2"}, &(0x7f00000000c0)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f0000000500)={0x20, 0x83, 0x3, '!Na'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, '\x00\x00'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "a1f00b"}})
syz_usb_control_io$lan78xx(r10, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0x21, 0x5b, {0x5b, 0xb, "58d1aa3c7a3bbfad4944708e85278725c0f846ff5fc91911c92725aefc9070396b8c7524e81cf9998104de7e9c7840b425e547014d6279d854d2d681d6e3b6a57ef03cf844560eadcf3dfe9aec928901e854483038da9a22da"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x1, 0x15, "4a25b3638c7d96a7056140ea9c3661fc2018d5cfb6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "a5274f035d51710a0a7d66e0103b803ab0808daf1c86df911eb9c55858f124fc0f273ed2c6b43c16e41664ab9abe17"}})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)

2.597073424s ago: executing program 9 (id=4211):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
syz_open_dev$usbfs(0x0, 0x205, 0x420401)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8j<K\x14B\xbcG\xf8\x02Q\xce\xd6\xfdi\x93\xbaT\xe3f\x01\x1c\b8jC5bi\x88h\x18\x92\xad\x16\xe0\xd2M[\x1f\xe3|\xc7\xd7\x06\x97\xba\xf2\x98\xe4G\xf9\xae?\xdaO\x94fn\xc1\x0e\xc4\xcei\xf4\xa8\xd7\xe5\xf9\x9f\x01W\xf5\xd2\xdc\xc4\xfd\xd9\x85\x15\x06\xef\x11\xef\t*\xc6\x88\xadxh\a\xa7\x9b\xd8;\xd6\x85K\xc6\vm\x10\x94\xe4\x94uk\x11\xba\xaaL\b8\xac4\xd3w\x1cP\xf8\x8bG(<\xe6\xd0\xb4\x0e\xbcQ\xc2\xc3\x030\xbc\xab\x8d\xe4\x05\x05E\bK\xd2\xf3\xb0\xbf1\xdc\xc1\x03t\xff\x94\x17', 0x3a, '/debus/usb/00#/00#\x00\x00\x00\'\xcc\xa0Xf\x88TJ\x00\x00\x00\x00\xf1\xbaqCn\xb5]3u\x0f\xf6v\xf6\xde\xe60\xc2\xc4\xd1K\xef\xffZ\a%xie\x1f\x00\x84\x00\x00\x00\x00\x00\x00\x00\x04\xeb\x94b\xb3*\xe6\x97\xd5\x98\x17~\x91\xb6E`\xf5R\xd7\x1aT\r\x8b\x9b\xbeL\\c\x15CS#LsK\xa4\xc7_\xc7\xef\xa9\xf7\x8a\x12\xcd\xc2\xac\x89N\xbf>N\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0)
chroot(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000300010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r4], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d010000100000000000800700000000000038040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

2.365226406s ago: executing program 6 (id=4212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}]}, 0xa4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="050427bd70e7fddbdf2503"], 0x98}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4000084)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x8050)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

1.515189279s ago: executing program 0 (id=4213):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x310, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xcc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "0ec902769de0b4585f562e781266e35f3c22d99bbdf42254af64eea29353e088c37a3a95c97819ba681ac400d9448fb4a938ed1c2c36c6146a86817186bcb09784c97e20e18d29b505c892d1f1c19282cc37f079b4da4e5cce2dfcf5ff71562b14e87b528ac6cb1ec15c8905e24a505dc6389186ba3eeaa5fa9807cfca57427b4da7936bac8a965bf1bd4224b7d4118c3d0928d4e5e30a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r12, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

532.518524ms ago: executing program 0 (id=4214):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x3, "a5add5"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000dc0)={0x0, 0x14, 0x8, "4455d595974a1087"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x79, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0xf, 0xc0, 0x80, "", [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "84"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x3ff, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x36, 0xbf, [0x7, 0x7, 0x1000]}, @obex={0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x7f, 0x40}, @acm={0x4, 0x24, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x54, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x3, 0xfa}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x2, 0x4, 0x4, 0xff}, 0xc3, &(0x7f0000000100)={0x5, 0xf, 0xc3, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x21, 0x1a, 0x9, 0x6}, @generic={0x8b, 0x10, 0xb, "b63bdc327720cab3e222fb3ddaf82dc8c802f2913b78e79606919fa27a7350cafd5b91c3d121b5d8c63523d621da11f4b3a288d118f15887eb66fa09d6247c282e34fb6d66d523c8599b0bdc597dcea00a9bc4c030a30e77ff759b95f9c37dfb04972b3975ece729ca583a38f7df45c4b922a77528f0063240bef4e8405187adacdbb2d383dedf7a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb, 0x2, 0xcb8}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x4, 0xf, 0x3, [0xff00, 0x3f00]}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x4040)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r2 = creat(0x0, 0xc9028ba210c11f88)
creat(0x0, 0x15)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x7, 0x0, [{0x80000008, 0x3, 0x2, 0x1, 0x200, 0xf4e, 0x3}, {0x1, 0x10000, 0x1, 0x6, 0x7f, 0x8, 0x3}, {0x40000001, 0x9, 0x2, 0x8, 0x7ff, 0x5, 0x4}, {0xb, 0x7, 0x5, 0x30011dce, 0x7, 0x7, 0x7fff}, {0x8d0d1d7ed734f3d6, 0x3, 0x3, 0x2, 0x6, 0x9, 0x7}, {0x1, 0xbd1, 0x0, 0x0, 0x5, 0x123, 0xcc}, {0x40000000, 0x1, 0x0, 0x100, 0x7, 0x7fff, 0xfffffffb}]})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"])
io_setup(0x6, &(0x7f0000000d80)=<r4=>0x0)
r5 = eventfd2(0x83, 0x80001)
io_submit(r4, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r5, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r5}])

0s ago: executing program 6 (id=4215):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c00028005002300000000000800", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x26)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r8 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000300)={{0xb, 0x2}, 'port0\x00', 0x45, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x0, 0x1, 0x3})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
fcntl$setpipe(r0, 0x407, 0xf9)

kernel console output (not intermixed with test programs):

0: Opcode 0x0c1a failed: -4
[ 2140.175669][T21176] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2140.226820][T21176] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2140.250824][T21176] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2140.282124][T21176] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2140.807894][T21193] netlink: 'syz.4.3503': attribute type 10 has an invalid length.
[ 2140.894911][T21194] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3503'.
[ 2141.365039][T12461] usb-storage 1-1:4.201: USB Mass Storage device detected
[ 2141.413250][T12461] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[ 2141.463450][T21195] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2141.463450][T21195] 
[ 2142.080145][T21205] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3505'.
[ 2142.570979][   T50] Bluetooth: hci5: command 0x041b tx timeout
[ 2142.570999][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2142.571033][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2142.577102][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[ 2142.583120][T14133] Bluetooth: hci1: command 0x041b tx timeout
[ 2142.697264][T21202] binder: 21200:21202 ioctl c4089434 200000000c80 returned -22
[ 2142.707532][T21202] binder: 21200:21202 ioctl c4009420 2000000010c0 returned -22
[ 2142.717027][T12461] usb 1-1: USB disconnect, device number 81
[ 2143.267440][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3504'.
[ 2143.934807][T12478] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2144.098362][T12478] usb 1-1: Using ep0 maxpacket: 8
[ 2144.135370][T12478] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2144.174333][T12478] usb 1-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config
[ 2144.205012][T12478] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2144.246393][T12478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2144.246739][T21228] binder: BINDER_SET_CONTEXT_MGR already set
[ 2144.260862][T12461] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 2144.294754][T21228] binder: 21227:21228 ioctl 4018620d 200000000040 returned -16
[ 2144.300655][T12478] usbtmc 1-1:16.0: bulk endpoints not found
[ 2144.413940][T21228] syz.7.3513 (21228): drop_caches: 2
[ 2144.454762][T12664] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 2144.466904][T12461] usb 5-1: Using ep0 maxpacket: 8
[ 2144.474016][T12461] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2144.501566][T12461] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 2144.523557][T12461] usb 5-1: config 179 has no interface number 0
[ 2144.541156][T12461] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2144.555881][T12461] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2144.586576][T12461] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2144.605900][T12664] usb 9-1: device descriptor read/64, error -71
[ 2144.624761][ T5786] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 2144.944443][T21235] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2144.952849][T21235] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2144.972217][T21235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2144.987870][T21235] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2144.989478][ T5740] usb 1-1: USB disconnect, device number 82
[ 2145.007454][T12461] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2145.051077][T21235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2145.061770][T12461] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2145.079929][T12461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2145.102446][T21224] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2145.153070][ T5786] usb 8-1: device descriptor read/64, error -71
[ 2145.204234][T12664] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 2145.338021][T12461] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19
[ 2145.348705][T12664] usb 9-1: device descriptor read/64, error -71
[ 2145.394352][ T5786] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[ 2145.464615][T12664] usb usb9-port1: attempt power cycle
[ 2145.547680][ T5786] usb 8-1: device descriptor read/64, error -71
[ 2145.668072][ T5786] usb usb8-port1: attempt power cycle
[ 2145.670160][T21243] netlink: 'syz.6.3516': attribute type 10 has an invalid length.
[ 2145.743725][T21244] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3516'.
[ 2146.493803][T12664] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 2146.544864][T12664] usb 9-1: device descriptor read/8, error -71
[ 2146.767739][ T5786] usb 8-1: new high-speed USB device number 66 using dummy_hcd
[ 2147.006845][T12332] Bluetooth: hci3: command 0x0419 tx timeout
[ 2147.006862][T14133] Bluetooth: hci5: command 0x041b tx timeout
[ 2147.006894][T14133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2147.044932][ T5786] usb 8-1: device descriptor read/8, error -71
[ 2147.064634][T14133] Bluetooth: hci1: command 0x041b tx timeout
[ 2147.064698][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2147.143286][T12664] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 2147.179090][T12664] usb 9-1: device descriptor read/8, error -71
[ 2147.313131][T12664] usb usb9-port1: unable to enumerate USB device
[ 2147.326329][ T5786] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[ 2147.678421][T21251] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2147.699329][T21251] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2147.753085][T12665] usb 5-1: USB disconnect, device number 79
[ 2147.753139][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2147.767378][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2147.777480][T21251] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2147.783576][T21251] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2147.789732][T21251] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2147.904292][ T5786] usb 8-1: device not accepting address 67, error -71
[ 2148.234438][ T5786] usb usb8-port1: unable to enumerate USB device
[ 2148.749889][T21273] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2148.749889][T21273] 
[ 2148.796243][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'.
[ 2149.142572][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2149.645676][T21293] netlink: 'syz.4.3527': attribute type 10 has an invalid length.
[ 2150.120648][T12332] Bluetooth: hci5: command 0x041b tx timeout
[ 2150.120676][T20384] Bluetooth: hci1: command 0x041b tx timeout
[ 2150.120754][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[ 2150.138862][T14133] Bluetooth: hci4: command 0x0419 tx timeout
[ 2150.345771][T21294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3527'.
[ 2150.934966][T21305] binder: BINDER_SET_CONTEXT_MGR already set
[ 2150.961808][T21305] binder: 21304:21305 ioctl 4018620d 200000000040 returned -16
[ 2151.165681][T21305] syz.7.3532 (21305): drop_caches: 2
[ 2151.421126][T17081] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[ 2151.481203][ T5786] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2151.601009][T17081] usb 8-1: device descriptor read/64, error -71
[ 2151.652142][ T5786] usb 1-1: Using ep0 maxpacket: 8
[ 2151.675277][ T5786] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2151.735153][ T5786] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 2151.812686][ T5786] usb 1-1: config 179 has no interface number 0
[ 2151.873684][T17081] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 2151.875778][ T5786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2151.922711][T21316] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2151.930695][T21316] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2151.939576][T21316] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2151.957074][T21316] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2151.986771][T21316] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2152.059587][T17081] usb 8-1: device descriptor read/64, error -71
[ 2152.121116][ T5786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2152.194826][T17081] usb usb8-port1: attempt power cycle
[ 2152.198650][ T5786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2152.330146][ T5786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2152.344785][ T5786] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2152.361113][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.407749][T21311] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2152.563696][T17081] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 2152.614929][T17081] usb 8-1: device descriptor read/8, error -71
[ 2152.694539][T21322] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2152.694539][T21322] 
[ 2152.856969][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3537'.
[ 2152.863108][ T5786] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20
[ 2153.148985][T17081] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 2153.330316][T17081] usb 8-1: device descriptor read/8, error -71
[ 2153.516724][T17081] usb usb8-port1: unable to enumerate USB device
[ 2153.940098][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2153.946224][   T50] Bluetooth: hci5: command 0x041b tx timeout
[ 2153.952641][T14133] Bluetooth: hci3: command 0x0419 tx timeout
[ 2154.019838][T14133] Bluetooth: hci1: command 0x041b tx timeout
[ 2154.026004][   T50] Bluetooth: hci4: command 0x0419 tx timeout
[ 2156.566770][T21342] netlink: 'syz.7.3541': attribute type 10 has an invalid length.
[ 2157.516730][T21343] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3541'.
[ 2158.327261][T21356] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2158.327261][T21356] 
[ 2158.857280][T21362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2158.867081][T21362] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2158.876225][T21362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2158.885914][T21362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2158.897330][T21362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2159.008117][ T5786] usb 1-1: USB disconnect, device number 83
[ 2159.014100][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2159.014135][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2159.432733][T21376] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2159.432733][T21376] 
[ 2159.479602][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3550'.
[ 2160.342797][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.358026][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2161.303382][T14133] Bluetooth: hci4: command 0x0419 tx timeout
[ 2161.303457][T12332] Bluetooth: hci5: command 0x041b tx timeout
[ 2161.309488][T20384] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2161.315476][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[ 2161.315520][   T50] Bluetooth: hci1: command 0x041b tx timeout
[ 2161.643155][T21392] netlink: 'syz.4.3555': attribute type 10 has an invalid length.
[ 2161.659561][T21392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3555'.
[ 2162.639665][T21400] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2162.775625][T21400] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2162.785299][T21400] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2162.795121][T21400] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2162.805680][T21400] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2163.965036][ T5786] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 2164.015934][   T30] audit: type=1400 audit(1786950633.426:797): avc:  denied  { append } for  pid=21417 comm="syz.7.3566" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 2164.140943][ T5786] usb 7-1: Using ep0 maxpacket: 8
[ 2164.153900][ T5786] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2164.201444][ T5786] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 2164.235025][ T5786] usb 7-1: config 179 has no interface number 0
[ 2164.266370][ T5786] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2164.441194][ T5786] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2164.610923][ T5786] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2164.674452][ T5786] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2164.732992][ T5786] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2164.814575][   T50] Bluetooth: hci1: command 0x041b tx timeout
[ 2164.821045][ T5614] Bluetooth: hci3: command 0x0419 tx timeout
[ 2164.824021][T20384] Bluetooth: hci5: command 0x041b tx timeout
[ 2164.827335][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2164.908285][T21434] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2164.908285][T21434] 
[ 2164.917686][ T5786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2164.958899][T21426] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2164.972707][T21411] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2165.013001][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3569'.
[ 2165.035709][T21426] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2165.058003][T21426] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2165.074677][T21426] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2165.087368][T21426] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2165.219492][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'.
[ 2165.266142][ T5786] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input21
[ 2165.614107][T21447] netlink: 'syz.8.3573': attribute type 10 has an invalid length.
[ 2166.044805][T21448] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3573'.
[ 2166.573477][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2167.053357][T12332] Bluetooth: hci3: command 0x0419 tx timeout
[ 2167.059699][T12332] Bluetooth: hci5: command 0x041b tx timeout
[ 2167.144259][   T50] Bluetooth: hci1: command 0x041b tx timeout
[ 2167.150874][   T50] Bluetooth: hci4: command 0x0419 tx timeout
[ 2169.248159][T21462] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 2172.806695][T17081] usb 7-1: USB disconnect, device number 43
[ 2172.806712][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2172.830432][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2173.876492][T21494] netlink: 'syz.8.3585': attribute type 10 has an invalid length.
[ 2173.894218][T21494] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3585'.
[ 2176.076322][T21511] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3591'.
[ 2178.273347][T21526] binder: 21523:21526 ioctl c0306201 0 returned -14
[ 2179.930795][T21546] netlink: 'syz.7.3599': attribute type 10 has an invalid length.
[ 2179.949567][T21546] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3599'.
[ 2181.906894][T12665] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 2183.627505][T21569] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3606'.
[ 2183.637519][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3606'.
[ 2183.646840][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3606'.
[ 2183.985037][T12665] usb 7-1: device descriptor read/64, error -71
[ 2184.356442][T12665] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2184.618919][T12665] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2184.733975][T12665] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2184.860681][T12665] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2185.027016][T12665] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2185.158752][T12665] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2185.331716][T12665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2185.625065][T21574] binder: 21572:21574 ioctl c0306201 0 returned -14
[ 2186.083994][T21583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3611'.
[ 2186.228921][T21589] netlink: 'syz.0.3612': attribute type 10 has an invalid length.
[ 2187.051528][T12665] gud 7-1:1.0: probe with driver gud failed with error -71
[ 2187.302878][T12665] usb 7-1: USB disconnect, device number 45
[ 2187.623054][T12330] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 2188.012766][T12665] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 2188.041356][T12330] usb 9-1: Using ep0 maxpacket: 32
[ 2188.114974][T12330] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 2188.123463][T12330] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2188.216750][T21606] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2189.140069][T12330] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[ 2189.153885][T12330] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[ 2189.522196][T12665] usb 8-1: Using ep0 maxpacket: 8
[ 2189.531665][T12665] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2189.541588][T12330] usb 9-1: config 14 has no interface number 0
[ 2189.555911][T12665] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[ 2189.571450][T12665] usb 8-1: config 179 has no interface number 0
[ 2189.571471][T12330] usb 9-1: config 14 has no interface number 1
[ 2189.587942][T12665] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2189.615507][T12665] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2189.624800][T12330] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2189.651914][T12665] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2189.687932][T12665] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2189.690469][T12330] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2189.740907][T12665] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2189.747434][T21612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3620'.
[ 2189.764668][T12330] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2189.782038][T12330] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2189.830314][T12330] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2189.832193][T21613] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2189.842299][T12330] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2189.851840][T21613] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2189.864892][T12330] usb 9-1: config 14 interface 57 has no altsetting 0
[ 2189.870497][T21613] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2189.882092][T21613] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2189.882827][T12330] usb 9-1: config 14 interface 228 has no altsetting 0
[ 2189.897881][T21613] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2190.003359][T12665] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2190.068761][T21602] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 2190.324577][T12330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2190.356798][T21616] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3619'.
[ 2190.366291][T21616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3619'.
[ 2190.375590][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'.
[ 2190.462804][T12330] usb 9-1: Product: syz
[ 2190.498142][T12330] usb 9-1: Manufacturer: syz
[ 2190.535484][T12330] usb 9-1: SerialNumber: syz
[ 2190.741601][ T5740] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2190.773919][    C1] raw-gadget.2 gadget.0: ignoring, device is not running
[ 2190.921379][ T5740] usb 1-1: device descriptor read/64, error -32
[ 2191.181286][ T5740] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2191.343998][ T5740] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2191.365514][ T5740] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2191.379896][ T5740] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2191.399082][ T5740] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2191.410565][ T5740] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2191.428030][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2191.841244][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2191.925862][T12332] Bluetooth: hci3: command 0x0419 tx timeout
[ 2191.932618][ T5614] Bluetooth: hci5: command 0x041b tx timeout
[ 2191.939786][   T50] Bluetooth: hci4: command 0x0419 tx timeout
[ 2191.974182][T19526] usb 8-1: USB disconnect, device number 72
[ 2191.974194][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2191.974236][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2192.002198][   T50] Bluetooth: hci1: command 0x041b tx timeout
[ 2194.023732][T12664] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input22
[ 2194.026954][T12330] usb 9-1: can't set config #14, error -71
[ 2194.148129][T12330] usb 9-1: USB disconnect, device number 45
[ 2194.234952][ T5740] gud 1-1:1.0: probe with driver gud failed with error -71
[ 2194.301110][ T5740] usb 1-1: USB disconnect, device number 85
[ 2194.452062][T21636] netlink: 'syz.4.3624': attribute type 10 has an invalid length.
[ 2195.468735][   T30] audit: type=1400 audit(1786951176.585:798): avc:  denied  { listen } for  pid=21642 comm="syz.7.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2197.897794][T12330] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[ 2198.140269][T12330] usb 8-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00
[ 2198.244097][T12330] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2198.383721][T12330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2198.588236][T12330] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2198.703359][T12330] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2198.938506][T12330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2199.212685][T12330] usb 8-1: config 0 descriptor??
[ 2200.413777][T12330] input: HID 04e7:0050 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:04E7:0050.0007/input/input23
[ 2201.305714][T21685] syz.4.3634 (21685): drop_caches: 2
[ 2201.313300][T21685] binder: 21684:21685 ioctl c0306201 0 returned -14
[ 2201.430096][T12330] hid-accutouch 0003:04E7:0050.0007: input,hidraw0: USB HID v0.00 Joystick [HID 04e7:0050] on usb-dummy_hcd.7-1/input0
[ 2201.513902][T12330] usb 8-1: USB disconnect, device number 73
[ 2201.587376][T19526] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 2201.734171][T21687] fido_id[21687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[ 2201.735988][T19526] usb 5-1: device descriptor read/64, error -71
[ 2201.983734][T21694] netlink: 'syz.0.3637': attribute type 10 has an invalid length.
[ 2202.066475][T19526] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 2202.316322][T19526] usb 5-1: device descriptor read/64, error -71
[ 2202.498398][T19526] usb usb5-port1: attempt power cycle
[ 2202.636212][T21698] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3638'.
[ 2202.645600][T21698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3638'.
[ 2202.654815][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3638'.
[ 2202.985463][T12664] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[ 2203.279563][T19526] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2203.335661][T19526] usb 5-1: device descriptor read/8, error -71
[ 2203.647925][T12664] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2203.688153][T12664] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2203.698976][T12664] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2203.708956][T12664] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2203.741559][T12664] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2203.784882][T19526] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 2203.794030][T12664] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2203.818966][T19526] usb 5-1: device descriptor read/8, error -71
[ 2203.938044][T19526] usb usb5-port1: unable to enumerate USB device
[ 2205.380624][T12664] usb 8-1: can't set config #1, error -71
[ 2205.395139][T12664] usb 8-1: USB disconnect, device number 74
[ 2205.495108][T21710] hsr_slave_0: left promiscuous mode
[ 2205.503412][T21710] hsr_slave_1: left promiscuous mode
[ 2205.515246][T21713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3641'.
[ 2205.551210][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3642'.
[ 2205.567060][T21716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3641'.
[ 2205.703684][T21716] bond0: (slave dummy0): Releasing backup interface
[ 2205.842066][T21721] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2205.842066][T21721] 
[ 2205.888385][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3644'.
[ 2207.744014][T21733] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2207.784332][T21733] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2207.800679][T21733] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2207.825570][T21733] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2207.839333][T21733] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2209.753458][   T50] Bluetooth: hci5: command 0x041b tx timeout
[ 2209.770200][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2209.866662][ T5614] Bluetooth: hci4: command 0x0419 tx timeout
[ 2209.866662][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[ 2209.965842][ T5614] Bluetooth: hci1: command 0x041b tx timeout
[ 2210.936677][T21761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3653'.
[ 2211.007633][T21759] syz.8.3652 (21759): drop_caches: 2
[ 2211.030219][T21762] binder: 21758:21762 ioctl c0306201 0 returned -14
[ 2211.168964][T21764] syz.7.3655 (21764): drop_caches: 2
[ 2211.291318][T19526] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 2211.441084][T12478] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[ 2211.448776][T19526] usb 9-1: device descriptor read/64, error -71
[ 2211.464725][T21772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3657'.
[ 2211.581578][T12478] usb 8-1: device descriptor read/64, error -71
[ 2211.728645][T21774] CIFS: VFS: UNC: path must begin with // or \\
[ 2211.735109][T21774] Malformed UNC in devname
[ 2211.735109][T21774] 
[ 2211.741915][T21774] CIFS: VFS: Malformed UNC in devname
[ 2212.142219][T19526] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 2212.263133][T12478] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[ 2212.285600][T19526] usb 9-1: device descriptor read/64, error -71
[ 2212.404380][T19526] usb usb9-port1: attempt power cycle
[ 2212.410876][T12478] usb 8-1: device descriptor read/64, error -71
[ 2212.593626][T12478] usb usb8-port1: attempt power cycle
[ 2212.624517][T21781] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3660'.
[ 2212.870611][T19526] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 2212.884409][T21788] CIFS: VFS: UNC: path must begin with // or \\
[ 2212.890851][T21788] Malformed UNC in devname
[ 2212.890851][T21788] 
[ 2212.897461][T21788] CIFS: VFS: Malformed UNC in devname
[ 2212.935152][T19526] usb 9-1: device descriptor read/8, error -71
[ 2212.960386][T12478] usb 8-1: new high-speed USB device number 77 using dummy_hcd
[ 2212.994142][T12478] usb 8-1: device descriptor read/8, error -71
[ 2213.083735][T21783] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2213.090052][T21783] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2213.096681][T21783] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2213.104320][T21783] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2213.110849][T21783] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2213.180558][T19526] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 2213.222033][T19526] usb 9-1: device descriptor read/8, error -71
[ 2213.240229][T12478] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[ 2213.280756][T12478] usb 8-1: device descriptor read/8, error -71
[ 2213.287458][T21792] bond1: entered promiscuous mode
[ 2213.301273][T21792] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2213.342034][T19526] usb usb9-port1: unable to enumerate USB device
[ 2213.410991][T12478] usb usb8-port1: unable to enumerate USB device
[ 2214.528350][   T30] audit: type=1400 audit(1786951195.954:799): avc:  denied  { getopt } for  pid=21791 comm="syz.4.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 2214.978120][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2215.162695][   T50] Bluetooth: hci4: command 0x0419 tx timeout
[ 2215.168869][   T50] Bluetooth: hci3: command 0x0419 tx timeout
[ 2215.186585][   T50] Bluetooth: hci5: command 0x041b tx timeout
[ 2215.209347][ T5614] Bluetooth: hci1: command 0x041b tx timeout
[ 2215.904559][T21806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3665'.
[ 2216.974079][   T30] audit: type=1400 audit(1786951198.405:800): avc:  denied  { read } for  pid=21816 comm="syz.0.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2218.294633][   T30] audit: type=1400 audit(1786951199.676:801): avc:  denied  { shutdown } for  pid=21816 comm="syz.0.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2221.280626][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.287889][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2221.330204][T21845] syz.7.3676 (21845): drop_caches: 2
[ 2221.446164][ T5786] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[ 2221.871359][ T5786] usb 8-1: device descriptor read/64, error -71
[ 2223.362802][T12478] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 2223.363071][ T5786] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[ 2223.487114][T21867] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 2223.496440][T21867] overlayfs: overlapping lowerdir path
[ 2223.525030][T12478] usb 9-1: Using ep0 maxpacket: 8
[ 2223.606895][T12478] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2224.585591][T12478] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 2224.595660][T12478] usb 9-1: config 179 has no interface number 0
[ 2224.606729][T12478] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2224.620766][T12478] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2224.633625][T12478] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2224.750392][T12478] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2224.822664][ T5786] usb 8-1: device descriptor read/64, error -71
[ 2224.851230][T12478] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2224.910318][T12478] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2224.934812][ T5786] usb usb8-port1: attempt power cycle
[ 2224.955680][T21852] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2225.019688][T21872] binder: BINDER_SET_CONTEXT_MGR already set
[ 2225.046723][T21872] binder: 21870:21872 ioctl 4018620d 200000000040 returned -16
[ 2225.100339][T21874] netlink: 'syz.7.3685': attribute type 4 has an invalid length.
[ 2225.108276][T21874] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3685'.
[ 2225.124559][T21872] syz.0.3683 (21872): drop_caches: 2
[ 2226.087176][T19272] usb 9-1: USB disconnect, device number 50
[ 2226.087188][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2226.087324][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2226.153685][ T5740] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input24
[ 2226.246312][T21881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3686'.
[ 2226.373607][T19526] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2226.533895][T19526] usb 1-1: device descriptor read/64, error -71
[ 2226.584348][T21883] CIFS: VFS: UNC: path must begin with // or \\
[ 2226.590667][T21883] Malformed UNC in devname
[ 2226.590667][T21883] 
[ 2226.597737][T21883] CIFS: VFS: Malformed UNC in devname
[ 2226.943679][T19526] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2227.117386][T19526] usb 1-1: device descriptor read/64, error -71
[ 2227.243636][T19526] usb usb1-port1: attempt power cycle
[ 2227.593208][T19526] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2227.633625][T19526] usb 1-1: device descriptor read/8, error -71
[ 2228.254213][T21898] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2228.254213][T21898] 
[ 2228.331376][T21900] syz.6.3691 (21900): drop_caches: 2
[ 2228.603727][T12330] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 2228.752844][T12330] usb 7-1: device descriptor read/64, error -71
[ 2229.580546][T21910] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2229.675108][T21910] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2229.774359][T21910] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2229.864170][T21910] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2230.068728][T21910] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2230.131684][T12330] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 2231.301089][T12330] usb 7-1: device descriptor read/64, error -71
[ 2231.885343][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2231.885359][ T5614] Bluetooth: hci5: command 0x041b tx timeout
[ 2231.885393][ T5614] Bluetooth: hci3: command 0x0419 tx timeout
[ 2231.903864][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2231.905647][T12330] usb usb7-port1: attempt power cycle
[ 2232.254221][ T5614] Bluetooth: hci1: command 0x041b tx timeout
[ 2232.349562][T21925] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 2232.358057][T21925] overlayfs: overlapping lowerdir path
[ 2237.263349][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3705'.
[ 2237.274486][T21957] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3705'.
[ 2237.537661][T21960] netlink: 'syz.0.3699': attribute type 4 has an invalid length.
[ 2237.545532][T21960] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3699'.
[ 2238.406533][T21965] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2238.406533][T21965] 
[ 2241.726336][ T5740] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 2241.919211][ T5740] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[ 2241.931249][T12332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2241.954294][T12332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2241.958724][ T5740] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 2241.971611][T12332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2241.995957][T12332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2242.010446][T12332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2242.016530][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.098540][T21979] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2242.109429][ T5740] opticon 7-1:1.0: opticon converter detected
[ 2242.148692][ T5740] usb 7-1: opticon converter now attached to ttyUSB0
[ 2242.235639][T12330] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 2242.436435][T12330] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2242.448746][T12330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2242.481001][T12330] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2242.502191][T12330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2242.512196][T12330] usb 5-1: Product: syz
[ 2242.528355][T12330] usb 5-1: Manufacturer: syz
[ 2242.543916][T12330] usb 5-1: SerialNumber: syz
[ 2242.845682][T12330] cdc_ether 5-1:1.0: GUID doesn't match
[ 2242.854706][    C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending?
[ 2242.867831][T12330] usb 5-1: USB disconnect, device number 84
[ 2242.893882][T12665] usb 7-1: USB disconnect, device number 49
[ 2242.927311][T12665] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[ 2242.963884][T12665] opticon 7-1:1.0: device disconnected
[ 2243.695971][T22015] netlink: 'syz.0.3718': attribute type 4 has an invalid length.
[ 2243.800861][T22015] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3718'.
[ 2244.140438][T12332] Bluetooth: hci2: command tx timeout
[ 2246.481887][T12332] Bluetooth: hci2: command tx timeout
[ 2248.849855][ T5614] Bluetooth: hci2: command tx timeout
[ 2251.184392][ T5614] Bluetooth: hci2: command tx timeout
[ 2251.249755][T21991] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2252.545951][T21991] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2252.884333][T21991] bridge_slave_0: entered allmulticast mode
[ 2252.893763][T21991] bridge_slave_0: entered promiscuous mode
[ 2252.907500][T21991] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2252.915968][T21991] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2252.926784][T21991] bridge_slave_1: entered allmulticast mode
[ 2252.940006][T21991] bridge_slave_1: entered promiscuous mode
[ 2253.029238][T21991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2253.062740][T21991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2254.452245][T22094] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 2254.460788][T22094] overlayfs: overlapping lowerdir path
[ 2256.804298][T21991] team0: Port device team_slave_0 added
[ 2257.110187][T21991] team0: Port device team_slave_1 added
[ 2258.236462][T21991] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2258.245783][T21991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2258.272917][T21991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2258.288639][T21991] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2258.295628][T21991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2258.321716][T21991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2258.410540][T21991] hsr_slave_0: entered promiscuous mode
[ 2258.430321][T21991] hsr_slave_1: entered promiscuous mode
[ 2260.134820][ T5740] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[ 2260.613238][ T5740] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 2260.813578][ T5740] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 2260.926111][ T5740] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 2261.142236][ T5740] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 2261.533546][ T5740] usb 1-1: config 1 has no interface number 0
[ 2261.540175][ T5740] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2261.551644][ T5740] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2261.567762][T22132] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2261.568736][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2261.597464][T22132] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2261.637129][T22132] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2261.652443][T22132] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2261.679726][ T5740] usb 1-1: can't set config #1, error -71
[ 2261.699907][T22132] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2261.711761][ T5740] usb 1-1: USB disconnect, device number 90
[ 2261.736512][T22132] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2261.782106][T22132] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 2263.146286][   T30] audit: type=1400 audit(1786951500.512:802): avc:  denied  { setattr } for  pid=22148 comm="syz.6.3745" name="NETLINK" dev="sockfs" ino=80949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2263.269312][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2263.687003][ T5614] Bluetooth: hci4: command 0x0419 tx timeout
[ 2263.693249][ T5614] Bluetooth: hci5: command 0x041b tx timeout
[ 2263.724886][T12332] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2263.724980][ T5614] Bluetooth: hci1: command 0x041b tx timeout
[ 2265.872900][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2267.554969][T22178] netlink: 'syz.7.3751': attribute type 4 has an invalid length.
[ 2267.562798][T22178] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3751'.
[ 2267.663200][   T30] audit: type=1400 audit(1786951505.104:803): avc:  denied  { write } for  pid=22177 comm="syz.7.3751" name="functions" dev="configfs" ino=21167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2267.884826][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2268.593700][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3753'.
[ 2268.664420][T21991] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2268.705051][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2268.737990][T21991] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2268.824703][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2268.870292][T21991] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2268.900802][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2268.917672][T21991] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2268.965737][T21991] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2269.170120][T22194] syz.6.3755 (22194): drop_caches: 2
[ 2269.243202][T21991] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2269.333627][T19272] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 2269.414019][T21991] 8021q: adding VLAN 0 to HW filter on device team0
[ 2269.734339][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2269.741621][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2271.013817][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2271.021014][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2271.091196][T19272] usb 7-1: device descriptor read/64, error -71
[ 2271.351345][T19272] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 2271.508253][T22219] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2271.674816][T22219] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2271.685193][T22219] overlayfs: failed to look up (tracing) for ino (-66)
[ 2272.946028][T22227] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2273.124900][T22227] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2273.136033][T22227] overlayfs: failed to look up (tracing) for ino (-66)
[ 2274.083615][T22229] netlink: 'syz.4.3763': attribute type 4 has an invalid length.
[ 2274.091534][T22229] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3763'.
[ 2274.165354][T22232] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3764'.
[ 2274.178893][   T30] audit: type=1400 audit(1786951511.637:804): avc:  denied  { write } for  pid=22228 comm="syz.4.3763" name="uncompressed" dev="configfs" ino=81011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2274.546880][T22239] input: syz1 as /devices/virtual/input/input25
[ 2274.553601][T22239] input: failed to attach handler leds to device input25, error: -6
[ 2274.945278][   T30] audit: type=1400 audit(1786951511.697:805): avc:  denied  { connect } for  pid=22234 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2277.272523][T21991] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2277.693212][T22273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3771'.
[ 2277.725410][T22271] syz.7.3772 (22271): drop_caches: 2
[ 2278.009366][T22276] CIFS: VFS: UNC: path must begin with // or \\
[ 2278.021466][T22276] Malformed UNC in devname
[ 2278.021466][T22276] 
[ 2278.043887][T22276] CIFS: VFS: Malformed UNC in devname
[ 2278.170757][T12664] usb 8-1: new high-speed USB device number 82 using dummy_hcd
[ 2278.307703][T12664] usb 8-1: device descriptor read/64, error -71
[ 2278.314540][T22287] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2278.314540][T22287] 
[ 2278.412774][T21991] veth0_vlan: entered promiscuous mode
[ 2278.441115][T21991] veth1_vlan: entered promiscuous mode
[ 2279.477063][T12664] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[ 2279.503497][T21991] veth0_macvtap: entered promiscuous mode
[ 2279.541566][T21991] veth1_macvtap: entered promiscuous mode
[ 2279.617067][T12664] usb 8-1: device descriptor read/64, error -71
[ 2279.625402][T21991] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2279.671416][T21991] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2279.727280][T12664] usb usb8-port1: attempt power cycle
[ 2279.769446][T22296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3777'.
[ 2279.810375][T19273] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2279.847322][  T140] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2279.927227][  T140] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2279.989367][ T5855] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2280.075522][T22298] FAULT_INJECTION: forcing a failure.
[ 2280.075522][T22298] name failslab, interval 1, probability 0, space 0, times 0
[ 2280.142709][T22298] CPU: 0 UID: 0 PID: 22298 Comm: syz.4.3778 Not tainted syzkaller #0 PREEMPT(full) 
[ 2280.142741][T22298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2280.142755][T22298] Call Trace:
[ 2280.142763][T22298]  <TASK>
[ 2280.142773][T22298]  dump_stack_lvl+0x100/0x190
[ 2280.142808][T22298]  should_fail_ex.cold+0x5/0xa
[ 2280.142837][T22298]  should_failslab+0xc2/0x120
[ 2280.142874][T22298]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[ 2280.142902][T22298]  ? __alloc_skb+0x5b7/0x710
[ 2280.142930][T22298]  ? __alloc_skb+0x140/0x710
[ 2280.142962][T22298]  __alloc_skb+0x140/0x710
[ 2280.142987][T22298]  ? __alloc_skb+0x5b7/0x710
[ 2280.143014][T22298]  ? __pfx___alloc_skb+0x10/0x10
[ 2280.143049][T22298]  netlink_alloc_large_skb+0x69/0x150
[ 2280.143078][T22298]  netlink_sendmsg+0x680/0xda0
[ 2280.143108][T22298]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2280.143136][T22298]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 2280.143174][T22298]  ____sys_sendmsg+0xa4d/0xbe0
[ 2280.143195][T22298]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2280.143223][T22298]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2280.143262][T22298]  ___sys_sendmsg+0x190/0x1e0
[ 2280.143288][T22298]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2280.143310][T22298]  ? __lock_acquire+0x49f/0x1a40
[ 2280.143339][T22298]  ? get_pid_task+0x106/0x250
[ 2280.143392][T22298]  __sys_sendmsg+0x160/0x210
[ 2280.143418][T22298]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2280.143463][T22298]  do_syscall_64+0x115/0x870
[ 2280.143488][T22298]  ? clear_bhb_loop+0x70/0xc0
[ 2280.143514][T22298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2280.143536][T22298] RIP: 0033:0x7faf6a99e0d9
[ 2280.143554][T22298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2280.143574][T22298] RSP: 002b:00007faf6b7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2280.143596][T22298] RAX: ffffffffffffffda RBX: 00007faf6ac25fa0 RCX: 00007faf6a99e0d9
[ 2280.143611][T22298] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003
[ 2280.143623][T22298] RBP: 00007faf6b7b1090 R08: 0000000000000000 R09: 0000000000000000
[ 2280.143635][T22298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2280.143647][T22298] R13: 00007faf6ac26038 R14: 00007faf6ac25fa0 R15: 00007ffe36be3d98
[ 2280.143676][T22298]  </TASK>
[ 2280.182688][ T5855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2280.190766][T12664] usb 8-1: new high-speed USB device number 84 using dummy_hcd
[ 2280.229049][ T5855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2280.417098][T12664] usb 8-1: device descriptor read/8, error -71
[ 2280.477917][T22300] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2280.477917][T22300] 
[ 2280.521146][T19273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2280.529825][T19273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2280.661283][T12664] usb 8-1: new high-speed USB device number 85 using dummy_hcd
[ 2280.944356][T12664] usb 8-1: device descriptor read/8, error -71
[ 2281.101980][T12664] usb usb8-port1: unable to enumerate USB device
[ 2281.339661][T22316] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[ 2281.694841][   T30] audit: type=1400 audit(1786951518.791:806): avc:  denied  { append } for  pid=22307 comm="syz.6.3783" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2281.976687][T22318] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2281.989401][T22318] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2281.993248][   T30] audit: type=1400 audit(1786951518.911:807): avc:  denied  { map } for  pid=22307 comm="syz.6.3783" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2281.996415][T22318] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2282.020107][   T30] audit: type=1400 audit(1786951518.911:808): avc:  denied  { write execute } for  pid=22307 comm="syz.6.3783" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2282.076102][T22318] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2282.097883][T22318] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2282.244133][   T30] audit: type=1400 audit(1786951519.261:809): avc:  denied  { read append } for  pid=22306 comm="syz.0.3781" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2282.268839][   T30] audit: type=1400 audit(1786951519.261:810): avc:  denied  { open } for  pid=22306 comm="syz.0.3781" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 2283.663039][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.670589][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2284.034954][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2284.036486][ T5614] Bluetooth: hci5: command 0x041b tx timeout
[ 2284.041042][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2284.115019][T12332] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2284.117912][ T5614] Bluetooth: hci1: command 0x041b tx timeout
[ 2284.222309][T22331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3785'.
[ 2284.229046][T22335] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3788'.
[ 2284.596682][T22341] CIFS: VFS: UNC: path must begin with // or \\
[ 2284.603039][T22341] Malformed UNC in devname
[ 2284.603039][T22341] 
[ 2284.609773][T22341] CIFS: VFS: Malformed UNC in devname
[ 2287.499479][T22348] syz.4.3790 (22348): drop_caches: 2
[ 2287.513201][T22349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3789'.
[ 2287.891703][T22359] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2288.063927][T22359] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2288.075208][T22359] overlayfs: failed to look up (tracing) for ino (-66)
[ 2288.183066][T19526] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 2288.607116][T19526] usb 5-1: device descriptor read/64, error -71
[ 2288.715287][T22362] syz.6.3792 (22362): drop_caches: 2
[ 2288.868261][T22364] CIFS: VFS: UNC: path must begin with // or \\
[ 2288.874690][T22364] Malformed UNC in devname
[ 2288.874690][T22364] 
[ 2288.881299][T22364] CIFS: VFS: Malformed UNC in devname
[ 2288.956635][ T5740] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 2288.964441][T19526] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 2289.172663][ T5740] usb 7-1: device descriptor read/64, error -71
[ 2289.179115][T19526] usb 5-1: device descriptor read/64, error -71
[ 2289.302497][T19526] usb usb5-port1: attempt power cycle
[ 2289.343989][T22367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=22367 comm=syz.0.3794
[ 2289.372959][   T30] audit: type=1400 audit(1786951526.845:811): avc:  denied  { create } for  pid=22369 comm="syz.7.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2289.432053][ T5740] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 2290.546280][ T5740] usb 7-1: device descriptor read/64, error -71
[ 2290.841524][T19526] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2290.857180][ T5740] usb usb7-port1: attempt power cycle
[ 2291.108985][T19526] usb 5-1: device not accepting address 87, error -71
[ 2291.306247][ T5740] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 2291.429485][ T5740] usb 7-1: device descriptor read/8, error -71
[ 2291.761214][ T5740] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 2294.255435][T22387] CIFS: VFS: UNC: path must begin with // or \\
[ 2294.261885][T22387] Malformed UNC in devname
[ 2294.261885][T22387] 
[ 2294.268498][T22387] CIFS: VFS: Malformed UNC in devname
[ 2294.278430][ T5740] usb 7-1: device descriptor read/8, error -71
[ 2294.343665][T22395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3803'.
[ 2294.400292][ T5740] usb usb7-port1: unable to enumerate USB device
[ 2294.506183][T22400] syz.6.3804 (22400): drop_caches: 2
[ 2294.652571][T22402] syz.4.3805 (22402): drop_caches: 2
[ 2294.836754][T22407] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2295.016289][T22407] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2295.026998][T22407] overlayfs: failed to look up (tracing) for ino (-66)
[ 2295.219404][T12478] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2295.273916][ T5740] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 2295.908787][ T5740] usb 7-1: device descriptor read/64, error -71
[ 2295.915428][T12478] usb 5-1: device descriptor read/64, error -71
[ 2296.094076][T22410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3807'.
[ 2296.158728][T12478] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 2296.166434][ T5740] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 2298.437601][ T5740] usb 7-1: device descriptor read/64, error -71
[ 2298.569354][ T5740] usb usb7-port1: attempt power cycle
[ 2298.891465][T22434] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2299.070117][T22434] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2299.080392][T22434] overlayfs: failed to look up (tracing) for ino (-66)
[ 2300.385654][T22436] syz.0.3815 (22436): drop_caches: 2
[ 2300.395268][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3816'.
[ 2300.413743][T22430] net_ratelimit: 54 callbacks suppressed
[ 2300.413760][T22430] 0: reclassify loop, rule prio 0, protocol 03
[ 2300.427656][T22430] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3814'.
[ 2300.442096][   T30] audit: type=1400 audit(1786951537.900:812): avc:  denied  { bind } for  pid=22428 comm="syz.6.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2300.716400][ T5786] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 2300.782876][T22452] hsr_slave_0: left promiscuous mode
[ 2300.789540][T22452] hsr_slave_1: left promiscuous mode
[ 2300.841271][T22453] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3820'.
[ 2300.886297][ T5786] usb 1-1: device descriptor read/64, error -71
[ 2301.126478][ T5786] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 2301.291742][ T5786] usb 1-1: device descriptor read/64, error -71
[ 2301.440434][ T5786] usb usb1-port1: attempt power cycle
[ 2301.926024][   T30] audit: type=1400 audit(1786951539.371:813): avc:  denied  { write } for  pid=22464 comm="syz.7.3824" name="functions" dev="configfs" ino=21167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2302.006807][ T5786] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 2302.133565][ T5786] usb 1-1: device descriptor read/8, error -71
[ 2302.380155][   T30] audit: type=1400 audit(1786951539.851:814): avc:  denied  { read } for  pid=5258 comm="dhcpcd" name="n52" dev="tmpfs" ino=12172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2302.475710][   T30] audit: type=1400 audit(1786951539.851:815): avc:  denied  { open } for  pid=5258 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=12172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2302.496097][ T5786] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 2302.499291][   T30] audit: type=1400 audit(1786951539.851:816): avc:  denied  { getattr } for  pid=5258 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=12172 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2302.578597][ T5786] usb 1-1: device descriptor read/8, error -71
[ 2302.612797][T22476] erspan1: entered allmulticast mode
[ 2302.696729][ T5786] usb usb1-port1: unable to enumerate USB device
[ 2302.842587][T22487] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3829'.
[ 2302.958397][T22491] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 2302.990235][   T30] audit: type=1400 audit(1786951540.462:817): avc:  denied  { ioctl } for  pid=22490 comm="syz.9.3830" path="net:[4026532791]" dev="nsfs" ino=4026532791 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2303.041549][T22500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3831'.
[ 2305.019804][   T30] audit: type=1400 audit(1786951542.493:818): avc:  denied  { write } for  pid=22473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2305.103254][   T30] audit: type=1400 audit(1786951542.523:819): avc:  denied  { create } for  pid=22473 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2305.218242][   T30] audit: type=1400 audit(1786951542.523:820): avc:  denied  { write } for  pid=22473 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=12187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2305.251758][T22515] binder_alloc: 22508: binder_alloc_buf, no vma
[ 2305.273636][   T30] audit: type=1400 audit(1786951542.523:821): avc:  denied  { append } for  pid=22473 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=12187 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2306.669186][T22538] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2306.709269][T22538] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2306.719365][T22538] overlayfs: failed to look up (tracing) for ino (-66)
[ 2306.767072][T22544] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2306.956515][T22544] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2306.966801][T22544] overlayfs: failed to look up (tracing) for ino (-66)
[ 2308.155593][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3842'.
[ 2308.417912][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 2308.417933][   T30] audit: type=1400 audit(1786951545.894:825): avc:  denied  { write } for  pid=22529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2310.368171][T22565] syz.0.3846 (22565): drop_caches: 2
[ 2310.551806][ T5740] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 2311.677062][ T5740] usb 1-1: device descriptor read/64, error -71
[ 2312.600855][   T30] audit: type=1400 audit(1786951550.086:826): avc:  denied  { write } for  pid=22579 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2312.709356][T22583] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3849'.
[ 2312.819230][   T30] audit: type=1400 audit(1786951550.296:827): avc:  denied  { mount } for  pid=22589 comm="syz.7.3853" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 2312.853991][T22591] ima: policy update failed
[ 2313.008974][T22600] CIFS: VFS: UNC: path must begin with // or \\
[ 2313.015431][T22600] Malformed UNC in devname
[ 2313.015431][T22600] 
[ 2313.022194][T22600] CIFS: VFS: Malformed UNC in devname
[ 2313.035223][   T30] audit: type=1802 audit(1786951550.397:828): pid=22591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.3853" res=0 errno=0
[ 2313.371683][T22603] device-mapper: ioctl: device name cannot contain '/'
[ 2313.580569][T22604] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2313.614414][T22604] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2313.624818][T22604] overlayfs: failed to look up (tracing) for ino (-66)
[ 2313.668172][T22606] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3856'.
[ 2313.710503][T12461] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[ 2313.839780][ T5740] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 2313.850013][T12461] usb 8-1: device descriptor read/64, error -71
[ 2314.139848][T12461] usb 8-1: new high-speed USB device number 87 using dummy_hcd
[ 2314.279991][T12461] usb 8-1: device descriptor read/64, error -71
[ 2314.402965][T12461] usb usb8-port1: attempt power cycle
[ 2314.610913][T22616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3859'.
[ 2314.785465][ T5740] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2314.795965][ T5740] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[ 2314.804534][ T5740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2314.809411][T12461] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 2314.814978][ T5740] usb 1-1: config 0 has no interface number 0
[ 2314.894660][T22618] CIFS: VFS: UNC: path must begin with // or \\
[ 2314.901114][T22618] Malformed UNC in devname
[ 2314.901114][T22618] 
[ 2314.907788][T22618] CIFS: VFS: Malformed UNC in devname
[ 2315.367824][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2315.442275][T12461] usb 8-1: device descriptor read/8, error -71
[ 2315.521031][ T5740] usb 1-1: Product: syz
[ 2315.526299][ T5740] usb 1-1: Manufacturer: syz
[ 2315.531061][ T5740] usb 1-1: SerialNumber: syz
[ 2315.538566][ T5740] usb 1-1: config 0 descriptor??
[ 2315.663210][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3862'.
[ 2315.689122][T12461] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[ 2315.819872][T22625] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3861'.
[ 2315.829244][T22625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3861'.
[ 2315.838297][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3861'.
[ 2316.252862][T12664] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 2316.642188][T12664] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2316.881433][T12664] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2317.106839][T12664] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2317.319926][T12664] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2317.545082][T12664] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2317.573938][ T5697] usb 1-1: USB disconnect, device number 96
[ 2317.617720][T12461] usb 8-1: device descriptor read/8, error -71
[ 2317.820697][T12461] usb usb8-port1: unable to enumerate USB device
[ 2317.845505][T12664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2318.265469][T22630] syz.4.3864 (22630): drop_caches: 2
[ 2318.305291][   T30] audit: type=1400 audit(1786951555.779:829): avc:  denied  { unmount } for  pid=15081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 2318.577493][T22626] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2319.318351][T22626] usb 5-1: device descriptor read/64, error -71
[ 2319.334256][T12664] gud 7-1:1.0: probe with driver gud failed with error -71
[ 2319.353517][T12664] usb 7-1: USB disconnect, device number 59
[ 2319.436245][T22641] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3867'.
[ 2319.703194][T22647] CIFS: VFS: UNC: path must begin with // or \\
[ 2319.709718][T22647] Malformed UNC in devname
[ 2319.709718][T22647] 
[ 2319.716385][T22647] CIFS: VFS: Malformed UNC in devname
[ 2320.119408][T22626] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2320.257016][T22626] usb 5-1: device descriptor read/64, error -71
[ 2320.457606][T22626] usb usb5-port1: attempt power cycle
[ 2320.648289][T22652] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2320.670492][T22652] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2320.680527][T22652] overlayfs: failed to look up (tracing) for ino (-66)
[ 2321.753043][   T30] audit: type=1400 audit(1786951559.231:830): avc:  denied  { setopt } for  pid=22661 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2321.807671][   T30] audit: type=1400 audit(1786951559.261:831): avc:  denied  { ioctl } for  pid=22661 comm="syz.6.3873" path="socket:[82830]" dev="sockfs" ino=82830 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2323.774871][   T30] audit: type=1400 audit(1786951559.471:832): avc:  denied  { bind } for  pid=22661 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2323.795260][   T30] audit: type=1400 audit(1786951559.521:833): avc:  denied  { read } for  pid=22661 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2323.814621][   T30] audit: type=1400 audit(1786951559.591:834): avc:  denied  { write } for  pid=22661 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2323.984702][T19529] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 2324.442013][T19529] usb 7-1: Using ep0 maxpacket: 32
[ 2325.370750][T19529] usb 7-1: device descriptor read/all, error -71
[ 2325.489942][T22688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3880'.
[ 2325.795754][T22692] CIFS: VFS: UNC: path must begin with // or \\
[ 2325.802102][T22692] Malformed UNC in devname
[ 2325.802102][T22692] 
[ 2325.808873][T22692] CIFS: VFS: Malformed UNC in devname
[ 2326.086412][T22694] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 2326.095168][T22694] overlayfs: overlapping lowerdir path
[ 2328.592893][T22726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3888'.
[ 2328.605278][T22726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3888'.
[ 2328.789759][T22735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3889'.
[ 2329.059417][T22738] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3889'.
[ 2331.982135][T22764] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2332.170609][T22764] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2332.180984][T22764] overlayfs: failed to look up (tracing) for ino (-66)
[ 2333.159655][T22761] syz.0.3897 (22761): drop_caches: 2
[ 2334.449525][T12664] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2334.582998][T22773] input: syz1 as /devices/virtual/input/input26
[ 2334.620750][   T30] audit: type=1400 audit(1786951572.107:835): avc:  denied  { read } for  pid=22772 comm="syz.7.3900" path="socket:[83826]" dev="sockfs" ino=83826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2334.661322][T12664] usb 1-1: device descriptor read/64, error -71
[ 2334.945167][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3902'.
[ 2334.981700][T22781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3902'.
[ 2338.170023][   T30] audit: type=1400 audit(1786951575.669:836): avc:  denied  { write } for  pid=22795 comm="syz.9.3906" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 2338.194865][   T30] audit: type=1400 audit(1786951575.689:837): avc:  denied  { open } for  pid=22795 comm="syz.9.3906" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 2341.307320][T22824] syz.4.3912 (22824): drop_caches: 2
[ 2342.665801][T12461] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2342.805399][T12461] usb 5-1: device descriptor read/64, error -71
[ 2344.086999][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.093579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.676358][T12461] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2350.382110][T19526] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 2353.438081][T22892] syz.9.3932 (22892): drop_caches: 2
[ 2353.484469][T19526] IPVS: starting estimator thread 0...
[ 2353.591952][T22893] IPVS: using max 45 ests per chain, 108000 per kthread
[ 2353.680137][ T5740] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 2353.809914][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2354.479453][ T5740] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 2354.619493][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2354.727288][T22913] syz.7.3938 (22913): drop_caches: 2
[ 2354.733788][T22915] syz.4.3939 (22915): drop_caches: 2
[ 2354.761528][ T5740] usb usb10-port1: attempt power cycle
[ 2354.989331][ T5697] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[ 2355.298551][ T5740] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 2355.515404][T12478] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2356.070063][ T5740] usb 10-1: device descriptor read/8, error -71
[ 2356.122223][ T5697] usb 8-1: device descriptor read/64, error -71
[ 2356.198897][T12478] usb 5-1: device descriptor read/64, error -71
[ 2356.309182][ T5740] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 2356.343798][ T5740] usb 10-1: device descriptor read/8, error -71
[ 2356.408784][ T5697] usb 8-1: new high-speed USB device number 91 using dummy_hcd
[ 2356.448734][T12478] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2356.473852][ T5740] usb usb10-port1: unable to enumerate USB device
[ 2357.787847][T12478] usb 5-1: device descriptor read/64, error -71
[ 2357.858500][ T5697] usb 8-1: device descriptor read/64, error -71
[ 2357.908569][T12478] usb usb5-port1: attempt power cycle
[ 2358.019641][ T5697] usb usb8-port1: attempt power cycle
[ 2358.665786][T22960] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2358.824921][T22960] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2358.835308][T22960] overlayfs: failed to look up (tracing) for ino (-66)
[ 2359.613079][   T30] audit: type=1400 audit(2000000016.888:838): avc:  denied  { write } for  pid=22961 comm="syz.0.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2361.962572][T22983] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2362.011251][T22983] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2362.021388][T22983] overlayfs: failed to look up (tracing) for ino (-66)
[ 2363.379395][T23010] syz.4.3958 (23010): drop_caches: 2
[ 2363.824968][T12478] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2363.843629][T22997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2364.005105][T12478] usb 5-1: device descriptor read/64, error -71
[ 2364.304791][T12478] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2364.553137][T12478] usb 5-1: device descriptor read/64, error -71
[ 2364.702030][T23027] binder: 23026:23027 ioctl 4c00 ffffffffffffffff returned -22
[ 2364.899681][T12478] usb usb5-port1: attempt power cycle
[ 2365.116607][   T30] audit: type=1400 audit(2000000022.411:839): avc:  denied  { connect } for  pid=23030 comm="syz.0.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2365.351765][T12478] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2365.448384][T12478] usb 5-1: device descriptor read/8, error -71
[ 2365.715553][T12478] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2365.880216][T12478] usb 5-1: device descriptor read/8, error -71
[ 2366.041773][T12478] usb usb5-port1: unable to enumerate USB device
[ 2367.593507][ T5614] Bluetooth: hci2: unexpected event for opcode 0x2011
[ 2368.715773][T23076] syz.4.3981 (23076): drop_caches: 2
[ 2368.962558][T12497] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2369.112488][T12497] usb 5-1: device descriptor read/64, error -71
[ 2369.417277][T12497] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2370.134781][T23100] binder: 23099:23100 ioctl c0306201 0 returned -14
[ 2370.295255][T12497] usb 5-1: device descriptor read/64, error -71
[ 2370.320384][T23105] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3991'.
[ 2370.333373][T23105] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3991'.
[ 2370.432235][T12497] usb usb5-port1: attempt power cycle
[ 2370.851737][T12497] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 2370.869312][T23109] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3993'.
[ 2370.879764][T23109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3993'.
[ 2370.889665][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3993'.
[ 2370.954872][T12497] usb 5-1: device descriptor read/8, error -71
[ 2371.851286][T19529] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 2371.937799][T12497] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 2372.161999][T19529] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2372.369476][T19529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2372.557109][T19529] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2372.727092][T19529] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2372.945962][T19529] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2373.168641][T12497] usb 5-1: device descriptor read/8, error -71
[ 2373.208483][T19529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2373.340445][T12497] usb usb5-port1: unable to enumerate USB device
[ 2374.020925][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[ 2374.054715][T19529] usb 1-1: can't set config #1, error -32
[ 2374.144549][T19529] usb 1-1: USB disconnect, device number 99
[ 2375.380627][T23118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3996'.
[ 2375.621033][T23128] syz.9.4000 (23128): drop_caches: 2
[ 2375.630360][T23132] binder: 23131:23132 ioctl c0306201 0 returned -14
[ 2375.691233][T23129] CIFS: VFS: UNC: path must begin with // or \\
[ 2375.697545][T23129] Malformed UNC in devname
[ 2375.697545][T23129] 
[ 2375.704343][T23129] CIFS: VFS: Malformed UNC in devname
[ 2376.049267][ T5740] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2376.268812][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2376.578416][ T5740] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 2376.853497][T23147] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4005'.
[ 2376.880392][T23147] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4005'.
[ 2376.889696][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2377.010841][ T5740] usb usb10-port1: attempt power cycle
[ 2377.576937][ T5740] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 2377.671712][T23151] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4007'.
[ 2377.681045][T23151] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4007'.
[ 2377.690229][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4007'.
[ 2377.774264][ T5740] usb 10-1: device descriptor read/8, error -71
[ 2377.988105][T12497] usb 8-1: new high-speed USB device number 93 using dummy_hcd
[ 2378.098136][ T5740] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 2378.203683][ T5740] usb 10-1: device descriptor read/8, error -71
[ 2378.260004][T12497] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2378.359546][T12497] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2378.393616][ T5740] usb usb10-port1: unable to enumerate USB device
[ 2378.491403][T12497] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2378.615777][T12497] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2378.785298][T12497] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2379.776807][T12497] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2380.703853][T12497] usb 8-1: USB disconnect, device number 93
[ 2381.229115][T23176] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2381.247475][   T30] audit: type=1400 audit(2000000038.459:840): avc:  denied  { read } for  pid=23170 comm="syz.7.4012" name="/" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2381.328368][T23177] usb usb7: check_ctrlrecip: process 23177 (syz.7.4012) requesting ep 01 but needs 81
[ 2381.338999][T23177] usb usb7: usbfs: process 23177 (syz.7.4012) did not claim interface 0 before use
[ 2381.669731][T23178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4011'.
[ 2381.679446][T23178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4011'.
[ 2381.706433][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'.
[ 2382.128501][T12461] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 2382.520708][T12461] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2382.843282][T12461] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2383.002956][T12461] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2383.147352][T12461] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2383.293015][T12461] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2383.449565][T12461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.817567][   T30] audit: type=1400 audit(2000000038.459:841): avc:  denied  { open } for  pid=23170 comm="syz.7.4012" path="/371/config" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2383.841066][   T30] audit: type=1400 audit(2000000038.479:842): avc:  denied  { read } for  pid=23170 comm="syz.7.4012" name="g1" dev="configfs" ino=21166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2383.858077][T23189] binder: 23185:23189 ioctl c0306201 0 returned -14
[ 2383.864327][   T30] audit: type=1400 audit(2000000038.489:843): avc:  denied  { read } for  pid=23170 comm="syz.7.4012" name="use" dev="configfs" ino=85910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 2383.894431][   T30] audit: type=1800 audit(2000000038.499:844): pid=23176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4012" name="use" dev="configfs" ino=85910 res=0 errno=0
[ 2384.086508][   T30] audit: type=1400 audit(2000000041.320:845): avc:  denied  { write } for  pid=23184 comm="syz.7.4014" name="u" dev="configfs" ino=82145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 2385.288105][T12461] gud 5-1:1.0: probe with driver gud failed with error -71
[ 2385.325671][T23198] syz.0.4017 (23198): drop_caches: 2
[ 2385.354491][T12461] usb 5-1: USB disconnect, device number 107
[ 2386.297122][ T5740] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 2386.316589][T23206] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4019'.
[ 2386.455372][ T5740] usb 1-1: device descriptor read/64, error -71
[ 2386.473081][T23212] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4024'.
[ 2386.734142][ T5740] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2387.783033][T23215] CIFS: VFS: UNC: path must begin with // or \\
[ 2387.789318][T23215] Malformed UNC in devname
[ 2387.789318][T23215] 
[ 2387.796049][T23215] CIFS: VFS: Malformed UNC in devname
[ 2391.615110][T23239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4028'.
[ 2392.721925][T23248] CIFS: VFS: UNC: path must begin with // or \\
[ 2392.728225][T23248] Malformed UNC in devname
[ 2392.728225][T23248] 
[ 2392.734992][T23248] CIFS: VFS: Malformed UNC in devname
[ 2393.856984][T12461] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 2394.098115][T12461] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2394.239336][T23261] fido_id[23261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2395.604577][T23279] syz.9.4040 (23279): drop_caches: 2
[ 2397.145387][T23286] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2397.154156][   T30] audit: type=1800 audit(2000000054.447:846): pid=23286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4041" name="use" dev="configfs" ino=87043 res=0 errno=0
[ 2397.179657][T23286] usb usb7: check_ctrlrecip: process 23286 (syz.4.4041) requesting ep 01 but needs 81
[ 2397.189327][T23286] usb usb7: usbfs: process 23286 (syz.4.4041) did not claim interface 0 before use
[ 2397.250287][ T5740] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 2397.478022][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2397.747881][ T5740] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 2397.928617][ T5740] usb 10-1: device descriptor read/64, error -71
[ 2398.113766][ T5740] usb usb10-port1: attempt power cycle
[ 2400.921881][T23315] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2400.958709][T23315] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2400.970760][T23315] overlayfs: failed to look up (tracing) for ino (-66)
[ 2401.319716][T23317] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4052'.
[ 2401.527451][T23317] CIFS: VFS: UNC: path must begin with // or \\
[ 2401.535045][T23317] Malformed UNC in devname
[ 2401.535045][T23317] 
[ 2401.541686][T23317] CIFS: VFS: Malformed UNC in devname
[ 2403.848755][T23337] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4056'.
[ 2403.859945][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4056'.
[ 2403.869064][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4056'.
[ 2404.180491][T22626] usb 8-1: new high-speed USB device number 94 using dummy_hcd
[ 2404.478118][T22626] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2404.571200][T22626] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2404.671430][T22626] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2404.772099][T22626] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2404.913745][T22626] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2405.118873][T22626] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2405.551601][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.729768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2408.338670][T23359] hugetlbfs: Bad value 'e' for mount option 'nr_inodes'
[ 2408.338670][T23359] 
[ 2408.381879][T22626] gud 8-1:1.0: probe with driver gud failed with error -71
[ 2408.432077][T22626] usb 8-1: USB disconnect, device number 94
[ 2408.460184][T23361] syz.0.4062 (23361): drop_caches: 2
[ 2409.051919][ T5740] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 2409.503792][T23370] CIFS: VFS: UNC: path must begin with // or \\
[ 2409.510060][T23370] Malformed UNC in devname
[ 2409.510060][T23370] 
[ 2409.516746][T23370] CIFS: VFS: Malformed UNC in devname
[ 2410.301593][ T5740] usb 1-1: device descriptor read/64, error -71
[ 2410.552697][ T5740] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 2410.721402][ T5740] usb 1-1: device descriptor read/64, error -71
[ 2411.344559][ T5740] usb usb1-port1: attempt power cycle
[ 2411.919975][T23389] syz.9.4070 (23389): drop_caches: 2
[ 2412.828720][T23404] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4072'.
[ 2412.850992][T22626] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 2413.001005][T23407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4072'.
[ 2413.048945][T23408] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4074'.
[ 2413.058136][T23408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4074'.
[ 2413.067325][T23408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4074'.
[ 2413.105487][T22626] usb 10-1: device descriptor read/64, error -71
[ 2413.400231][T22626] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 2413.450201][ T5697] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 2413.660072][T22626] usb 10-1: device descriptor read/64, error -71
[ 2413.804467][ T5697] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2413.851857][T22626] usb usb10-port1: attempt power cycle
[ 2413.975905][ T5697] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2414.123665][ T5697] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2414.229002][ T5697] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2414.279874][T22626] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 2414.333983][ T5697] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2414.356816][T22626] usb 10-1: device descriptor read/8, error -71
[ 2414.495082][ T5697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2414.649591][T22626] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 2415.432193][T22626] usb 10-1: device descriptor read/8, error -71
[ 2415.982930][   T30] audit: type=1400 audit(2000000073.176:847): avc:  denied  { ioctl } for  pid=23416 comm="syz.9.4078" path="socket:[86368]" dev="sockfs" ino=86368 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2416.066492][T23420] CIFS: Attempting to mount //127.0.0.1/share
[ 2416.082738][T23420] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 2416.090491][T23420] CIFS: VFS: cifs_mount failed w/return code = -111
[ 2416.988694][T22626] usb usb10-port1: unable to enumerate USB device
[ 2417.048994][ T5697] gud 7-1:1.0: probe with driver gud failed with error -71
[ 2417.089961][ T5697] usb 7-1: USB disconnect, device number 62
[ 2420.260333][T23432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=23432 comm=syz.4.4082
[ 2420.352591][T23433] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2420.539743][T23433] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2420.550481][T23433] overlayfs: failed to look up (tracing) for ino (-66)
[ 2421.113608][T23432] netlink: 'syz.4.4082': attribute type 1 has an invalid length.
[ 2421.169423][T23432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23432 comm=syz.4.4082
[ 2421.421195][T23434] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2421.711970][T23434] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2421.742421][T23434] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2421.839796][T23434] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2421.978821][T23434] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2423.042535][T23447] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2423.071285][T23447] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 2423.081370][T23447] overlayfs: failed to look up (tracing) for ino (-66)
[ 2423.563447][T23451] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4086'.
[ 2423.734105][ T5614] Bluetooth: hci5: command 0x041b tx timeout
[ 2423.741080][T12332] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2423.815522][T12332] Bluetooth: hci4: command 0x0419 tx timeout
[ 2423.903727][T12332] Bluetooth: hci1: command 0x041b tx timeout
[ 2424.049704][T12332] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2425.790384][T23467] netlink: 'syz.9.4087': attribute type 4 has an invalid length.
[ 2425.875339][T23475] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4092'.
[ 2426.312389][T23467] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4087'.
[ 2426.438887][T23478] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4091'.
[ 2426.449053][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4091'.
[ 2426.463097][T23478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4091'.
[ 2426.993500][T19272] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 2427.248903][T19272] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2427.400620][T19272] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.625511][T19272] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2427.806761][T19272] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2428.032545][T19272] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2428.300511][T19272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2428.835222][T23486] syz.0.4094 (23486): drop_caches: 2
[ 2428.854496][T23489] syz.7.4096 (23489): drop_caches: 2
[ 2429.153541][   T30] audit: type=1800 audit(2000000086.463:848): pid=23495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4097" name="use" dev="configfs" ino=87440 res=0 errno=0
[ 2429.522713][T12478] usb 8-1: new high-speed USB device number 95 using dummy_hcd
[ 2429.531114][T12497] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 2429.629242][T19272] usb 7-1: USB disconnect, device number 63
[ 2429.662627][T12478] usb 8-1: device descriptor read/64, error -71
[ 2429.670223][T12497] usb 1-1: device descriptor read/64, error -71
[ 2429.782371][T23498] binder: BINDER_SET_CONTEXT_MGR already set
[ 2429.801147][T23498] binder: 23497:23498 ioctl 4018620d 200000000040 returned -16
[ 2429.884961][T23498] syz.9.4098 (23498): drop_caches: 2
[ 2429.931956][T12497] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 2429.939800][T12478] usb 8-1: new high-speed USB device number 96 using dummy_hcd
[ 2430.081993][T12478] usb 8-1: device descriptor read/64, error -71
[ 2430.088566][T12497] usb 1-1: device descriptor read/64, error -71
[ 2430.151684][ T5697] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 2430.214153][T12478] usb usb8-port1: attempt power cycle
[ 2430.222300][T12497] usb usb1-port1: attempt power cycle
[ 2430.572081][T12478] usb 8-1: new high-speed USB device number 97 using dummy_hcd
[ 2430.591743][T12497] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 2431.146380][T12497] usb 1-1: device descriptor read/8, error -71
[ 2431.213751][T12478] usb 8-1: device descriptor read/8, error -71
[ 2431.257345][T23507] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4102'.
[ 2431.429472][ T5697] usb 10-1: device descriptor read/64, error -71
[ 2432.522146][T23513] CIFS: VFS: UNC: path must begin with // or \\
[ 2432.528488][T23513] Malformed UNC in devname
[ 2432.528488][T23513] 
[ 2432.535190][T23513] CIFS: VFS: Malformed UNC in devname
[ 2432.575408][   T30] audit: type=1800 audit(2000000089.884:849): pid=23514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4101" name="use" dev="configfs" ino=87483 res=0 errno=0
[ 2432.640556][ T5697] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 2432.840545][ T5697] usb 10-1: device descriptor read/64, error -71
[ 2432.961903][ T5697] usb usb10-port1: attempt power cycle
[ 2435.478933][T23533] netlink: 'syz.9.4107': attribute type 4 has an invalid length.
[ 2435.896163][T23533] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4107'.
[ 2436.129237][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4109'.
[ 2437.010926][T23544] Can't find ip_set type has
[ 2437.446680][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4113'.
[ 2438.693471][T23563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4115'.
[ 2438.954296][T23564] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4115'.
[ 2439.299385][T23570] binder: BINDER_SET_CONTEXT_MGR already set
[ 2439.324316][T23566] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4116'.
[ 2439.340146][T23570] binder: 23567:23570 ioctl 4018620d 200000000040 returned -16
[ 2439.392421][T23573] syz.9.4117 (23573): drop_caches: 2
[ 2439.570241][T23566] CIFS: VFS: UNC: path must begin with // or \\
[ 2439.576557][T23566] Malformed UNC in devname
[ 2439.576557][T23566] 
[ 2439.583215][T23566] CIFS: VFS: Malformed UNC in devname
[ 2439.796860][T12497] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 2440.066745][T12497] usb 10-1: device descriptor read/64, error -71
[ 2440.951142][   T30] audit: type=1800 audit(2000000098.279:850): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4120" name="use" dev="configfs" ino=86561 res=0 errno=0
[ 2441.660688][T12497] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 2441.673744][   T30] audit: type=1400 audit(2000000098.999:851): avc:  denied  { create } for  pid=23587 comm="syz.0.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 2441.795824][T12497] usb 10-1: device descriptor read/64, error -71
[ 2442.066107][T12497] usb usb10-port1: attempt power cycle
[ 2444.739482][   T30] audit: type=1400 audit(2000000101.720:852): avc:  denied  { read } for  pid=23612 comm="syz.4.4127" dev="nsfs" ino=4026533237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2447.448683][   T30] audit: type=1400 audit(2000000101.720:853): avc:  denied  { open } for  pid=23612 comm="syz.4.4127" path="net:[4026533237]" dev="nsfs" ino=4026533237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 2447.561243][T23628] binder: 23627:23628 ioctl c0306201 0 returned -14
[ 2447.945371][   T30] audit: type=1800 audit(2000000105.212:854): pid=23630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4129" name="use" dev="configfs" ino=86677 res=0 errno=0
[ 2448.320418][T23632] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4131'.
[ 2451.397003][T23654] syz.7.4137 (23654): drop_caches: 2
[ 2451.709977][ T5697] usb 8-1: new high-speed USB device number 99 using dummy_hcd
[ 2451.911154][ T5697] usb 8-1: device descriptor read/64, error -71
[ 2453.682785][ T5697] usb 8-1: new high-speed USB device number 100 using dummy_hcd
[ 2455.265626][T23661] loop2: detected capacity change from 0 to 7
[ 2455.334002][T23661] Dev loop2: unable to read RDB block 7
[ 2455.361512][T23661]  loop2: unable to read partition table
[ 2455.382915][T23661] loop2: partition table beyond EOD, truncated
[ 2455.385010][T23675] comedi comedi1: Minor 2 could not be opened
[ 2455.396473][T23661] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[ 2455.402890][T23678] binder: 23676:23678 ioctl c0306201 0 returned -14
[ 2457.095610][T23698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4148'.
[ 2457.104894][T23698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4148'.
[ 2457.114138][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4148'.
[ 2457.132780][T23684] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4146'.
[ 2457.427322][T23700] CIFS: VFS: UNC: path must begin with // or \\
[ 2457.433711][T23700] Malformed UNC in devname
[ 2457.433711][T23700] 
[ 2457.440642][T23700] CIFS: VFS: Malformed UNC in devname
[ 2457.788385][T12497] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 2458.096988][T12497] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2458.164825][ T2159] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 2458.357297][T12497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2458.522551][ T2159] usb 1-1: Using ep0 maxpacket: 32
[ 2458.579617][T12497] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2458.712462][ T2159] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2458.790475][T12497] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2458.812971][ T2159] usb 1-1: New USB device found, idVendor=0499, idProduct=2002, bcdDevice= 0.40
[ 2458.952605][T12497] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2459.009683][ T2159] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32
[ 2459.220367][ T2159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2459.234237][T12497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2459.365437][ T2159] usb 1-1: Product: syz
[ 2459.458279][ T2159] usb 1-1: Manufacturer: syz
[ 2459.542428][ T2159] usb 1-1: SerialNumber: syz
[ 2459.584950][T23699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2459.730555][ T2159] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 2459.925045][ T2159] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 2460.038820][ T2159] usb 1-1: USB disconnect, device number 109
[ 2460.271669][T23713] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2460.346458][T23714] usb usb7: check_ctrlrecip: process 23714 (syz.0.4152) requesting ep 01 but needs 81
[ 2460.356136][T23714] usb usb7: usbfs: process 23714 (syz.0.4152) did not claim interface 0 before use
[ 2460.636330][   T30] audit: type=1800 audit(2000000117.588:855): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4152" name="use" dev="configfs" ino=87932 res=0 errno=0
[ 2460.779890][T23701] udevd[23701]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2460.879829][T12497] gud 5-1:1.0: probe with driver gud failed with error -71
[ 2461.948617][T12497] usb 5-1: USB disconnect, device number 108
[ 2462.111715][T23722] netlink: 'syz.4.4155': attribute type 4 has an invalid length.
[ 2462.119606][T23722] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4155'.
[ 2462.956543][T23725] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 2463.063156][T23730] device-mapper: ioctl: device name cannot contain '/'
[ 2464.406139][ T5697] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 2465.181621][ T5697] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2465.249675][ T5697] usb 10-1: config 0 has an invalid interface number: 117 but max is 0
[ 2465.278607][ T5697] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2465.314174][ T5697] usb 10-1: config 0 has no interface number 0
[ 2465.324254][ T5697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2465.345913][ T5697] usb 10-1: Product: syz
[ 2465.354361][ T5697] usb 10-1: Manufacturer: syz
[ 2465.364000][ T5697] usb 10-1: SerialNumber: syz
[ 2465.382396][ T5697] usb 10-1: config 0 descriptor??
[ 2466.909397][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2466.970304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2467.438778][ T5697] usb 10-1: USB disconnect, device number 24
[ 2467.724184][T23762] netlink: 'syz.4.4168': attribute type 4 has an invalid length.
[ 2467.732016][T23762] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4168'.
[ 2468.788832][T23771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4171'.
[ 2470.093701][T23779] CIFS: VFS: UNC: path must begin with // or \\
[ 2470.100064][T23779] Malformed UNC in devname
[ 2470.100064][T23779] 
[ 2470.107188][T23779] CIFS: VFS: Malformed UNC in devname
[ 2470.503893][T23778] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2470.560383][T23780] usb usb7: check_ctrlrecip: process 23780 (syz.0.4159) requesting ep 01 but needs 81
[ 2470.570771][T23780] usb usb7: usbfs: process 23780 (syz.0.4159) did not claim interface 0 before use
[ 2470.593820][   T30] audit: type=1800 audit(2000000127.853:856): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4159" name="use" dev="configfs" ino=86944 res=0 errno=0
[ 2471.025519][T23786] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2471.034327][   T30] audit: type=1800 audit(2000000128.364:857): pid=23786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4173" name="use" dev="configfs" ino=86951 res=0 errno=0
[ 2473.029675][T23798] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2473.039083][   T30] audit: type=1800 audit(2000000130.345:858): pid=23798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4176" name="use" dev="configfs" ino=88083 res=0 errno=0
[ 2473.118269][T23799] usb usb7: check_ctrlrecip: process 23799 (syz.4.4176) requesting ep 01 but needs 81
[ 2473.128028][T23799] usb usb7: usbfs: process 23799 (syz.4.4176) did not claim interface 0 before use
[ 2473.763425][T23806] netlink: 'syz.9.4181': attribute type 4 has an invalid length.
[ 2473.786933][T23807] syz.4.4180 (23807): drop_caches: 2
[ 2473.808787][T23806] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4181'.
[ 2474.139654][ T5697] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2474.399528][ T5697] usb 5-1: device descriptor read/64, error -71
[ 2475.317971][ T5697] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2475.403079][T23816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2475.543507][ T5697] usb 5-1: device descriptor read/64, error -71
[ 2476.094330][ T5697] usb usb5-port1: attempt power cycle
[ 2477.039755][ T5697] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2477.298283][ T5697] usb 5-1: device not accepting address 111, error -71
[ 2477.337296][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2477.365002][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2477.387336][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2477.399974][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2477.414368][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2479.540029][T12332] Bluetooth: hci3: command tx timeout
[ 2481.685437][T23857] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 2481.699197][   T30] audit: type=1800 audit(2000000139.009:859): pid=23857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4192" name="use" dev="configfs" ino=87024 res=0 errno=0
[ 2481.729632][T12332] Bluetooth: hci3: command tx timeout
[ 2483.707869][T23878] xt_cgroup: invalid path, errno=-2
[ 2483.866652][T12332] Bluetooth: hci3: command tx timeout
[ 2484.607216][T19526] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 2485.109701][T19526] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2485.463354][T19526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2485.471965][T19526] usb 10-1: Product: syz
[ 2485.476456][T19526] usb 10-1: Manufacturer: syz
[ 2485.481570][T19526] usb 10-1: SerialNumber: syz
[ 2485.497990][T19526] usb 10-1: config 0 descriptor??
[ 2485.675293][T23888] syz.4.4193 (23888): drop_caches: 2
[ 2485.714905][T23823] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2485.732018][T23823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2485.739563][T23823] bridge_slave_0: entered allmulticast mode
[ 2485.747985][T23823] bridge_slave_0: entered promiscuous mode
[ 2485.758021][T23823] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2485.765505][T23823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2485.773013][T23823] bridge_slave_1: entered allmulticast mode
[ 2485.786820][T23823] bridge_slave_1: entered promiscuous mode
[ 2485.933572][T19526] usb 10-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213)
[ 2485.942629][T12332] Bluetooth: hci3: command tx timeout
[ 2486.011406][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4199'.
[ 2486.454349][T12497] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 2486.479472][T19526] usb 10-1: no permanent extended address found, random address set
[ 2486.487606][T19526] usb 10-1: atusb_probe: initialization failed, error = -524
[ 2486.495525][T19526] atusb 10-1:0.0: probe with driver atusb failed with error -524
[ 2486.584103][T12497] usb 5-1: device descriptor read/64, error -71
[ 2486.585112][T23823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2486.606662][T23823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2486.611987][T23899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2486.655808][T23899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2486.722377][T23823] team0: Port device team_slave_0 added
[ 2486.864494][T12497] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2486.966406][ T2159] usb 10-1: USB disconnect, device number 25
[ 2487.046955][T23823] team0: Port device team_slave_1 added
[ 2487.113490][T12497] usb 5-1: device descriptor read/64, error -71
[ 2487.248701][T12497] usb usb5-port1: attempt power cycle
[ 2487.276930][T23823] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2487.284147][T23823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2487.312837][T23823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2487.843267][T12497] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2487.936039][T12497] usb 5-1: device descriptor read/8, error -71
[ 2488.037791][T23823] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2488.048163][T23823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2488.222738][T12497] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2488.246065][T12497] usb 5-1: device descriptor read/8, error -71
[ 2488.253889][T23823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2488.364479][T12497] usb usb5-port1: unable to enumerate USB device
[ 2489.404182][T23823] hsr_slave_0: entered promiscuous mode
[ 2489.412653][T23823] hsr_slave_1: entered promiscuous mode
[ 2490.074626][   T30] audit: type=1400 audit(2000000147.423:860): avc:  denied  { write } for  pid=23927 comm="syz.9.4208" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 2490.246255][   T30] audit: type=1400 audit(2000000147.503:861): avc:  denied  { setopt } for  pid=23927 comm="syz.9.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 2490.379679][   T30] audit: type=1400 audit(2000000147.643:862): avc:  denied  { write } for  pid=23927 comm="syz.9.4208" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2491.200354][T23950] syz.4.4210 (23950): drop_caches: 2
[ 2491.441729][ T5697] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2491.581269][ T5697] usb 5-1: device descriptor read/64, error -71
[ 2491.589427][T23955] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4211'.
[ 2491.600977][T23955] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4211'.
[ 2491.625308][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4211'.
[ 2491.685242][T23957] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4212'.
[ 2491.831035][ T5697] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2492.025784][T23965] CIFS: VFS: UNC: path must begin with // or \\
[ 2492.032258][T23965] Malformed UNC in devname
[ 2492.032258][T23965] 
[ 2492.039012][T23965] CIFS: VFS: Malformed UNC in devname
[ 2492.111052][T12497] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 2492.380634][ T5697] usb 5-1: device descriptor read/64, error -71
[ 2492.491779][T12497] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2492.512738][ T5697] usb usb5-port1: attempt power cycle
[ 2492.881101][ T5697] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2493.005090][ T5697] usb 5-1: device descriptor read/8, error -71
[ 2493.296668][T12497] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2493.307305][T12497] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2493.310113][ T5697] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2493.324227][T12497] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2493.344643][T12497] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2493.357994][T12497] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2493.420765][ T5697] usb 5-1: device descriptor read/8, error -71
[ 2493.486751][   T30] audit: type=1400 audit(2000000150.835:863): avc:  denied  { write } for  pid=23954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2493.559954][ T5697] usb usb5-port1: unable to enumerate USB device
[ 2493.660329][T12478] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 2493.758286][   T30] audit: type=1400 audit(2000000151.105:864): avc:  denied  { write } for  pid=23978 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2493.821977][T12478] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2493.843101][T12478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2493.861375][T12478] usb 1-1: Product: syz
[ 2493.883711][T12478] usb 1-1: Manufacturer: syz
[ 2493.906025][T12478] usb 1-1: SerialNumber: syz
[ 2493.948164][T12478] usb 1-1: config 0 descriptor??
[ 2493.967032][T12497] gud 10-1:1.0: probe with driver gud failed with error -71
[ 2494.017346][T12497] usb 10-1: USB disconnect, device number 26
[ 2494.466568][T12478] usb 1-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213)
[ 2494.707235][T12478] usb 1-1: no permanent extended address found, random address set
[ 2494.741314][T12478] usb 1-1: atusb_probe: initialization failed, error = -524
[ 2494.773359][T12478] atusb 1-1:0.0: probe with driver atusb failed with error -524
[ 2495.513816][T23996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4217'.
[ 2495.958731][T23998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2495.980838][T23998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2496.386488][T12478] usb 1-1: USB disconnect, device number 110
[ 2497.448526][   T30] audit: type=1400 audit(2000000154.767:865): avc:  denied  { write } for  pid=23981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2497.617760][T24013] syz.0.4221 (24013): drop_caches: 2
[ 2497.769380][   T30] audit: type=1400 audit(2000000155.107:866): avc:  denied  { write } for  pid=24015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2497.873674][T24017] syz.9.4222 (24017): drop_caches: 2
[ 2497.887965][ T2159] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2498.014246][T23823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2498.027745][ T2159] usb 1-1: device descriptor read/64, error -71
[ 2498.038585][T23823] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2498.055170][T23823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2498.076587][T23823] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2498.096247][T23823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2498.132768][T23823] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2498.153145][T23823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2498.188121][T12478] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 2498.195351][T23823] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2498.297584][ T2159] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 2498.327737][T12478] usb 10-1: device descriptor read/64, error -71
[ 2498.447702][ T2159] usb 1-1: device descriptor read/64, error -71
[ 2498.491006][T24033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4218'.
[ 2498.501481][T24033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'.
[ 2498.511485][T24033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4218'.
[ 2498.583618][ T2159] usb usb1-port1: attempt power cycle
[ 2498.613066][T12478] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 2498.848108][T12478] usb 10-1: device descriptor read/64, error -71
[ 2498.957268][T19529] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2499.009904][ T2159] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 2499.109515][T12478] usb usb10-port1: attempt power cycle
[ 2499.159349][ T2159] usb 1-1: device descriptor read/8, error -71
[ 2499.199222][T19529] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2499.394658][T19529] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2499.507493][ T2159] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2499.541891][T19529] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2499.622640][ T2159] usb 1-1: device descriptor read/8, error -71
[ 2499.637711][T12478] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 2499.668485][T19529] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2499.710319][T23823] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2499.741245][T12478] usb 10-1: device descriptor read/8, error -71
[ 2499.765074][T19529] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2499.821870][ T2159] usb usb1-port1: unable to enumerate USB device
[ 2499.965388][T19529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2500.044802][T12478] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 2500.211499][T12478] usb 10-1: device descriptor read/8, error -71
[ 2500.479642][T12478] usb usb10-port1: unable to enumerate USB device
[ 2500.559927][T23823] 8021q: adding VLAN 0 to HW filter on device team0
[ 2500.639813][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2500.647143][ T8286] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2500.732468][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2500.739713][ T8286] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2501.154146][   T30] audit: type=1400 audit(2000000158.509:867): avc:  denied  { write } for  pid=24020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2501.335826][T24050] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4224'.
[ 2501.563496][T24047] CIFS: VFS: UNC: path must begin with // or \\
[ 2501.571531][T24047] Malformed UNC in devname
[ 2501.571531][T24047] 
[ 2501.578269][T24047] CIFS: VFS: Malformed UNC in devname
[ 2501.871156][T19529] gud 5-1:1.0: probe with driver gud failed with error -71
[ 2501.925008][   T30] audit: type=1400 audit(2000000159.279:868): avc:  denied  { write } for  pid=24054 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2501.954469][T19529] usb 5-1: USB disconnect, device number 121
[ 2502.509933][T23823] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2502.524050][   T30] audit: type=1400 audit(2000000159.879:869): avc:  denied  { write } for  pid=24059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2502.607349][T23823] veth0_vlan: entered promiscuous mode
[ 2502.637224][T23823] veth1_vlan: entered promiscuous mode
[ 2502.645234][   T30] audit: type=1400 audit(2000000159.999:870): avc:  denied  { write } for  pid=24076 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2502.685071][T23823] veth0_macvtap: entered promiscuous mode
[ 2502.697618][T23823] veth1_macvtap: entered promiscuous mode
[ 2502.724472][T23823] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2502.753363][T23823] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2502.856898][T10666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.907926][T17525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.934871][T17525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.949813][T17525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.974361][T19273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2502.983401][T19273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2503.041565][T17525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2503.051234][T17525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2503.189769][   T30] audit: type=1400 audit(2000000160.550:871): avc:  denied  { write } for  pid=24078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2503.259880][   T30] audit: type=1400 audit(2000000160.620:872): avc:  denied  { write } for  pid=24089 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2503.489502][   T30] audit: type=1400 audit(2000000160.850:873): avc:  denied  { write } for  pid=24091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2503.568079][   T30] audit: type=1400 audit(2000000160.930:874): avc:  denied  { write } for  pid=24102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2503.802566][   T30] audit: type=1400 audit(2000000161.160:875): avc:  denied  { write } for  pid=24104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2503.880554][   T30] audit: type=1400 audit(2000000161.240:876): avc:  denied  { write } for  pid=24115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2504.123834][   T30] audit: type=1400 audit(2000000161.480:877): avc:  denied  { write } for  pid=24117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2504.198359][   T30] audit: type=1400 audit(2000000161.560:878): avc:  denied  { write } for  pid=24128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2528.313920][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.321882][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2589.723814][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2589.730792][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2602.035850][ T5614] Bluetooth: hci3: command 0x0406 tx timeout
[ 2651.133283][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2651.140376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2659.448699][   T31] INFO: task kworker/0:6:5725 blocked for more than 143 seconds.
[ 2659.457700][   T31]       Tainted: G             L      syzkaller #0
[ 2659.464236][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2659.473927][   T31] task:kworker/0:6     state:D stack:22936 pid:5725  tgid:5725  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2659.487250][   T31] Workqueue: usb_hub_wq hub_event
[ 2659.492347][   T31] Call Trace:
[ 2659.497304][   T31]  <TASK>
[ 2659.500318][   T31]  __schedule+0x125c/0x6730
[ 2659.504872][   T31]  ? __pfx___schedule+0x10/0x10
[ 2659.509856][   T31]  ? find_held_lock+0x2b/0x80
[ 2659.514586][   T31]  ? schedule+0x225/0x2c0
[ 2659.519062][   T31]  schedule+0xdd/0x2c0
[ 2659.523162][   T31]  usb_kill_urb+0x253/0x320
[ 2659.527858][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2659.532949][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2659.539999][   T31]  usb_start_wait_urb+0x2c3/0x580
[ 2659.545101][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2659.550773][   T31]  ? trace_kmalloc+0xeb/0x110
[ 2659.555521][   T31]  ? __asan_memset+0x23/0x50
[ 2659.560169][   T31]  usb_control_msg+0x328/0x4b0
[ 2659.564961][   T31]  ? __pfx_usb_control_msg+0x10/0x10
[ 2659.570327][   T31]  get_bMaxPacketSize0.constprop.0+0xd0/0x1f0
[ 2659.576416][   T31]  hub_port_init+0x642/0x37f0
[ 2659.581761][   T31]  hub_event+0x2ead/0x4420
[ 2659.586224][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2659.591769][   T31]  ? preempt_schedule_thunk+0x16/0x40
[ 2659.600210][   T31]  process_one_work+0xa23/0x1940
[ 2659.605261][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 2659.613855][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2659.618847][   T31]  worker_thread+0x5ef/0xe50
[ 2659.623494][   T31]  ? kthread+0x13a/0x450
[ 2659.628460][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2659.633617][   T31]  kthread+0x370/0x450
[ 2659.637782][   T31]  ? __pfx_kthread+0x10/0x10
[ 2659.642418][   T31]  ret_from_fork+0x72b/0xd50
[ 2659.647126][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2659.652282][   T31]  ? __switch_to+0x800/0x10f0
[ 2659.657166][   T31]  ? __pfx_kthread+0x10/0x10
[ 2659.661815][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2659.666596][   T31]  </TASK>
[ 2659.669870][   T31] 
[ 2659.669870][   T31] Showing all locks held in the system:
[ 2659.677688][   T31] 1 lock held by khungtaskd/31:
[ 2659.682544][   T31]  #0: ffffffff8ede8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 2659.692870][   T31] 2 locks held by getty/5349:
[ 2659.697715][   T31]  #0: ffff88803759f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2659.709172][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 2659.719665][   T31] 5 locks held by kworker/0:6/5725:
[ 2659.724926][   T31]  #0: ffff888021aae540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 2659.735823][   T31]  #1: ffffc9000443fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 2659.747489][   T31]  #2: ffff88802c8621d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[ 2659.756540][   T31]  #3: ffff88802c867568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420
[ 2659.766565][   T31]  #4: ffff88802c80ce60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420
[ 2659.777705][   T31] 3 locks held by kworker/u8:3/10666:
[ 2659.783141][   T31]  #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 2659.793181][   T31]  #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730
[ 2659.803296][   T31]  #2: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 2659.813454][   T31] 
[ 2659.815787][   T31] =============================================
[ 2659.815787][   T31] 
[ 2659.824366][   T31] NMI backtrace for cpu 1
[ 2659.824387][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2659.824417][   T31] Tainted: [L]=SOFTLOCKUP
[ 2659.824425][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2659.824439][   T31] Call Trace:
[ 2659.824446][   T31]  <TASK>
[ 2659.824454][   T31]  dump_stack_lvl+0x100/0x190
[ 2659.824485][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 2659.824513][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2659.824543][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[ 2659.824577][   T31]  sys_info+0x141/0x190
[ 2659.824603][   T31]  watchdog+0xcb1/0x1030
[ 2659.824633][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2659.824654][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2659.824678][   T31]  ? __kthread_parkme+0x18c/0x230
[ 2659.824713][   T31]  ? kthread+0x13a/0x450
[ 2659.824733][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2659.824758][   T31]  kthread+0x370/0x450
[ 2659.824777][   T31]  ? __pfx_kthread+0x10/0x10
[ 2659.824801][   T31]  ret_from_fork+0x72b/0xd50
[ 2659.824844][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2659.824877][   T31]  ? __switch_to+0x800/0x10f0
[ 2659.824918][   T31]  ? __pfx_kthread+0x10/0x10
[ 2659.824943][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2659.824989][   T31]  </TASK>
[ 2659.824998][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 2659.958142][    C0] NMI backtrace for cpu 0
[ 2659.958162][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2659.958191][    C0] Tainted: [L]=SOFTLOCKUP
[ 2659.958199][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2659.958211][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2659.958241][    C0] Code: d5 aa 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 2f 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 2659.958260][    C0] RSP: 0018:ffffffff8ea07e10 EFLAGS: 00000246
[ 2659.958277][    C0] RAX: 000000000b3ab703 RBX: ffffffff8ea91480 RCX: ffffffff8bbc9335
[ 2659.958291][    C0] RDX: 0000000000000000 RSI: ffffffff8e3aced0 RDI: ffffffff8c600380
[ 2659.958308][    C0] RBP: fffffbfff1d52290 R08: 0000000000000001 R09: ffffed101708678d
[ 2659.958322][    C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000
[ 2659.958334][    C0] R13: 0000000000000000 R14: 1ffffffff1d40fc6 R15: dffffc0000000000
[ 2659.958349][    C0] FS:  0000000000000000(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000
[ 2659.958368][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2659.958382][    C0] CR2: 00005610cf2b5660 CR3: 00000000735d2000 CR4: 00000000003526f0
[ 2659.958395][    C0] Call Trace:
[ 2659.958402][    C0]  <TASK>
[ 2659.958409][    C0]  default_idle+0x9/0x10
[ 2659.958432][    C0]  default_idle_call+0x6c/0xb0
[ 2659.958456][    C0]  do_idle+0x3a7/0x5b0
[ 2659.958485][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2659.958517][    C0]  cpu_startup_entry+0x4f/0x60
[ 2659.958545][    C0]  rest_init+0x251/0x260
[ 2659.958570][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 2659.958596][    C0]  start_kernel+0x48e/0x490
[ 2659.958616][    C0]  x86_64_start_reservations+0x24/0x30
[ 2659.958638][    C0]  x86_64_start_kernel+0x12b/0x130
[ 2659.958659][    C0]  common_startup_64+0x13e/0x158
[ 2659.958685][    C0]  </TASK>
[ 2660.148900][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2660.155749][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2660.166434][   T31] Tainted: [L]=SOFTLOCKUP
[ 2660.170752][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2660.180811][   T31] Call Trace:
[ 2660.184110][   T31]  <TASK>
[ 2660.187037][   T31]  dump_stack_lvl+0x100/0x190
[ 2660.191765][   T31]  vpanic+0x552/0x970
[ 2660.195760][   T31]  ? __pfx_vpanic+0x10/0x10
[ 2660.200298][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[ 2660.206554][   T31]  panic+0xd1/0xe0
[ 2660.210296][   T31]  ? __pfx_panic+0x10/0x10
[ 2660.214718][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[ 2660.220878][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[ 2660.227034][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[ 2660.233202][   T31]  ? watchdog.cold+0x1ec/0x234
[ 2660.237965][   T31]  ? watchdog+0xcc1/0x1030
[ 2660.242407][   T31]  watchdog.cold+0x1fd/0x234
[ 2660.247009][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2660.252822][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2660.257506][   T31]  ? __kthread_parkme+0x18c/0x230
[ 2660.262550][   T31]  ? kthread+0x13a/0x450
[ 2660.266801][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2660.271482][   T31]  kthread+0x370/0x450
[ 2660.275553][   T31]  ? __pfx_kthread+0x10/0x10
[ 2660.280184][   T31]  ret_from_fork+0x72b/0xd50
[ 2660.284787][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2660.289907][   T31]  ? __switch_to+0x800/0x10f0
[ 2660.294585][   T31]  ? __pfx_kthread+0x10/0x10
[ 2660.299174][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2660.303961][   T31]  </TASK>
[ 2660.307215][   T31] Kernel Offset: disabled
[ 2660.311527][   T31] Rebooting in 86400 seconds..