last executing test programs: 29m27.614099018s ago: executing program 32 (id=14): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(0xffffffffffffffff, 0xfffffff9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 28m27.347740375s ago: executing program 33 (id=236): ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f6861", 0x1f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x7000, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x100010000000000) 28m17.855836911s ago: executing program 34 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) write(r0, &(0x7f0000000000)="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", 0x14d) 26m52.014282156s ago: executing program 35 (id=697): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40003020, &(0x7f0000003700)={0x77359400}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0080ff0000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 24m45.988939211s ago: executing program 36 (id=1225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 20m30.48205679s ago: executing program 37 (id=2451): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x8080003ad) listen(r1, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x2, 0x12) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x239f, &(0x7f0000000380)=0x0) io_cancel(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x100, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440), 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB='noswap,usrquota_block_hardlimit=2605e']) r7 = accept4$inet(r1, 0x0, 0x0, 0x0) close(r7) close(r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) 19m13.291475844s ago: executing program 38 (id=2844): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e23001e69469b6716f5112c92dbfc05000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000600000000feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x4, 0x0, 0x7b0, 0x3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000000)={'gretap0\x00', 0x1}) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000030700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000002401000001f9580dabf95ddc91967c2008000240000000000c0001e851415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048001) 18m30.524123043s ago: executing program 39 (id=3137): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0xd9, 0xfe, 0x2, 0x0, 0xfc, 0xc, 0x0, 0x3, 0x4, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xac, 0x2, 0xf, 0xb}, {0x6, 0x6, 0xf, 0x5}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x3321, 0x97c}, 0x10) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0xa, 0x7fffffff, 0x5, 0x4}) 17m12.11604865s ago: executing program 40 (id=3404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4f9f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000400003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 15m34.824852469s ago: executing program 41 (id=3737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x1, 0xa, 0x2, &(0x7f00000013c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000004c0)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) 11m24.146326777s ago: executing program 42 (id=4914): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x140, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "f65bd7000d6f3e40d349cc455d350ffe47ca8e624d135d4e1764b7a3d6b1a3d32e9e5ebd2ef40dd4b0bf222e2514743b53e2ec2402f6320387c1c8089aea7517ade808ba76fd26cc254d297cee711c73747d595b0cfcdd5bd5cdbe496a0e6595c45615b3ef03"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1bc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, &(0x7f0000000180)=0x1e) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x24, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @uvalue=0x34b}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x6}]}) r5 = dup(r0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000180)={0x1, @output={0x0, 0x0, {0x0, 0x4}, 0x100000b, 0x69}}) fallocate(r5, 0x10, 0x0, 0x1062200) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345.', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 9m34.074122733s ago: executing program 43 (id=5432): ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x8) syz_usb_connect(0x3, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="e9d8fe63a43c4bc97749efb6ca40746a224f8f299205873916e887e8129c73189f52fa226864029ac9a2784d58f7f84cbaff4b3be669134c03faaf60545a3c9adad40cfb38245eae560013cdb257f20cfd94e42d4ac18c2445fab7b73e58fc41a1a002b95f65f7daf152eb6ca5322b8971eb2b71ca3024250f1c85a713c3fb5702a147e85aca0e029681662f6e5547715be4a9f8a6ffd2d785c7402c2979f07e8ef317b28e0750051bc259a6d59cec73efe9cdcd6c27e34a0f532307d0b26af5521d6dd8e678607aab593186f93ca08faef78d68b652e9ab1a03bc8778a1d30bf5f5d0fb787eb0fc6b74e8a580b71d3445ce6f81dd", @ANYRESDEC, @ANYBLOB="a79648c98cc6d67b817a31792a958c0899ec7e1a1d4081a7b4c1aa148fd468f52dbae5b3bb56c96d4e52e86d783a060d142ef424324d7baf6d5de73fd9076cda2b551bf8243b124de5f08182594995a75463311469bf22192db48fe4896e05838b2f44a4edb0ddc0c3557a9e", @ANYBLOB="f9b96d69df29f7268b1faf9941feff599f7516649ed45ca12f549dbff2c217156a5f3e2a09f890fb3cb16e4008b25d444ba3345ce279493d5b1535bfba360b09e0d5a6f5012dbecd06bd6a36b2da0724fe008fd9dbd3313c7ba53bc86eed0e3bc1f7aa8624f9838722e09ef918b1ee"], 0x0) 7m34.634991022s ago: executing program 44 (id=5927): mkdir(&(0x7f0000000280)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='bfq', 0x3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0xd0, 0x8801, 0x0, 0x0}], 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000c, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r9, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8", 0x11, 0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 5m44.580485185s ago: executing program 45 (id=6298): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x3, 0x5, 0x1}, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04053920"], 0x7) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x88042, 0x0) write$P9_RSTATu(r2, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'veth1_virt_wifi\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0xe2, "d751577a9768cab4db02024257e79492021cc0f7bd656c1b9ee4e184fd520000dd095bf6fba078b29ff4a211823c087f496bdfa6203ce15fb6c3a4e8b8ceed354b3c570b3995deba3188ae8ffeaa271953bf143e495cd3ab648799a25f9a134c0df88362fd9ea48ba6c2f0efd98edf40d6775172533e0593518e3a32cc0e50eb5a6ee62624eaeb3d2bdd7c8dd3bacefc7be80fedec6abd3b99979284f7b967d16437986034f447830787170be4f446a325195b3d072be6cd6c8f629c987e112f66afbd83336eae44805327d1e7f484a569ac33106c2260370a471aee3a5b1d420e0c"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3d, 0x301, 0x2270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r5, &(0x7f00000001c0)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000e00000000000200001800800020074637000140001000200080200dc00"/84, 0x54) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 5m28.94986758s ago: executing program 46 (id=6340): getsockname$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000e80)=0x6e) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201010290a61a085e048402a13601020301090224000104fbc0070904540102eade19e279dbc684000204045b09050a03000203090f"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='*%\x00', 0xc000, &(0x7f0000000040)={@align=0x6, {0xa3b7, 0xad, 0x1, 0x6}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}, {[0x5, 0x5, 0xfffffff3, 0x9d150900]}, 0x9, 0x7, &(0x7f0000000100)=""/7}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x86f}], 0x1}, 0x4040000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000ec0)={'pimreg0\x00', {0x2, 0x4e23, @remote}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00fbff100003006332c5ab004c33ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x7e) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000240)=""/127, 0x7f}], 0x2) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000001c0)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x101000, &(0x7f0000000340)={@_ha_fsid={[0x10000, 0x5]}, {0xd, 0x2, 0x6, 0x1}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x6}) 4m2.292310263s ago: executing program 47 (id=6581): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x5bd0c3, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0x3, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000300)) 3m44.468305832s ago: executing program 48 (id=6586): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618d, &(0x7f0000000000)) 3m32.70258883s ago: executing program 1 (id=6644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe8000"/49], 0x64) 3m31.461250624s ago: executing program 1 (id=6645): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f52600050000001324030500"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="1ba6e80000001e31d3af0400000000000000351bc03573ceeef648d70136f49d25aa0c0d"], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf0, 0x2, 0x3}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) 3m30.102938738s ago: executing program 6 (id=6648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x68) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000040)={0xe8, 0x4, 0x4, 0x7, 0x3, 0xc5, 0xff7f}, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}]}, 0x10) write(r3, &(0x7f0000000400)='-:mygroup/myevent ./dummy:0x2', 0x1d) 3m29.694740964s ago: executing program 6 (id=6649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 0xfffffffd}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a008080ffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000}, 0x20008000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000374000/0x1000)=nil, 0x1000}, 0x1}) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x444900, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r10, @ANYBLOB="00022abd7000ffdbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000a0001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000100)=[@clear_death], 0x0, 0x0, 0x0}) r11 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x4, 0x0) ioctl$XFS_IOC_GOINGDOWN(r11, 0x8004587d, &(0x7f0000000300)=0x9) 3m29.098538149s ago: executing program 6 (id=6650): openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0xf527d35154f0c4dd, 0x0) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000300)={0x1, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88400, 0x16) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x60, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x8000, 0xb, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x4, 0x2}, {0x4, 0x402}, 0xfffffe29, 0x6}) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x695) 3m28.464566866s ago: executing program 6 (id=6651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) mknodat(r5, &(0x7f0000000200)='./dev\x00', 0xc000, 0x1fa00000) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000000)) sendto$packet(r2, 0x0, 0x0, 0x24001000, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x3}, 0x14) 3m28.09103133s ago: executing program 1 (id=6652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe8000"/51], 0x64) 3m27.621582612s ago: executing program 6 (id=6653): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x100, 0x7, 0xaf, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r3, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)={0x90, 0x0, 0x3ff, {0x6, 0x2, 0x800, 0x1, 0x401, 0xfffffffd, {0x1, 0x3cf0, 0xd74, 0x1, 0x1, 0x100000000, 0x2, 0x81, 0xfffffff7, 0xa000, 0x9, r3, r4, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@metacopy_off}, {@index_on}, {@uuid_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'user_id'}}, {@subj_role={'subj_role', 0x3d, 'fd'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_gt={'fowner>', r3}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x402) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0x7, {0x7, 0x0, "0000000500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c75abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad200", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x100, 0x7, 0xaf, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r3, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)={0x90, 0x0, 0x3ff, {0x6, 0x2, 0x800, 0x1, 0x401, 0xfffffffd, {0x1, 0x3cf0, 0xd74, 0x1, 0x1, 0x100000000, 0x2, 0x81, 0xfffffff7, 0xa000, 0x9, r3, r4, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@metacopy_off}, {@index_on}, {@uuid_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'user_id'}}, {@subj_role={'subj_role', 0x3d, 'fd'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_gt={'fowner>', r3}}]}) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x402) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x5, 0x7, {0x7, 0x0, "0000000500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 3m27.549887322s ago: executing program 1 (id=6654): syz_ublk_setup_io_uring(0x1f, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1db}, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e3, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000e20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001420048008000140000000030800024000000000fdffffff060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e0001f7ffffffffffffff696300000008000240000000001c0003"], 0x100}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) write(r4, &(0x7f0000000200)="0450000500ee3bbed3c35a07ee000004000000001c8161c84b85d1f7ae36d74a8befc1d1f374c1572d32df8817ac51b69124a851bd1489d5722cb2d60800705fd325e9a7b710e9", 0x47) sendmsg$rds(r3, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/13, 0xd}], 0x3, &(0x7f00000006c0)=[@cswp={0x58, 0x114, 0x7, {{0x1}, &(0x7f0000000500)=0x3, &(0x7f0000000540)=0xc723, 0x7ff, 0x4, 0x42c, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/89, 0x59}, &(0x7f0000000600)}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x7}, &(0x7f0000000640)=0x4, &(0x7f0000000680)=0x101, 0x4, 0x3, 0x401, 0x0, 0xc, 0x717}}], 0xe0, 0x80}, 0x800) 3m27.214618611s ago: executing program 1 (id=6655): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040001c00364", 0x32}, {&(0x7f0000001ec0)="703f0634db2bd3020012d77f5bea3201c4709edd509da7dafd9b3ab926815af86e52c3521b7ce2a45ed1", 0x2a}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x810) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x13a1910ebc955f11) close_range(r3, r3, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3m26.610811049s ago: executing program 6 (id=6657): socket$nl_rdma(0x10, 0x3, 0x14) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x14}, 0x4000000) 3m25.646942624s ago: executing program 49 (id=6657): socket$nl_rdma(0x10, 0x3, 0x14) setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x14}, 0x4000000) 3m24.11982559s ago: executing program 1 (id=6661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe8000"/51], 0x64) 3m23.080672381s ago: executing program 50 (id=6661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe8000"/51], 0x64) 2m36.542045873s ago: executing program 0 (id=6739): r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='P\x00\x00\x00_d\x05mmy_enczyption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=r2, @ANYBLOB="04"], 0x14}}, 0x28040000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0xfdfdffffffffffff, 0x5f, 0x3}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r8, 0x1, 0x5, 0x0, 0x5, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3b}, 0x60) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) sendto$packet(r3, &(0x7f00000002c0)="579783ce8fb2c7af4c5eccead393662499d6c78a2835857bbdef4320e684dd36f0318e0b9d39e8fbe3a43f4fe8cef3d518c46f6387ee8c154bc6411b711d7b355e24ba6e8450d29b06333c9ccb937550670f105127f61a5aa54519ea675663648be6a976fa60b1180a089b4086d40b1e3e8aca19d3d60b60a104ed661b09444a6a918dbc8c2e737297bf020c53722dc4536fbeffadc00775300d289b0d789e9414f9960acc1d", 0xa6, 0x4040084, &(0x7f0000000380)={0x11, 0x8, r5, 0x1, 0x5, 0x6, @random="86342764e1e7"}, 0x14) 2m36.215403952s ago: executing program 0 (id=6740): r0 = syz_io_uring_setup(0x7f3f, &(0x7f0000000000)={0x0, 0xb8d0, 0x40, 0x2, 0xbe}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000003, 0x12, r0, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="45000000040006000000", 0xa) 2m35.886740841s ago: executing program 0 (id=6741): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ff"], 0xa0}}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) unshare(0x60000600) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000004340)={'filter\x00', 0x7, "a570c96590b4af"}, &(0x7f0000004480)=0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) fcntl$setlease(r3, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 2m32.750156988s ago: executing program 0 (id=6750): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xa00c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x4, 0xfb, 0x8, 0xb}, 0xc) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000240)={&(0x7f0000000040)=0x7fff, 0xfffffff8, &(0x7f0000000080)=[{}, {}], &(0x7f0000000200)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x440c4, &(0x7f0000000000)={0x2, 0x4ea3, @local}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) 2m32.482414616s ago: executing program 0 (id=6752): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x11) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x850, &(0x7f000005ffe4)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) close(r1) 2m29.209249349s ago: executing program 0 (id=6761): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xbe, 0x12) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000200)="2c319b9e60516e1996f6c088c5aa7d1d85be49de8d8f78ee0180e83cf3381ea3b855a3e34f8ad3e49ba3cde1e02dd1109ce59ccd78db3474b7b5e4bee057a160202814ae36636bbe4419fe2889ab25c03c29b35075283f3f856413c0a60307d5fe386d23a950f4b32b512fb8f2486d6d640ead22c68ce3d00cbfcb3902b2e4b11146099199dae20d9b21f903c1047388d8c67a80fbbed6454bb13456e8f1578d2b02cad4ae37a167c31f8281047afd1934d9634206c46972989e95f9b28fb2f344aa8b58c748dc0fd305564ed1f1bba81e980b78dd25ab3382770d6c4e0abdaa301954c060886a") r3 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8931, &(0x7f00000000c0)={'wg2\x00', @ifru_settings={0x6962, 0x2, @fr=0x0}}) write(r4, &(0x7f0000000340)='1', 0x1) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4008}, 0x40800) timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) r8 = gettid() rt_tgsigqueueinfo(r3, r8, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) 2m28.946703221s ago: executing program 4 (id=6762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c00000032000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) 2m28.602364743s ago: executing program 4 (id=6763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}}, 0x40004804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259203ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0978ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f0355808c6bd48d5590647a63a633bffff250b5a293e38c1660edb46233bd025720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r6 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x31, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)=',12', 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f0009002abd700000000000040000000900118031f9e05e2f000000c1385614e4c751644c2c08dbb46823cea10dfba958d88896bcdee6dd09b22da7189965f3e5bb957166c83f"], 0x20}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) 2m25.45955364s ago: executing program 4 (id=6768): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x148942, 0x1c6) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r2}}]}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="81") r3 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002000000402505a8a440000102030109022400010105600b09040035010701020d090501021000070000000000000000000501"], &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x3, 0x7, 0x3, 0x0, 0x3}, 0x86, &(0x7f0000000140)={0x5, 0xf, 0x86, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x6, 0xf000, 0xff, [0xc030, 0xff00, 0x3f00, 0x3f0f]}, @generic={0x2f, 0x10, 0xa, "644431778c7f77c8b64623d9fb51909c6030f7772e2d08ec453feabef57d32f0c5fef4dc1a880625e29034f1"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x8, 0x0, 0x9, [0xf, 0xff0000, 0x0, 0x30, 0xffffcf, 0xff1fb0]}, @ptm_cap={0x3}, @generic={0x4, 0x10, 0x4, "b8"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x23, 0xffff, 0xa}]}, 0x1, [{0x7e, &(0x7f0000000200)=@string={0x7e, 0x3, "f093174b07090a5dedaf0711401acc5e3966e4be496954a132f6919fc0ec72e1b334de8028efc2c8e02aad16f4d141189a2f4206c0e1c1534e8a8b0da7c28cb80aa520ec10b6427c5dff90286d5047a75b7c386e3342e120731085b95bbf3774b3c3874a3a6a9e8294eb6b806cbb1131d8a42eb6778610cbf481ed25"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000340)={0x14, &(0x7f00000002c0)={0x40, 0x23, 0x6, {0x6, 0x6, "6fcb7253"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x20, 0x0, 0xa8, "bd3f3385120eed58461419ac5400ee25829535617dbfe7e7dfe21f02aa6e663d71f2b5521c14bd5254da39be001b296b688a0d6d1ab4d086ba8d3e4a3c7b8faf9aad5f6e308e7fab79ccef5e0c8c6597489a06fab6072cc7ee66a1778c7b006f078ea0b768f7d356433eb310db9721a56134fb0d88d94d279da018ecce413d6d82a08d909f668558c94be4a53fd5077a85983b97476cbc99613681a4e0c7ae28be0dc3fee371ccc6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000540)={0x20, 0x0, 0xd9, {0xd7, "57a39b4004131893cadfc12170ff732383f93962b94f392527dbb5f483e5cbcd0be4755d562862c297c68ae9241fedb1a6551fd5a3adfc25dc3ed26101507e48f8967a78fedf823cdc22c9fd578204ce89861e302f6d078385f679a9ec093fe9e2754aa3cb2e1b2e6fdb754c3bb56519cfa71df68689ee4497d445860e8c2100f79d47af6b4ebe9530454f9fd32daa2d9a24b60060c503d420c0e170e23ee96980aa83397dd6a75be832cdf1498da49c2da2759ddf583744e3b6a0bafa21592898ec05a3933c4f78df4d0e4fe011dcdf32c5f86ecca3d6"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x1}}) 2m22.29467575s ago: executing program 4 (id=6777): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(r1, 0x0, 0x40000000, 0x0) (async) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) (async) open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) (async) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3) (async) 2m20.959189992s ago: executing program 4 (id=6779): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000003, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x3, 0x5, 0x3, 0x80000000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x80000, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000e00)={'syz1\x00', {0x8, 0x3, 0x5, 0x5}, 0x6, [0x6, 0x8228, 0x400, 0xbd4, 0x2e09800, 0x100, 0x3, 0x40007, 0x3, 0xd, 0x100, 0x1, 0x4, 0x5, 0x2, 0xb788, 0x5a, 0x150, 0x4, 0x1, 0x4, 0x9, 0x3, 0x7, 0x6, 0x7f, 0x8af4, 0x3, 0x2, 0x6, 0x4, 0x33a2, 0x200, 0xffff7b22, 0x4, 0xe0, 0x7, 0x3, 0xff, 0x800, 0x7f, 0xffffff81, 0x7f, 0x5, 0x80000, 0x7, 0x23e, 0x9, 0x67, 0x9, 0x10, 0x1000000b, 0x2, 0xef, 0x5, 0x6, 0xb8e, 0x627, 0x6, 0x0, 0x9, 0x1, 0x10000004, 0x9], [0x3, 0x0, 0x1, 0x80000001, 0xffffffff, 0xff, 0x1, 0x3, 0x7, 0x9, 0xd502, 0x80000001, 0x4439, 0xffff, 0x7, 0x7, 0x5, 0x8, 0x4, 0x4, 0x1, 0x6, 0x0, 0x9, 0x800001, 0x7, 0x7, 0x7, 0x0, 0xae, 0xa8d, 0x4605, 0xfffffffe, 0x7fff, 0x100, 0xffffffff, 0x3, 0x3, 0x7ff, 0x8, 0x10000, 0x4, 0xfffffe00, 0xfff, 0x106, 0x3, 0x8, 0xf0, 0x5, 0x6, 0x400, 0x7, 0x3, 0x8, 0x1000, 0x8, 0x31, 0x81, 0x8, 0x401, 0x3, 0x9a, 0x10, 0x7], [0x5, 0xfffffffe, 0x800006, 0x6, 0xb0fa, 0x4, 0x7ef, 0xc, 0x5, 0xb79a, 0x2, 0x5, 0x2, 0x34000, 0x0, 0x0, 0x6, 0x1, 0x400, 0x1, 0x1, 0x9, 0x101, 0x7, 0xfa, 0x5a17, 0x42d, 0x3, 0xe8, 0x3, 0x85e, 0x8, 0x2, 0x2, 0x7fffffff, 0x9, 0x1, 0xa, 0x0, 0xf, 0x6, 0x10000000, 0x40, 0x8, 0x6, 0x4ea, 0x6, 0x100, 0x1, 0x7f, 0xf7, 0xfc, 0x8, 0x0, 0x5, 0x6, 0x6, 0x5455, 0x2, 0x1001, 0x2, 0x400, 0xffffff7f, 0x4219], [0x5, 0x3, 0x8, 0x2, 0x5043, 0x9, 0x2c, 0x3d, 0x400, 0xe, 0x3, 0x0, 0x8, 0x44a4e339, 0x499, 0x4, 0xc2383e8d, 0x40, 0x9, 0x9, 0x9, 0x3, 0xe, 0xfffffff8, 0x4, 0x3, 0x10, 0x9, 0x9e92, 0x0, 0x9, 0x1000, 0x2, 0xc845, 0x5, 0x6, 0x6, 0x3, 0x800, 0x1d, 0x6b66fc9f, 0x40000005, 0x0, 0xfffffff7, 0x0, 0x945, 0xb7, 0x4, 0xffff, 0x9, 0x4, 0x7ffffffc, 0xf2be, 0x7, 0x3, 0x7fff, 0x81, 0x1, 0x6, 0x5, 0x8, 0x2, 0x2, 0xfe]}, 0x45c) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000003c0)={0x9b0000, 0x2, 0x2207, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990a97, 0x400008, '\x00', @p_u16=0x0}}) 2m19.738426207s ago: executing program 4 (id=6781): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0xbe, 0x7, 0xb9, 0x8, 0x10}, 0xe8, &(0x7f0000000580)={0x5, 0xf, 0xe8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "52907007494fc7cf8f5e8ae69bd2a948"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0xdf77}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xc, 0x2, 0x2, 0x85}, @generic={0xb7, 0x10, 0x3, "c92eb0f9227eb016f7983c210dd2a46ba9d4623de31028a9c7b756bbf0563480fcca65b0e5ff85cb0cdf2c25ff141b13820dbe691204a1fe9c98cb17fc38350323252898a2803b2f3a8ade107376a18705cc73ecfefc5c4511595c290ecadad74809862adeb239eb3a966c6c05268d537e17d07932ff7d3916d0bd4af74094c985871abe23e818e70e97514dca612dd4663a883fd22d4b43dc190fd147e24fefce1ae8c792e06186b8df498aeee9d9edd0299eec"}]}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1409}}, {0xe2, &(0x7f00000006c0)=@string={0xe2, 0x3, "118fd18a19c2a89c9ddadcd28f2740e82e5ff59aae82b3b01abe7d52f5e8f25aacfd97b0de07241acdd4057b1f8358a122330a399b3ebb0df38ddfe4f3b15cf52346498bfdb3f8e286e134afaa3bc472639a226fce3fcf6b2ac1edf2e9785fbc8c0092e6cbd0b13b81d056b5fae1388e91ff85c7a07eb58aa51e88227abbde2f01fecfa6bd85435cb9ebe3cede01c2b5be9b2c38fb8eb4b31a1cdaf3f74e9f3d15c17983b52fed6b6e0fbfcb4afd62a7973151f5b20cd159bb3c6335702008cc423bef306ee31d8225c1033d4edf64dc449a9efe1d97e7557542ece494726f0e"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a00000200500050000000020000ffff601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0xa, 0xd8, {0xd8, 0x8, "70af02be4304dc3fd4a2595a5820e91d021faa86f6b56af5efdebea4cb79705fdfd9fa13f7f5ab4b41f53fc03c82cc6b66f8431eb1f9d6b4702d2c347d638c921fe32ef34833c301ca31070d0a95c2e4ea7a7af734fd6c646cbfa5c0e930366b08a37f365f4cc802e7e23c85e15a991af248a6fdde81cd0edd5bab481cade07ae6b84223200dc693ebb4f137b36de524ba4256167be7c13faef6811b6e4d2ac3205140bdbdbd908039d58036005f78d6a82dbe89e7139164fda5c79d90fd9eeebf5d23324b17f89fcecfab3ba3ac4d7f93df6ccab831"}}, &(0x7f0000000140)={0x0, 0x3, 0x81, @string={0x81, 0x3, "8b9cdcbb3b4d51dc1de25bdff7ec7f738f69661b031014b4f7b492e560b07316e2000322243a08ddf3582916f8e27f967c05deb930b33bca904788c848b319b38219089eb9c4d80c86080e8889eab3775dc343919eae86314916bc4ec5f26058e48778b928b4b04a91cacd8312594c5bce259410cf633ac9fc60932c684773"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x0, 0xe, 0x11, "e9b5c43c38cd0baac602b89bac5ddc4578"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x44}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "5cf352"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "a1e949"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, ' '}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05d845"}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x40, 0xd, 0xa4, {0xa4, 0x22, "16ee2b6e0f3eb3df998bbe12fbe11799c334888402001c309f9a62167b15df1f34f1db0490bdf6d35ea260c01e39babc49e497f11ae11babef99ab984fb30d3023878a4128f3b3a31183ea068b9c5218c680c55ba453f636a07f222e3aec2fdaea95ae806ea3c210d617d4938b30e10a7808feaceebc9093d54ab4556c41a17ff3f3baa028c5fdaf89443cf7e67637725437dc3d3c30a46bca427fdda6d2b790464e"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)={0x20, 0x6, 0x95, "e7c59bb9481177ff5d93ddd9b423c5cbaf227e7d5f72fde137f437d7de39e76263498b338ad900a401350fe2ba1bf0d8007584e288026c32417e59c722e053525f5a35fa74da3ccaa71792424cece97b3ef0f41012b18a0df44c3748315356b3f73c7b7fec270e2d129808f729cc9e629103c9520a8a1ada5388b24a2512662de9951fb06acb4636a68ceda49d38498c032c3387c0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8a}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x1, 0x200, 0xcdd, 0x401, 0x423, 0x6, 0x8, 0x0, 0x1, 0x2}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000c00)={0x20, 0x83, 0x2}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m18.618417494s ago: executing program 51 (id=6781): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0xbe, 0x7, 0xb9, 0x8, 0x10}, 0xe8, &(0x7f0000000580)={0x5, 0xf, 0xe8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "52907007494fc7cf8f5e8ae69bd2a948"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0xdf77}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xc, 0x2, 0x2, 0x85}, @generic={0xb7, 0x10, 0x3, "c92eb0f9227eb016f7983c210dd2a46ba9d4623de31028a9c7b756bbf0563480fcca65b0e5ff85cb0cdf2c25ff141b13820dbe691204a1fe9c98cb17fc38350323252898a2803b2f3a8ade107376a18705cc73ecfefc5c4511595c290ecadad74809862adeb239eb3a966c6c05268d537e17d07932ff7d3916d0bd4af74094c985871abe23e818e70e97514dca612dd4663a883fd22d4b43dc190fd147e24fefce1ae8c792e06186b8df498aeee9d9edd0299eec"}]}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1409}}, {0xe2, &(0x7f00000006c0)=@string={0xe2, 0x3, "118fd18a19c2a89c9ddadcd28f2740e82e5ff59aae82b3b01abe7d52f5e8f25aacfd97b0de07241acdd4057b1f8358a122330a399b3ebb0df38ddfe4f3b15cf52346498bfdb3f8e286e134afaa3bc472639a226fce3fcf6b2ac1edf2e9785fbc8c0092e6cbd0b13b81d056b5fae1388e91ff85c7a07eb58aa51e88227abbde2f01fecfa6bd85435cb9ebe3cede01c2b5be9b2c38fb8eb4b31a1cdaf3f74e9f3d15c17983b52fed6b6e0fbfcb4afd62a7973151f5b20cd159bb3c6335702008cc423bef306ee31d8225c1033d4edf64dc449a9efe1d97e7557542ece494726f0e"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a00000200500050000000020000ffff601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0xa, 0xd8, {0xd8, 0x8, "70af02be4304dc3fd4a2595a5820e91d021faa86f6b56af5efdebea4cb79705fdfd9fa13f7f5ab4b41f53fc03c82cc6b66f8431eb1f9d6b4702d2c347d638c921fe32ef34833c301ca31070d0a95c2e4ea7a7af734fd6c646cbfa5c0e930366b08a37f365f4cc802e7e23c85e15a991af248a6fdde81cd0edd5bab481cade07ae6b84223200dc693ebb4f137b36de524ba4256167be7c13faef6811b6e4d2ac3205140bdbdbd908039d58036005f78d6a82dbe89e7139164fda5c79d90fd9eeebf5d23324b17f89fcecfab3ba3ac4d7f93df6ccab831"}}, &(0x7f0000000140)={0x0, 0x3, 0x81, @string={0x81, 0x3, "8b9cdcbb3b4d51dc1de25bdff7ec7f738f69661b031014b4f7b492e560b07316e2000322243a08ddf3582916f8e27f967c05deb930b33bca904788c848b319b38219089eb9c4d80c86080e8889eab3775dc343919eae86314916bc4ec5f26058e48778b928b4b04a91cacd8312594c5bce259410cf633ac9fc60932c684773"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x0, 0xe, 0x11, "e9b5c43c38cd0baac602b89bac5ddc4578"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x44}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "5cf352"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "a1e949"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, ' '}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05d845"}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x40, 0xd, 0xa4, {0xa4, 0x22, "16ee2b6e0f3eb3df998bbe12fbe11799c334888402001c309f9a62167b15df1f34f1db0490bdf6d35ea260c01e39babc49e497f11ae11babef99ab984fb30d3023878a4128f3b3a31183ea068b9c5218c680c55ba453f636a07f222e3aec2fdaea95ae806ea3c210d617d4938b30e10a7808feaceebc9093d54ab4556c41a17ff3f3baa028c5fdaf89443cf7e67637725437dc3d3c30a46bca427fdda6d2b790464e"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)={0x20, 0x6, 0x95, "e7c59bb9481177ff5d93ddd9b423c5cbaf227e7d5f72fde137f437d7de39e76263498b338ad900a401350fe2ba1bf0d8007584e288026c32417e59c722e053525f5a35fa74da3ccaa71792424cece97b3ef0f41012b18a0df44c3748315356b3f73c7b7fec270e2d129808f729cc9e629103c9520a8a1ada5388b24a2512662de9951fb06acb4636a68ceda49d38498c032c3387c0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8a}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x1, 0x200, 0xcdd, 0x401, 0x423, 0x6, 0x8, 0x0, 0x1, 0x2}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000c00)={0x20, 0x83, 0x2}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m13.970229128s ago: executing program 52 (id=6761): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0xbe, 0x12) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000200)="2c319b9e60516e1996f6c088c5aa7d1d85be49de8d8f78ee0180e83cf3381ea3b855a3e34f8ad3e49ba3cde1e02dd1109ce59ccd78db3474b7b5e4bee057a160202814ae36636bbe4419fe2889ab25c03c29b35075283f3f856413c0a60307d5fe386d23a950f4b32b512fb8f2486d6d640ead22c68ce3d00cbfcb3902b2e4b11146099199dae20d9b21f903c1047388d8c67a80fbbed6454bb13456e8f1578d2b02cad4ae37a167c31f8281047afd1934d9634206c46972989e95f9b28fb2f344aa8b58c748dc0fd305564ed1f1bba81e980b78dd25ab3382770d6c4e0abdaa301954c060886a") r3 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8931, &(0x7f00000000c0)={'wg2\x00', @ifru_settings={0x6962, 0x2, @fr=0x0}}) write(r4, &(0x7f0000000340)='1', 0x1) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4008}, 0x40800) timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) r8 = gettid() rt_tgsigqueueinfo(r3, r8, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) 1m6.699891525s ago: executing program 5 (id=6961): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x8001, 0x9, 0x3016, 0x5, 0x9, 0x1, 0x2, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet(0x2, 0xa, 0x262) syz_open_pts(r0, 0x4000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000300)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000002c0)=0x2) write(r0, &(0x7f00000001c0)='ky', 0x2) 1m6.022260957s ago: executing program 5 (id=6962): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) 1m3.721467586s ago: executing program 5 (id=6977): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf0, 0x2, 0x3}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) 1m2.363434812s ago: executing program 5 (id=6971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) mknodat(r5, &(0x7f0000000200)='./dev\x00', 0xc000, 0x1fa00000) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000000)) sendto$packet(r2, 0x0, 0x0, 0x24001000, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x3}, 0x14) 1m2.032280637s ago: executing program 5 (id=6972): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r2, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000001280)={0x28, 0x6, r2, 0x0, &(0x7f0000001180)="3e4e02", 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x3, r2, 0x0, &(0x7f0000000100)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r2, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r2, 0x0, &(0x7f00000003c0)='U', 0x1, 0x10001}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000240)={0x18, r2, 0x7, 0x280000000}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000280)=0x4) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0xfffffffd, {0x7}}, 0x14}}, 0x0) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000300)="906c0b7ee25bbb21856bcfa3d59a9600d9e99d5eda99c95d1a0ae613fcdeb196ed1028a7d14d23fb4ecb4ef66d97ed2bcbb7c993e13c710f28493ab1e78360fb44", 0x41}], 0x1) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000440)={'comedi_bond\x00', [0x300, 0x8, 0x2, 0x400, 0xc0000, 0x800005, 0x0, 0xa, 0x8, 0x1, 0xffffffff, 0x4, 0x1, 0xfffffffa, 0x10000b, 0x0, 0x8, 0x4007a, 0x6, 0x20000003, 0x10000089, 0xb21c, 0x7f, 0x0, 0x2, 0xe66, 0x9, 0x2, 0xa6b3, 0x0, 0x5]}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 1m1.737979256s ago: executing program 5 (id=6974): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010101}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1ff) unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsync(r7) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 1m1.398395213s ago: executing program 53 (id=6974): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010101}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1ff) unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsync(r7) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 56.398256294s ago: executing program 8 (id=6987): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = socket(0x1e, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc693}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "9c4d3732d31c3621b1cf41899876576987ae76d3cde18d3acc41bfa462691f4d0957ddb55438a64d3cf48ef887ee9fa1c2b1270133347f155b86f49cd0c370a854ff8fece6fb4f"}]}, @TIPC_NLA_NET={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x24000881) pipe(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f00000004c0)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 55.394840929s ago: executing program 8 (id=6988): syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x1}) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) 54.598869341s ago: executing program 8 (id=6990): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000080)="45000000040006000000", 0xa) 54.388472233s ago: executing program 8 (id=6991): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) mknodat(r5, &(0x7f0000000200)='./dev\x00', 0xc000, 0x1fa00000) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x1000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000000)) sendto$packet(r2, 0x0, 0x0, 0x24001000, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x3}, 0x14) 53.399690502s ago: executing program 8 (id=6995): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f52600050000001324030500040303060700000004000100040009240506"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="1ba6e80000001e31d3af0400000000000000351bc03573ceeef648d70136f49d25aa0c0d"], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf0, 0x2, 0x3}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) 52.464378514s ago: executing program 8 (id=6997): fsopen(0x0, 0x1) 51.147794304s ago: executing program 54 (id=6997): fsopen(0x0, 0x1) 20.040595484s ago: executing program 9 (id=7052): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) 19.852975268s ago: executing program 9 (id=7054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) write(r0, &(0x7f0000000100)='3', 0x1) 18.767483398s ago: executing program 9 (id=7058): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002600090323bd7008f9ffffff010000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301"], 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000025c0)=@newtaction={0x44, 0x32, 0x205, 0x70bd2d, 0x21dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x20, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x13, r4, 0x51dfb000) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) 16.710975488s ago: executing program 2 (id=7067): syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 14.528056912s ago: executing program 9 (id=7077): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000100)=0x1e) 13.931791185s ago: executing program 55 (id=7077): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000180)) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000100)=0x1e) 12.98045795s ago: executing program 2 (id=7082): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080), 0x0) 12.698537534s ago: executing program 2 (id=7083): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) 12.149178069s ago: executing program 2 (id=7085): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket(0x1e, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 11.6268588s ago: executing program 2 (id=7087): syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 7.486630119s ago: executing program 3 (id=7095): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x0, 0x5, 0x70bd2a, 0x25dfdc01, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="042c"], 0x14) 7.109727608s ago: executing program 7 (id=7096): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf0, 0x2, 0x3}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) 6.70448503s ago: executing program 3 (id=7097): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080), 0x0) 6.452834685s ago: executing program 3 (id=7098): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002600090323bd7008f9ffffff010000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301"], 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000025c0)=@newtaction={0x44, 0x32, 0x205, 0x70bd2d, 0x21dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x20, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) 3.750190306s ago: executing program 7 (id=7099): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002600090323bd7008f9ffffff010000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543707241301"], 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000025c0)=@newtaction={0x44, 0x32, 0x205, 0x70bd2d, 0x21dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x20, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x4, 0x13, r4, 0x51dfb000) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) write(r1, &(0x7f0000000100)='3', 0x1) 3.16886073s ago: executing program 3 (id=7100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) 2.539903595s ago: executing program 3 (id=7101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 1.554775479s ago: executing program 3 (id=7102): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket(0x1e, 0x4, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) 897.231896ms ago: executing program 57 (id=7102): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket(0x1e, 0x4, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) stat(&(0x7f00000001c0)='./mnt\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) 531.285389ms ago: executing program 7 (id=7104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="4500000004", 0x5) 0s ago: executing program 7 (id=7105): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf0, 0x2, 0x3}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x22, 0x9, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0xc}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioperm(0x5, 0x1, 0x6165787a) kernel console output (not intermixed with test programs): l 0, changing to 10 [ 1752.190266][ T191] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1752.190300][ T191] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1752.190320][ T191] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1752.228960][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.228975][ T191] usb 6-1: Product: syz [ 1752.228986][ T191] usb 6-1: Manufacturer: syz [ 1752.228997][ T191] usb 6-1: SerialNumber: syz [ 1752.256011][T32647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1752.312588][ T191] cdc_mbim 6-1:1.0: skipping garbage [ 1752.506222][T32647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1752.506302][T32647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1752.584797][T32301] veth0_vlan: entered promiscuous mode [ 1752.632837][T32301] veth1_vlan: entered promiscuous mode [ 1752.735119][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1752.857335][T32301] veth0_macvtap: entered promiscuous mode [ 1752.910061][T32301] veth1_macvtap: entered promiscuous mode [ 1753.007229][T32301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.091420][T32301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.157856][T17751] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.173764][ T205] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.173870][ T205] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.173898][ T205] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.705919][T32668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1753.706020][T32668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1753.706423][ T191] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 1753.813376][ T191] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1753.882476][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.882487][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.110444][T32678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1754.110467][T32678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1754.308721][ T191] wwan wwan0: port wwan0mbim0 attached [ 1754.376709][ T5764] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1754.380896][ T191] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 32:fa:88:df:bc:8e [ 1754.417130][T17751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.417146][T17751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.537479][ T5764] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1754.559419][ T5764] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1754.559454][ T5764] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1754.559471][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1754.602516][ T205] net_ratelimit: 254 callbacks suppressed [ 1754.613132][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1754.613161][ T5764] usb 4-1: Product: syz [ 1754.613172][ T5764] usb 4-1: Manufacturer: syz [ 1754.613184][ T5764] usb 4-1: SerialNumber: syz [ 1754.662616][ T5764] usb 4-1: config 0 descriptor?? [ 1754.678934][ T5764] hub 4-1:0.0: bad descriptor, ignoring hub [ 1754.678949][ T5764] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1754.722422][ T5764] usb 4-1: selecting invalid altsetting 0 [ 1755.019262][T32362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.034028][ T5764] usb 4-1: USB disconnect, device number 74 [ 1755.139559][T31005] udevd[31005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1755.804834][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1756.140920][T32362] veth0_vlan: entered promiscuous mode [ 1756.184586][T32362] veth1_vlan: entered promiscuous mode [ 1756.305040][T32362] veth0_macvtap: entered promiscuous mode [ 1756.345113][T32362] veth1_macvtap: entered promiscuous mode [ 1756.432430][T32362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.477338][T32362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.970327][ T205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.970528][ T205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.971029][ T205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.001732][ T205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.364768][T32722] 9p: Bad value for 'rfdno' [ 1757.420500][T17755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.420511][T17755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.698010][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.698023][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.323450][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1758.378105][ T5719] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1758.449067][ T191] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1758.533590][ T5719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1758.533623][ T5719] usb 9-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1758.534790][ T5719] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.534805][ T5719] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1758.593321][ T5719] usb 9-1: string descriptor 0 read error: -22 [ 1758.593424][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.620159][ T191] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1758.623322][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.623361][ T191] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1758.623389][ T191] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1758.638050][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1758.638066][ T191] usb 4-1: SerialNumber: syz [ 1758.703834][ T5719] usb 9-1: selecting invalid altsetting 1 [ 1758.704421][ T5719] usb 9-1: unit 3 not found! [ 1758.729261][ T191] cdc_acm 4-1:1.0: skipping garbage [ 1759.014677][ T5719] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1759.768811][T11969] net_ratelimit: 470 callbacks suppressed [ 1761.207082][ T5764] usb 9-1: USB disconnect, device number 101 [ 1761.404211][ T191] usb 4-1: USB disconnect, device number 75 [ 1761.758266][ T5764] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1761.955071][ T5764] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1761.955106][ T5764] usb 9-1: New USB device found: idVendor=0582, idProduct=9b12, bcdDevice=0.40 [ 1761.978447][ T5764] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.978483][ T5764] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 1761.978516][ T5764] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1761.978533][ T5764] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 1762.048131][ T5764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.048147][ T5764] usb 9-1: Product: syz [ 1762.048158][ T5764] usb 9-1: Manufacturer: syz [ 1762.048169][ T5764] usb 9-1: SerialNumber: syz [ 1762.135087][ T312] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1762.384594][ T5764] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1762.384626][ T5764] usb 9-1: MIDIStreaming interface descriptor not found [ 1762.818010][ T5764] usb 9-1: USB disconnect, device number 102 [ 1763.249886][T31987] udevd[31987]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1763.409383][ T5719] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1763.559122][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 1763.561011][ T5719] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1763.562223][ T5719] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1763.562240][ T5719] usb 4-1: config 0 has no interface number 0 [ 1763.562269][ T5719] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1763.562289][ T5719] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1763.562306][ T5719] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1763.566374][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.566389][ T5719] usb 4-1: Product: syz [ 1763.566401][ T5719] usb 4-1: Manufacturer: syz [ 1763.566412][ T5719] usb 4-1: SerialNumber: syz [ 1763.642268][ T5719] usb 4-1: config 0 descriptor?? [ 1763.883891][ T5719] appletouch 4-1:0.85: Failed to read mode from device. [ 1763.884092][ T5719] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1764.098880][ T5719] usb 4-1: USB disconnect, device number 76 [ 1764.501390][T29625] Bluetooth: hci5: command 0x0406 tx timeout [ 1764.941680][ T355] FAULT_INJECTION: forcing a failure. [ 1764.941680][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.941701][ T355] CPU: 0 UID: 0 PID: 355 Comm: syz.8.6850 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1764.941725][ T355] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1764.941732][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1764.941742][ T355] Call Trace: [ 1764.941749][ T355] [ 1764.941756][ T355] dump_stack_lvl+0xe8/0x150 [ 1764.941777][ T355] should_fail_ex+0x3eb/0x540 [ 1764.941796][ T355] ? __alloc_skb+0x1db/0x7a0 [ 1764.941810][ T355] should_failslab+0xa8/0x100 [ 1764.941826][ T355] ? __alloc_skb+0x1db/0x7a0 [ 1764.941839][ T355] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1764.941855][ T355] ? __alloc_skb+0x18d/0x7a0 [ 1764.941870][ T355] ? __alloc_skb+0x1db/0x7a0 [ 1764.941888][ T355] __alloc_skb+0x1db/0x7a0 [ 1764.941905][ T355] alloc_skb_with_frags+0xc6/0x760 [ 1764.941928][ T355] sock_alloc_send_pskb+0x95e/0xa70 [ 1764.941957][ T355] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1764.941980][ T355] ? aa_sk_perm+0x6ff/0x8f0 [ 1764.941998][ T355] hci_sock_sendmsg+0x20b/0xfd0 [ 1764.942028][ T355] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1764.942048][ T355] ? apparmor_socket_sendmsg+0x98/0x360 [ 1764.942064][ T355] ? lock_acquire+0x115/0x350 [ 1764.942080][ T355] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1764.942094][ T355] sock_sendmsg_nosec+0x14e/0x190 [ 1764.942112][ T355] sock_write_iter+0x2de/0x3e0 [ 1764.942129][ T355] ? __pfx_sock_write_iter+0x10/0x10 [ 1764.942150][ T355] ? bpf_lsm_file_permission+0x9/0x20 [ 1764.942165][ T355] ? security_file_permission+0x75/0x260 [ 1764.942187][ T355] vfs_write+0x612/0xba0 [ 1764.942208][ T355] ? __pfx_vfs_write+0x10/0x10 [ 1764.942225][ T355] ? __fget_files+0x3a2/0x420 [ 1764.942240][ T355] ? __fget_files+0x2a/0x420 [ 1764.942257][ T355] ? fdget+0x1ac/0x250 [ 1764.942275][ T355] ksys_write+0x150/0x270 [ 1764.942292][ T355] ? __pfx_ksys_write+0x10/0x10 [ 1764.942314][ T355] do_syscall_64+0x166/0x520 [ 1764.942329][ T355] ? trace_irq_disable+0x3b/0x140 [ 1764.942343][ T355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.942358][ T355] ? clear_bhb_loop+0x70/0xc0 [ 1764.942375][ T355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.942391][ T355] RIP: 0033:0x7f51ae99e159 [ 1764.942405][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.942419][ T355] RSP: 002b:00007f51af813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1764.942436][ T355] RAX: ffffffffffffffda RBX: 00007f51aec25fa0 RCX: 00007f51ae99e159 [ 1764.942449][ T355] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 1764.942459][ T355] RBP: 00007f51af813090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.942469][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.942479][ T355] R13: 00007f51aec26038 R14: 00007f51aec25fa0 R15: 00007ffec3110308 [ 1764.942503][ T355] [ 1765.014514][ T1180] net_ratelimit: 200 callbacks suppressed [ 1765.730971][ T191] usb 6-1: USB disconnect, device number 72 [ 1765.756221][ T191] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1765.930668][ T5764] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1766.019183][ T191] wwan wwan0: port wwan0mbim0 disconnected [ 1766.094247][ T5764] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1766.094284][ T5764] usb 9-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1766.100029][ T5764] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.100048][ T5764] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1766.154469][ T5764] usb 9-1: string descriptor 0 read error: -22 [ 1766.154597][ T5764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.248701][ T5764] usb 9-1: selecting invalid altsetting 1 [ 1766.272096][ T5764] usb 9-1: unit 3 not found! [ 1766.717401][ T5764] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1768.704203][ T5764] usb 9-1: USB disconnect, device number 103 [ 1769.896483][ T445] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1769.947550][ T445] kvm: pic: level sensitive irq not supported [ 1769.959977][ T445] kvm: pic: non byte read [ 1769.981903][ T445] kvm: pic: level sensitive irq not supported [ 1769.981990][ T445] kvm: pic: non byte read [ 1769.982128][ T445] kvm: pic: level sensitive irq not supported [ 1769.998437][ T445] kvm: pic: non byte read [ 1769.998595][ T445] kvm: pic: level sensitive irq not supported [ 1769.998641][ T445] kvm: pic: non byte read [ 1770.012140][ T445] kvm: pic: level sensitive irq not supported [ 1770.038677][ T445] kvm: pic: non byte read [ 1770.038835][ T445] kvm: pic: level sensitive irq not supported [ 1770.038883][ T445] kvm: pic: non byte read [ 1770.039042][ T445] kvm: pic: level sensitive irq not supported [ 1770.039088][ T445] kvm: pic: non byte read [ 1770.039281][ T445] kvm: pic: level sensitive irq not supported [ 1770.039334][ T445] kvm: pic: non byte read [ 1770.039537][ T445] kvm: pic: level sensitive irq not supported [ 1770.041687][ T445] kvm: pic: non byte read [ 1770.095759][ C0] net_ratelimit: 210 callbacks suppressed [ 1770.650775][ T465] tipc: Started in network mode [ 1770.650935][ T465] tipc: Node identity 3afca4de7ebc, cluster identity 4711 [ 1770.652491][ T465] tipc: Enabled bearer , priority 10 [ 1771.072654][ T453] [U] [ 1771.402438][ T472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1771.402462][ T472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6872'. [ 1771.635147][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6874'. [ 1771.766315][ T5719] tipc: Node number set to 1145087198 [ 1771.846225][ T5764] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1772.059674][ T5764] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1772.059710][ T5764] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1772.083512][ T5764] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1772.083537][ T5764] usb 4-1: can't read configurations, error -71 [ 1772.121948][ T472] udc usbip-vudc.0: failed to start g1: -19 [ 1772.122575][ T472] UDC core: g1: couldn't find an available UDC or it's busy [ 1772.195757][ T488] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1772.448298][ T494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6878'. [ 1772.470328][ T495] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6879'. [ 1772.508434][ T497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.508956][ T497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.538380][ T495] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6879'. [ 1772.573382][ T33] audit: type=1400 audit(1792110486.849:428): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=496 comm="syz.7.6880" [ 1772.705074][ T5719] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1772.780525][ T498] block nbd7: shutting down sockets [ 1772.864694][ T5719] usb 9-1: Using ep0 maxpacket: 8 [ 1772.867392][ T5719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1773.364576][ T5764] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1773.515518][ T5764] usb 4-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1773.516493][ T5764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.516538][ T5764] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.520438][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.520453][ T5764] usb 4-1: Product: syz [ 1773.520464][ T5764] usb 4-1: Manufacturer: syz [ 1773.520475][ T5764] usb 4-1: SerialNumber: syz [ 1773.619192][ T5764] usb 4-1: unsupported MDLM descriptors [ 1773.845639][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6886'. [ 1773.845661][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6886'. [ 1774.491859][ T532] PKCS7: Unsupported SignedData version [ 1774.895295][ T5719] usb 9-1: New USB device found: idVendor=046d, idProduct=082d, bcdDevice=d1.d9 [ 1775.108990][ T5719] usb 9-1: config 222 has an invalid interface number: 193 but max is 0 [ 1775.109009][ T5719] usb 9-1: config 222 has no interface number 0 [ 1775.109031][ T5719] usb 9-1: config 222 interface 193 has no altsetting 0 [ 1775.141376][ C0] net_ratelimit: 192 callbacks suppressed [ 1775.174330][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.174345][ T5719] usb 9-1: Product: syz [ 1775.174357][ T5719] usb 9-1: Manufacturer: syz [ 1775.174368][ T5719] usb 9-1: SerialNumber: syz [ 1775.255988][T18190] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1775.416598][T18190] usb 6-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 1775.417762][T18190] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.417822][T18190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.480572][T18190] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 1775.510323][T18190] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1775.670127][ T5719] uvcvideo 9-1:222.193: Found UVC 0.00 device syz (046d:082d) [ 1775.670154][ T5719] uvcvideo 9-1:222.193: No valid video chain found. [ 1775.699676][ T5719] usb 9-1: USB disconnect, device number 104 [ 1775.776905][T18190] usb 6-1: USB disconnect, device number 73 [ 1775.809411][T18190] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1775.835524][T18190] metro_usb 6-1:1.0: device disconnected [ 1775.933206][ T549] FAULT_INJECTION: forcing a failure. [ 1775.933206][ T549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.933237][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.8.6891 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1775.933261][ T549] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1775.933268][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1775.933296][ T549] Call Trace: [ 1775.933303][ T549] [ 1775.933310][ T549] dump_stack_lvl+0xe8/0x150 [ 1775.933332][ T549] should_fail_ex+0x3eb/0x540 [ 1775.933353][ T549] _copy_from_user+0x2d/0xb0 [ 1775.933370][ T549] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 1775.933388][ T549] ? __lock_acquire+0x747/0x2de0 [ 1775.933409][ T549] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1775.933425][ T549] ? fpu__clear_user_states+0x7e/0x400 [ 1775.933461][ T549] ? __task_pid_nr_ns+0x28/0x470 [ 1775.933485][ T549] do_syscall_64+0x166/0x520 [ 1775.933500][ T549] ? trace_irq_disable+0x3b/0x140 [ 1775.933515][ T549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.933532][ T549] ? clear_bhb_loop+0x70/0xc0 [ 1775.933549][ T549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.933566][ T549] RIP: 0033:0x7f51ae93f4d9 [ 1775.933581][ T549] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1775.933602][ T549] RSP: 002b:00007f51af812b40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 1775.933620][ T549] RAX: ffffffffffffffda RBX: 00007f51aec25fa8 RCX: 00007f51ae93f4d9 [ 1775.933633][ T549] RDX: 00007f51af812b40 RSI: 00007f51af812c70 RDI: 0000000000000021 [ 1775.933645][ T549] RBP: 00007f51aec25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1775.933657][ T549] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000000 [ 1775.933666][ T549] R13: 00007f51aec26038 R14: 00007ffec3110220 R15: 00007ffec3110308 [ 1775.933691][ T549] [ 1776.323236][ T191] usb 4-1: USB disconnect, device number 79 [ 1776.395132][ T553] netlink: 'syz.8.6892': attribute type 2 has an invalid length. [ 1776.395146][ T553] netlink: 'syz.8.6892': attribute type 2 has an invalid length. [ 1776.395156][ T553] netlink: 'syz.8.6892': attribute type 2 has an invalid length. [ 1776.395166][ T553] netlink: 'syz.8.6892': attribute type 4 has an invalid length. [ 1776.395176][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6892'. [ 1776.833429][ T563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1776.987297][ T558] exFAT-fs (nbd5): unable to read boot sector [ 1776.987313][ T558] exFAT-fs (nbd5): failed to read boot sector [ 1776.987320][ T558] exFAT-fs (nbd5): failed to recognize exfat type [ 1777.080061][ T574] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1777.110613][ T574] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1777.534668][ T578] lo speed is unknown, defaulting to 1000 [ 1777.554159][ T578] lo speed is unknown, defaulting to 1000 [ 1777.606580][T18190] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1777.756796][T18190] usb 9-1: Using ep0 maxpacket: 8 [ 1777.762921][T18190] usb 9-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1777.803634][T18190] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.803650][T18190] usb 9-1: Product: syz [ 1777.803661][T18190] usb 9-1: Manufacturer: syz [ 1777.803672][T18190] usb 9-1: SerialNumber: syz [ 1777.840771][T18190] usb 9-1: config 0 descriptor?? [ 1777.876808][T18190] gspca_main: se401-2.14.0 probing 047d:5003 [ 1778.402483][ T579] jffs2: notice: (579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1778.446573][ T191] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1778.528266][T18190] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1778.528329][T18190] se401 9-1:0.0: probe with driver se401 failed with error -71 [ 1778.565309][T18190] usb 9-1: USB disconnect, device number 105 [ 1778.646242][ T191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1778.646276][ T191] usb 6-1: New USB device found: idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 1778.646303][ T191] usb 6-1: no configurations [ 1778.646312][ T191] usb 6-1: can't read configurations, error -22 [ 1779.611093][T18190] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1779.782975][T18190] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1779.806635][T18190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.836589][T18190] usb 4-1: config 0 descriptor?? [ 1780.063269][T18190] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1780.337546][ C0] net_ratelimit: 198 callbacks suppressed [ 1780.362484][T18190] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1780.362499][T18190] [drm] Initialized udl on minor 1 [ 1780.538968][T18190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1780.539278][T18190] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1780.576918][T18190] usb 4-1: USB disconnect, device number 80 [ 1780.592767][ T191] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1780.593106][ T191] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1780.593237][ T191] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1781.000988][ T639] FAULT_INJECTION: forcing a failure. [ 1781.000988][ T639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.001011][ T639] CPU: 0 UID: 0 PID: 639 Comm: syz.8.6909 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1781.001042][ T639] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1781.001049][ T639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1781.001059][ T639] Call Trace: [ 1781.001066][ T639] [ 1781.001074][ T639] dump_stack_lvl+0xe8/0x150 [ 1781.001095][ T639] should_fail_ex+0x3eb/0x540 [ 1781.001115][ T639] _copy_from_user+0x2d/0xb0 [ 1781.001132][ T639] kstrtouint_from_user+0xd6/0x180 [ 1781.001158][ T639] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1781.001181][ T639] ? lock_acquire+0x115/0x350 [ 1781.001200][ T639] proc_fail_nth_write+0x8e/0x210 [ 1781.001217][ T639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1781.001239][ T639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1781.001254][ T639] vfs_write+0x296/0xba0 [ 1781.001276][ T639] ? __pfx_vfs_write+0x10/0x10 [ 1781.001294][ T639] ? __fget_files+0x2a/0x420 [ 1781.001309][ T639] ? __fget_files+0x3a2/0x420 [ 1781.001323][ T639] ? __fget_files+0x2a/0x420 [ 1781.001340][ T639] ? fdget+0x1ac/0x250 [ 1781.001359][ T639] ksys_write+0x150/0x270 [ 1781.001376][ T639] ? __pfx_ksys_write+0x10/0x10 [ 1781.001400][ T639] do_syscall_64+0x166/0x520 [ 1781.001414][ T639] ? trace_irq_disable+0x3b/0x140 [ 1781.001428][ T639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.001444][ T639] ? clear_bhb_loop+0x70/0xc0 [ 1781.001461][ T639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.001477][ T639] RIP: 0033:0x7f51ae95e98e [ 1781.001491][ T639] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1781.001504][ T639] RSP: 002b:00007f51af812fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1781.001521][ T639] RAX: ffffffffffffffda RBX: 00007f51af8136c0 RCX: 00007f51ae95e98e [ 1781.001533][ T639] RDX: 0000000000000001 RSI: 00007f51af8130a0 RDI: 0000000000000003 [ 1781.001542][ T639] RBP: 00007f51af813090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.001553][ T639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.001562][ T639] R13: 00007f51aec26038 R14: 00007f51aec25fa0 R15: 00007ffec3110308 [ 1781.001586][ T639] [ 1781.034456][ T191] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1781.329649][ T191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1781.329683][ T191] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1781.330612][ T191] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1781.330636][ T191] usb 6-1: can't read configurations, error -71 [ 1781.866800][ T656] FAULT_INJECTION: forcing a failure. [ 1781.866800][ T656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.866834][ T656] CPU: 0 UID: 0 PID: 656 Comm: syz.3.6913 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1781.866858][ T656] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1781.866865][ T656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1781.866875][ T656] Call Trace: [ 1781.866881][ T656] [ 1781.866888][ T656] dump_stack_lvl+0xe8/0x150 [ 1781.866910][ T656] should_fail_ex+0x3eb/0x540 [ 1781.866930][ T656] _copy_from_user+0x2d/0xb0 [ 1781.866947][ T656] ___sys_sendmsg+0x1c6/0x360 [ 1781.866962][ T656] ? __lock_acquire+0x747/0x2de0 [ 1781.866982][ T656] ? __pfx____sys_sendmsg+0x10/0x10 [ 1781.867001][ T656] ? kstrtouint+0x6e/0xe0 [ 1781.867035][ T656] ? __fget_files+0x3a2/0x420 [ 1781.867050][ T656] ? __fget_files+0x2a/0x420 [ 1781.867071][ T656] __sys_sendmmsg+0x273/0x4d0 [ 1781.867091][ T656] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1781.867113][ T656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1781.867140][ T656] ? ksys_write+0x242/0x270 [ 1781.867157][ T656] ? __pfx_ksys_write+0x10/0x10 [ 1781.867177][ T656] __x64_sys_sendmmsg+0xa0/0xc0 [ 1781.867194][ T656] do_syscall_64+0x166/0x520 [ 1781.867209][ T656] ? trace_irq_disable+0x3b/0x140 [ 1781.867223][ T656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.867239][ T656] ? clear_bhb_loop+0x70/0xc0 [ 1781.867255][ T656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.867271][ T656] RIP: 0033:0x7f734bb9e159 [ 1781.867287][ T656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.867300][ T656] RSP: 002b:00007f734ca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1781.867318][ T656] RAX: ffffffffffffffda RBX: 00007f734be25fa0 RCX: 00007f734bb9e159 [ 1781.867330][ T656] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 1781.867340][ T656] RBP: 00007f734ca64090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.867350][ T656] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1781.867361][ T656] R13: 00007f734be26038 R14: 00007f734be25fa0 R15: 00007ffd0dd09238 [ 1781.867384][ T656] [ 1782.363137][ T651] [U] [ 1782.664373][ T669] tipc: Started in network mode [ 1782.664393][ T669] tipc: Node identity b643621b95a1, cluster identity 4711 [ 1782.664495][ T669] tipc: Enabled bearer , priority 10 [ 1783.779524][ T5764] tipc: Node number set to 602038811 [ 1783.999102][ T191] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1784.208754][ T191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1784.208789][ T191] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1784.213772][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.213789][ T191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1784.247952][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.247968][ T191] usb 4-1: Product: syz [ 1784.247979][ T191] usb 4-1: Manufacturer: syz [ 1784.247990][ T191] usb 4-1: SerialNumber: syz [ 1784.633187][ T191] usb 4-1: selecting invalid altsetting 1 [ 1784.648260][ T191] usb 4-1: unit 3 not found! [ 1784.844368][ T191] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 1784.844385][ T191] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1785.058311][ T191] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1785.099597][ T191] usb 4-1: USB disconnect, device number 81 ** 802 printk messages dropped ** [ 1785.232329][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6921'. [ 1785.243550][T32287] udevd[32287]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1785.461735][ C0] net_ratelimit: 185 callbacks suppressed [ 1786.011106][ T5719] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1786.067461][ T705] [U] [ 1786.174302][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1786.174335][ T5719] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1786.206239][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.206257][ T5719] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1786.233595][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.233610][ T5719] usb 6-1: Product: syz [ 1786.233621][ T5719] usb 6-1: Manufacturer: syz [ 1786.233632][ T5719] usb 6-1: SerialNumber: syz [ 1786.486778][ T5719] usb 6-1: selecting invalid altsetting 1 [ 1786.491901][ T5719] usb 6-1: unit 3 not found! [ 1786.668036][ T5719] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 1786.668054][ T5719] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1786.853012][ T5719] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1786.876607][ T5719] usb 6-1: USB disconnect, device number 78 [ 1786.975381][T32287] udevd[32287]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.080896][ T5764] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1787.349948][ T5764] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1787.349981][ T5764] usb 4-1: New USB device found: idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 1787.350007][ T5764] usb 4-1: no configurations [ 1787.350017][ T5764] usb 4-1: can't read configurations, error -22 [ 1788.208340][ T732] tipc: Started in network mode [ 1788.208363][ T732] tipc: Node identity 9e02eb615dce, cluster identity 4711 [ 1788.208465][ T732] tipc: Enabled bearer , priority 10 [ 1788.421862][ T5719] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1788.586149][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1788.586181][ T5719] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1788.587141][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.587157][ T5719] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1788.589195][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.589211][ T5719] usb 6-1: Product: syz [ 1788.589222][ T5719] usb 6-1: Manufacturer: syz [ 1788.589233][ T5719] usb 6-1: SerialNumber: syz [ 1788.680458][ T739] FAULT_INJECTION: forcing a failure. [ 1788.680458][ T739] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.680486][ T739] CPU: 0 UID: 0 PID: 739 Comm: syz.8.6928 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1788.680510][ T739] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1788.680517][ T739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1788.680528][ T739] Call Trace: [ 1788.680534][ T739] [ 1788.680541][ T739] dump_stack_lvl+0xe8/0x150 [ 1788.680564][ T739] should_fail_ex+0x3eb/0x540 [ 1788.680584][ T739] should_failslab+0xa8/0x100 [ 1788.680602][ T739] __kmalloc_cache_noprof+0x9e/0x600 [ 1788.680618][ T739] ? alloc_pipe_info+0xe3/0x4c0 [ 1788.680632][ T739] ? alloc_pipe_info+0xe3/0x4c0 [ 1788.680651][ T739] alloc_pipe_info+0xe3/0x4c0 [ 1788.680668][ T739] create_pipe_files+0x87/0x7a0 [ 1788.680682][ T739] ? __hrtimer_run_queues+0x9da/0xa10 [ 1788.680702][ T739] __do_pipe_flags+0x46/0x1f0 [ 1788.680718][ T739] do_pipe2+0xaa/0x190 [ 1788.680734][ T739] ? __pfx_do_pipe2+0x10/0x10 [ 1788.680750][ T739] ? __irq_exit_rcu+0xcb/0x220 [ 1788.680765][ T739] ? lockdep_softirqs_on+0x11e/0x190 [ 1788.680781][ T739] ? handle_softirqs+0x704/0x840 [ 1788.680800][ T739] __x64_sys_pipe2+0x5a/0x70 [ 1788.680816][ T739] do_syscall_64+0x166/0x520 [ 1788.680832][ T739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.680849][ T739] ? clear_bhb_loop+0x70/0xc0 [ 1788.680866][ T739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.680882][ T739] RIP: 0033:0x7f51ae99e159 [ 1788.680897][ T739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.680911][ T739] RSP: 002b:00007f51af813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1788.680928][ T739] RAX: ffffffffffffffda RBX: 00007f51aec25fa0 RCX: 00007f51ae99e159 [ 1788.680940][ T739] RDX: 0000000000000000 RSI: 0000000000080080 RDI: 0000200000000140 [ 1788.680951][ T739] RBP: 00007f51aea3506b R08: 0000000000000000 R09: 0000000000000000 [ 1788.680962][ T739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.680971][ T739] R13: 00007f51aec26038 R14: 00007f51aec25fa0 R15: 00007ffec3110308 [ 1788.680995][ T739] [ 1788.944015][ T5719] usb 6-1: selecting invalid altsetting 1 [ 1788.975115][ T5719] usb 6-1: unit 3 not found! [ 1789.013255][ T5719] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 1789.013274][ T5719] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1789.050694][ T739] FAULT_INJECTION: forcing a failure. [ 1789.050694][ T739] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.050717][ T739] CPU: 0 UID: 0 PID: 739 Comm: syz.8.6928 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1789.050742][ T739] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1789.050749][ T739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1789.050760][ T739] Call Trace: [ 1789.050767][ T739] [ 1789.050774][ T739] dump_stack_lvl+0xe8/0x150 [ 1789.050795][ T739] should_fail_ex+0x3eb/0x540 [ 1789.050815][ T739] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1789.050832][ T739] should_failslab+0xa8/0x100 [ 1789.050849][ T739] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1789.050863][ T739] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1789.050882][ T739] ? sock_alloc_inode+0x2c/0x1a0 [ 1789.050896][ T739] ? sock_alloc_inode+0x2c/0x1a0 [ 1789.050912][ T739] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1789.050930][ T739] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1789.050945][ T739] sock_alloc_inode+0x2c/0x1a0 [ 1789.050961][ T739] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1789.050975][ T739] alloc_inode+0x6a/0x1b0 [ 1789.050992][ T739] __sock_create+0x127/0xac0 [ 1789.051014][ T739] __sys_socket+0xd6/0x1b0 [ 1789.051041][ T739] __x64_sys_socket+0x7a/0x90 [ 1789.051058][ T739] do_syscall_64+0x166/0x520 [ 1789.051074][ T739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.051091][ T739] ? clear_bhb_loop+0x70/0xc0 [ 1789.051108][ T739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.051125][ T739] RIP: 0033:0x7f51ae99e159 [ 1789.051140][ T739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.051155][ T739] RSP: 002b:00007f51af813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1789.051172][ T739] RAX: ffffffffffffffda RBX: 00007f51aec25fa0 RCX: 00007f51ae99e159 [ 1789.051185][ T739] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 1789.051195][ T739] RBP: 00007f51aea3506b R08: 0000000000000000 R09: 0000000000000000 [ 1789.051205][ T739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1789.051215][ T739] R13: 00007f51aec26038 R14: 00007f51aec25fa0 R15: 00007ffec3110308 [ 1789.051240][ T739] [ 1789.534377][ T10] tipc: Node number set to 3284986721 [ 1789.571851][ T5719] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1789.639489][ T5719] usb 6-1: USB disconnect, device number 79 [ 1789.724894][ T743] lo speed is unknown, defaulting to 1000 [ 1789.753716][ T743] lo speed is unknown, defaulting to 1000 [ 1789.787377][T32287] udevd[32287]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1790.582655][ C0] net_ratelimit: 212 callbacks suppressed [ 1790.663828][ T5719] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1790.878727][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1790.878763][ T5719] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1790.882776][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.882793][ T5719] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1790.930335][ T5719] usb 6-1: string descriptor 0 read error: -22 [ 1790.930439][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.994378][ T5719] usb 6-1: selecting invalid altsetting 1 [ 1790.994934][ T5719] usb 6-1: unit 3 not found! [ 1791.178287][ T5719] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 1791.178305][ T5719] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1791.488130][ T5719] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1791.528871][ T5719] usb 6-1: USB disconnect, device number 80 [ 1792.553688][ T5719] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1792.772946][ T5719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1792.772979][ T5719] usb 9-1: New USB device found: idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 1792.773005][ T5719] usb 9-1: no configurations [ 1792.773014][ T5719] usb 9-1: can't read configurations, error -22 [ 1793.150902][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.150940][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.232120][ T799] FAULT_INJECTION: forcing a failure. [ 1793.232120][ T799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.232145][ T799] CPU: 0 UID: 0 PID: 799 Comm: syz.7.6940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1793.232168][ T799] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1793.232175][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1793.232186][ T799] Call Trace: [ 1793.232193][ T799] [ 1793.232200][ T799] dump_stack_lvl+0xe8/0x150 [ 1793.232221][ T799] should_fail_ex+0x3eb/0x540 [ 1793.232244][ T799] __kvm_read_guest_page+0x18d/0x240 [ 1793.232265][ T799] kvm_fetch_guest_virt+0x10c/0x160 [ 1793.232282][ T799] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1793.232299][ T799] __do_insn_fetch_bytes+0x53a/0x6c0 [ 1793.232319][ T799] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1793.232340][ T799] ? x86_decode_insn+0x16fa/0x5af0 [ 1793.232360][ T799] x86_decode_insn+0x374/0x5af0 [ 1793.232395][ T799] ? is_bpf_text_address+0x292/0x2b0 [ 1793.232412][ T799] ? __pfx_x86_decode_insn+0x10/0x10 [ 1793.232427][ T799] ? kernel_text_address+0xa5/0xe0 [ 1793.232444][ T799] ? __kernel_text_address+0xd/0x30 [ 1793.232459][ T799] ? unwind_get_return_address+0x4d/0x90 [ 1793.232481][ T799] ? __asan_memset+0x22/0x50 [ 1793.232496][ T799] ? init_decode_cache+0xf3/0x160 [ 1793.232512][ T799] ? init_emulate_ctxt+0x4c6/0x630 [ 1793.232536][ T799] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1793.232560][ T799] x86_emulate_instruction+0x348/0x1e90 [ 1793.232585][ T799] ? vt_handle_exit_irqoff+0x100/0xc60 [ 1793.232601][ T799] ? trace_rcu_utilization+0x4a/0x1f0 [ 1793.232618][ T799] ? __pfx_vt_handle_exit_irqoff+0x10/0x10 [ 1793.232633][ T799] ? rcu_note_context_switch+0x12a/0xe70 [ 1793.232650][ T799] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1793.232669][ T799] ? __lock_acquire+0x747/0x2de0 [ 1793.232694][ T799] handle_ud+0x19e/0x590 [ 1793.232709][ T799] ? vmx_set_host_fs_gs+0x12e/0x3a0 [ 1793.232726][ T799] ? __pfx_handle_ud+0x10/0x10 [ 1793.232746][ T799] ? handle_exception_nmi+0x303/0x1520 [ 1793.232768][ T799] vt_handle_exit+0x28/0x160 [ 1793.232784][ T799] vcpu_run+0x4e8a/0x7a90 [ 1793.232821][ T799] ? vcpu_run+0x35f3/0x7a90 [ 1793.232862][ T799] ? __pfx_vcpu_run+0x10/0x10 [ 1793.232876][ T799] ? complete_emulated_mmio+0x1f2/0x910 [ 1793.232893][ T799] ? __asan_memcpy+0x40/0x70 [ 1793.232908][ T799] ? complete_emulated_mmio+0x535/0x910 [ 1793.232926][ T799] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 1793.232947][ T799] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 1793.232965][ T799] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 1793.232983][ T799] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1793.233002][ T799] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1793.233021][ T799] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1793.233051][ T799] ? __fget_files+0x2a/0x420 [ 1793.233068][ T799] ? __fget_files+0x2a/0x420 [ 1793.233082][ T799] ? __fget_files+0x2a/0x420 [ 1793.233100][ T799] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1793.233115][ T799] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1793.233131][ T799] __se_sys_ioctl+0xfc/0x170 [ 1793.233148][ T799] do_syscall_64+0x166/0x520 [ 1793.233163][ T799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.233180][ T799] ? clear_bhb_loop+0x70/0xc0 [ 1793.233197][ T799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.233213][ T799] RIP: 0033:0x7fabdf59e159 [ 1793.233228][ T799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.233242][ T799] RSP: 002b:00007fabe0525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.233260][ T799] RAX: ffffffffffffffda RBX: 00007fabdf825fa0 RCX: 00007fabdf59e159 [ 1793.233272][ T799] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1793.233282][ T799] RBP: 00007fabe0525090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.233293][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.233302][ T799] R13: 00007fabdf826038 R14: 00007fabdf825fa0 R15: 00007ffed36df868 [ 1793.233327][ T799] [ 1794.142119][ T816] FAULT_INJECTION: forcing a failure. [ 1794.142119][ T816] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.142145][ T816] CPU: 0 UID: 0 PID: 816 Comm: syz.7.6947 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1794.142169][ T816] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1794.142176][ T816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1794.142187][ T816] Call Trace: [ 1794.142194][ T816] [ 1794.142201][ T816] dump_stack_lvl+0xe8/0x150 [ 1794.142223][ T816] should_fail_ex+0x3eb/0x540 [ 1794.142243][ T816] should_failslab+0xa8/0x100 [ 1794.142262][ T816] __kmalloc_cache_noprof+0x9e/0x600 [ 1794.142279][ T816] ? alloc_pipe_info+0xe3/0x4c0 [ 1794.142294][ T816] ? alloc_pipe_info+0xe3/0x4c0 [ 1794.142314][ T816] alloc_pipe_info+0xe3/0x4c0 [ 1794.142331][ T816] create_pipe_files+0x87/0x7a0 [ 1794.142347][ T816] ? fd_install+0x39e/0x4e0 [ 1794.142365][ T816] __do_pipe_flags+0x46/0x1f0 [ 1794.142392][ T816] do_pipe2+0xaa/0x190 [ 1794.142410][ T816] ? __pfx_do_pipe2+0x10/0x10 [ 1794.142427][ T816] ? rcu_is_watching+0x16/0xb0 [ 1794.142451][ T816] __x64_sys_pipe2+0x5a/0x70 [ 1794.142467][ T816] do_syscall_64+0x166/0x520 [ 1794.142483][ T816] ? trace_irq_disable+0x3b/0x140 [ 1794.142497][ T816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.142514][ T816] ? clear_bhb_loop+0x70/0xc0 [ 1794.142531][ T816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.142548][ T816] RIP: 0033:0x7fabdf59e159 [ 1794.142564][ T816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.142579][ T816] RSP: 002b:00007fabe0525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1794.142597][ T816] RAX: ffffffffffffffda RBX: 00007fabdf825fa0 RCX: 00007fabdf59e159 [ 1794.142609][ T816] RDX: 0000000000000000 RSI: 0000000000080080 RDI: 0000200000000140 [ 1794.142621][ T816] RBP: 00007fabdf63506b R08: 0000000000000000 R09: 0000000000000000 [ 1794.142631][ T816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.142641][ T816] R13: 00007fabdf826038 R14: 00007fabdf825fa0 R15: 00007ffed36df868 [ 1794.142666][ T816] [ 1794.478426][ T816] FAULT_INJECTION: forcing a failure. [ 1794.478426][ T816] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.478450][ T816] CPU: 0 UID: 0 PID: 816 Comm: syz.7.6947 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1794.478474][ T816] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1794.478481][ T816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1794.478492][ T816] Call Trace: [ 1794.478498][ T816] [ 1794.478505][ T816] dump_stack_lvl+0xe8/0x150 [ 1794.478525][ T816] should_fail_ex+0x3eb/0x540 [ 1794.478544][ T816] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1794.478560][ T816] should_failslab+0xa8/0x100 [ 1794.478577][ T816] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1794.478591][ T816] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1794.478609][ T816] ? sock_alloc_inode+0x2c/0x1a0 [ 1794.478623][ T816] ? sock_alloc_inode+0x2c/0x1a0 [ 1794.478639][ T816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1794.478657][ T816] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1794.478671][ T816] sock_alloc_inode+0x2c/0x1a0 [ 1794.478686][ T816] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1794.478699][ T816] alloc_inode+0x6a/0x1b0 [ 1794.478715][ T816] __sock_create+0x127/0xac0 [ 1794.478737][ T816] __sys_socket+0xd6/0x1b0 [ 1794.478755][ T816] __x64_sys_socket+0x7a/0x90 [ 1794.478771][ T816] do_syscall_64+0x166/0x520 [ 1794.478785][ T816] ? trace_irq_disable+0x3b/0x140 [ 1794.478800][ T816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.478816][ T816] ? clear_bhb_loop+0x70/0xc0 [ 1794.478833][ T816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.478849][ T816] RIP: 0033:0x7fabdf59e159 [ 1794.478864][ T816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.478878][ T816] RSP: 002b:00007fabe0525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1794.478895][ T816] RAX: ffffffffffffffda RBX: 00007fabdf825fa0 RCX: 00007fabdf59e159 [ 1794.478908][ T816] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 1794.478917][ T816] RBP: 00007fabdf63506b R08: 0000000000000000 R09: 0000000000000000 [ 1794.478927][ T816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.478937][ T816] R13: 00007fabdf826038 R14: 00007fabdf825fa0 R15: 00007ffed36df868 [ 1794.478961][ T816] [ 1794.570178][ T191] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1794.800656][ T191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1794.800692][ T191] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1794.834027][ T191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.834043][ T191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1794.865296][ T191] usb 6-1: string descriptor 0 read error: -22 [ 1794.865408][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.926708][ T191] usb 6-1: selecting invalid altsetting 1 [ 1794.927261][ T191] usb 6-1: unit 3 not found! [ 1795.132034][ T191] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 1795.132052][ T191] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1795.264091][ T819] lo speed is unknown, defaulting to 1000 [ 1795.511113][ T191] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1795.544628][ T191] usb 6-1: USB disconnect, device number 81 [ 1795.624724][ T5764] net_ratelimit: 194 callbacks suppressed [ 1795.734620][ T819] lo speed is unknown, defaulting to 1000 [ 1796.337465][ T10] usb 9-1: new full-speed USB device number 108 using dummy_hcd [ 1796.370228][ T845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1796.504113][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1796.504591][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1796.504613][ T10] usb 9-1: New USB device found: idVendor=0547, idProduct=0b80, bcdDevice=74.0d [ 1796.504639][ T10] usb 9-1: no configurations [ 1796.504648][ T10] usb 9-1: can't read configurations, error -22 [ 1796.527052][ T191] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1796.658273][ T10] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 1796.799261][ T191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1796.799295][ T191] usb 6-1: New USB device found: idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 1796.799322][ T191] usb 6-1: no configurations [ 1796.799332][ T191] usb 6-1: can't read configurations, error -22 [ 1796.860357][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1796.863668][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1796.863693][ T10] usb 9-1: New USB device found: idVendor=0547, idProduct=0b80, bcdDevice=74.0d [ 1796.863720][ T10] usb 9-1: no configurations [ 1796.863729][ T10] usb 9-1: can't read configurations, error -22 [ 1796.864585][ T10] usb usb9-port1: attempt power cycle [ 1797.166431][ T5719] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1797.195989][ T10] usb 9-1: new full-speed USB device number 110 using dummy_hcd [ 1797.219242][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1797.219766][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1797.219789][ T10] usb 9-1: New USB device found: idVendor=0547, idProduct=0b80, bcdDevice=74.0d [ 1797.219829][ T10] usb 9-1: no configurations [ 1797.219838][ T10] usb 9-1: can't read configurations, error -22 [ 1797.328043][ T5719] usb 4-1: New USB device found: idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1797.338284][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.340234][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1797.340249][ T5719] usb 4-1: Product: syz [ 1797.340260][ T5719] usb 4-1: Manufacturer: syz [ 1797.340271][ T5719] usb 4-1: SerialNumber: syz [ 1797.342455][ T5719] usb 4-1: config 0 descriptor?? [ 1797.347344][ T10] usb 9-1: new full-speed USB device number 111 using dummy_hcd [ 1797.402792][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1797.411819][ T5719] gspca_main: conex-2.14.0 probing 0572:0041 [ 1797.412152][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1797.412174][ T10] usb 9-1: New USB device found: idVendor=0547, idProduct=0b80, bcdDevice=74.0d [ 1797.412197][ T10] usb 9-1: no configurations [ 1797.412207][ T10] usb 9-1: can't read configurations, error -22 [ 1797.412641][ T10] usb usb9-port1: unable to enumerate USB device [ 1798.153477][ T5719] usb 4-1: USB disconnect, device number 84 [ 1798.411958][ T868] FAULT_INJECTION: forcing a failure. [ 1798.411958][ T868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.411982][ T868] CPU: 0 UID: 0 PID: 868 Comm: syz.5.6961 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1798.412007][ T868] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1798.412014][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1798.412025][ T868] Call Trace: [ 1798.412032][ T868] [ 1798.412039][ T868] dump_stack_lvl+0xe8/0x150 [ 1798.412061][ T868] should_fail_ex+0x3eb/0x540 [ 1798.412082][ T868] _copy_from_iter+0x1d3/0x1660 [ 1798.412108][ T868] ? __pfx__copy_from_iter+0x10/0x10 [ 1798.412124][ T868] ? trace_kmalloc+0x2a/0xf0 [ 1798.412143][ T868] ? __kmalloc_noprof+0x387/0x710 [ 1798.412159][ T868] ? __kmalloc_noprof+0x1a6/0x710 [ 1798.412174][ T868] ? kernfs_fop_write_iter+0x157/0x540 [ 1798.412196][ T868] kernfs_fop_write_iter+0x19a/0x540 [ 1798.412216][ T868] vfs_write+0x612/0xba0 [ 1798.412242][ T868] ? __pfx_vfs_write+0x10/0x10 [ 1798.412260][ T868] ? __fget_files+0x3a2/0x420 [ 1798.412274][ T868] ? __fget_files+0x2a/0x420 [ 1798.412293][ T868] ? fdget+0x1ac/0x250 [ 1798.412312][ T868] ksys_write+0x150/0x270 [ 1798.412329][ T868] ? __pfx_ksys_write+0x10/0x10 [ 1798.412354][ T868] do_syscall_64+0x166/0x520 [ 1798.412369][ T868] ? trace_irq_disable+0x3b/0x140 [ 1798.412383][ T868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.412400][ T868] ? clear_bhb_loop+0x70/0xc0 [ 1798.412418][ T868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.412434][ T868] RIP: 0033:0x7f829119e159 [ 1798.412449][ T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.412464][ T868] RSP: 002b:00007f82920a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1798.412481][ T868] RAX: ffffffffffffffda RBX: 00007f8291425fa0 RCX: 00007f829119e159 [ 1798.412494][ T868] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1798.412504][ T868] RBP: 00007f829123506b R08: 0000000000000000 R09: 0000000000000000 [ 1798.412515][ T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.412526][ T868] R13: 00007f8291426038 R14: 00007f8291425fa0 R15: 00007fff8b4b0f98 [ 1798.412551][ T868] [ 1799.287247][ T191] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1799.441861][ T191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1799.441894][ T191] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1799.444260][ T191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.444275][ T191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1799.498655][ T191] usb 6-1: string descriptor 0 read error: -22 [ 1799.498772][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.552734][ T191] usb 6-1: selecting invalid altsetting 1 [ 1799.565398][ T191] usb 6-1: unit 3 not found! [ 1799.566798][ T879] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 1799.630903][ T879] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1799.631185][ T879] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x47425247, 8, 0, 0, 0) [ 1799.786026][ T191] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 1799.786046][ T191] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1800.064313][ T191] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1800.093551][ T191] usb 6-1: USB disconnect, device number 84 [ 1800.597610][ T5764] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1800.667726][ C0] net_ratelimit: 148 callbacks suppressed [ 1800.749069][ T5764] usb 9-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1800.752634][ T5764] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.752680][ T5764] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1800.754913][ T5764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.754929][ T5764] usb 9-1: Product: syz [ 1800.754940][ T5764] usb 9-1: Manufacturer: syz [ 1800.754952][ T5764] usb 9-1: SerialNumber: syz [ 1800.834765][ T5764] usb 9-1: unsupported MDLM descriptors [ 1801.318007][ T5764] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1801.359346][T18190] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1801.474319][ T5764] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1801.474353][ T5764] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1801.475823][ T5764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.475840][ T5764] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1801.528321][ T5764] usb 4-1: string descriptor 0 read error: -22 [ 1801.528427][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.545771][ T5764] usb 4-1: selecting invalid altsetting 1 [ 1801.555063][ T5764] usb 4-1: unit 3 not found! [ 1801.582609][T18190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1801.582640][T18190] usb 6-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1801.583755][T18190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.583771][T18190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1801.596382][T18190] usb 6-1: string descriptor 0 read error: -22 [ 1801.596514][T18190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.685153][T18190] usb 6-1: selecting invalid altsetting 1 [ 1801.806634][ T5764] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1801.818661][T18190] usb 6-1: unit 3 not found! [ 1801.863580][T18190] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 1801.863596][T18190] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1801.986843][T18190] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1802.006530][T18190] usb 6-1: USB disconnect, device number 85 [ 1802.192371][ T904] devtmpfs: Unknown parameter 'Ø® Îsûs“BBýîh0E—ó£' [ 1802.588914][ T1166] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1802.589018][ T1166] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1802.589168][ T1166] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1802.589253][ T1166] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1802.783748][T31339] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 1802.783897][T31339] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 1803.293120][ T5719] usb 9-1: USB disconnect, device number 112 [ 1803.630543][ T921] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 1803.638981][ T921] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1803.670654][ T921] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x47425247, 8, 0, 0, 0) [ 1803.880214][T29625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1803.915095][T29625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1803.927627][T29625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1803.945370][T29625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1803.947761][T29625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1804.296226][ T5719] usb 4-1: USB disconnect, device number 85 [ 1804.701267][T11967] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.701300][T11967] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.701327][T11967] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.701352][T11967] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1804.810047][ T10] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1804.820067][ T5719] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1804.977409][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1804.977443][ T10] usb 9-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1804.978628][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1804.978660][ T5719] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1804.979305][ T10] usb 9-1: config 1 has an invalid interface number: 97 but max is 1 [ 1804.979322][ T10] usb 9-1: config 1 has no interface number 1 [ 1804.979350][ T10] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1804.979370][ T10] usb 9-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1804.979502][ T10] usb 9-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1804.979523][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1804.979536][ T10] usb 9-1: config 1 interface 97 has no altsetting 0 [ 1805.043289][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.045089][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1805.122538][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.122554][ T10] usb 9-1: Product: syz [ 1805.122566][ T10] usb 9-1: Manufacturer: syz [ 1805.122584][ T10] usb 9-1: SerialNumber: syz [ 1805.152565][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 1805.152683][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.228027][ T5719] usb 4-1: selecting invalid altsetting 1 [ 1805.228685][ T5719] usb 4-1: unit 3 not found! [ 1805.384127][ T5719] usb 4-1: cannot request logical cluster ID: 0 (err: -32) [ 1805.384143][ T5719] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1805.484495][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 1805.525313][ T10] smsusb:smsusb_probe: board id=8, interface number 97 [ 1805.551274][ T10] usb 9-1: USB disconnect, device number 113 [ 1805.588627][ T930] lo speed is unknown, defaulting to 1000 [ 1805.603520][ T930] lo speed is unknown, defaulting to 1000 [ 1805.718819][ T5719] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1805.740814][ T5719] usb 4-1: USB disconnect, device number 86 [ 1805.870231][ C0] net_ratelimit: 198 callbacks suppressed [ 1806.110656][ T4929] Bluetooth: hci1: command tx timeout [ 1806.760493][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.760565][ T930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.778771][ T930] bridge_slave_0: entered allmulticast mode [ 1806.790490][ T930] bridge_slave_0: entered promiscuous mode [ 1806.803494][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.804964][ T930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.805293][ T930] bridge_slave_1: entered allmulticast mode [ 1806.807669][ T930] bridge_slave_1: entered promiscuous mode [ 1806.937590][ T930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.963474][ T930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.083266][ T930] team0: Port device team_slave_0 added [ 1807.088711][ T930] team0: Port device team_slave_1 added [ 1807.219237][ T930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.219246][ T930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.219266][ T930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.277798][ T930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.277807][ T930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.277828][ T930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.500511][ T930] hsr_slave_0: entered promiscuous mode [ 1807.512402][ T930] hsr_slave_1: entered promiscuous mode [ 1807.513023][ T930] debugfs: 'hsr0' already exists in 'hsr' [ 1807.513035][ T930] Cannot create hsr debugfs directory [ 1808.116152][ T930] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.191788][ T4929] Bluetooth: hci1: command tx timeout [ 1808.285236][ T930] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.671180][ T990] FAULT_INJECTION: forcing a failure. [ 1808.671180][ T990] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.671203][ T990] CPU: 0 UID: 0 PID: 990 Comm: syz.8.6987 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1808.671228][ T990] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1808.671235][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.671246][ T990] Call Trace: [ 1808.671252][ T990] [ 1808.671259][ T990] dump_stack_lvl+0xe8/0x150 [ 1808.671282][ T990] should_fail_ex+0x3eb/0x540 [ 1808.671301][ T990] ? __alloc_skb+0x1db/0x7a0 [ 1808.671317][ T990] should_failslab+0xa8/0x100 [ 1808.671334][ T990] ? __alloc_skb+0x1db/0x7a0 [ 1808.671348][ T990] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1808.671365][ T990] ? __alloc_skb+0x18d/0x7a0 [ 1808.671380][ T990] ? __alloc_skb+0x1db/0x7a0 [ 1808.671400][ T990] __alloc_skb+0x1db/0x7a0 [ 1808.671418][ T990] ctrl_getfamily+0x3d0/0x5c0 [ 1808.671437][ T990] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1808.671454][ T990] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1808.671477][ T990] genl_family_rcv_msg_doit+0x233/0x340 [ 1808.671499][ T990] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1808.671532][ T990] genl_rcv_msg+0x614/0x7a0 [ 1808.671557][ T990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1808.671572][ T990] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1808.671591][ T990] ? __asan_memcpy+0x40/0x70 [ 1808.671612][ T990] netlink_rcv_skb+0x226/0x4a0 [ 1808.671630][ T990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1808.671646][ T990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1808.671682][ T990] ? down_read+0x2b9/0x320 [ 1808.671702][ T990] genl_rcv+0x28/0x40 [ 1808.671716][ T990] netlink_unicast+0x7bd/0x940 [ 1808.671740][ T990] netlink_sendmsg+0x7c3/0xae0 [ 1808.671761][ T990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.671784][ T990] ? apparmor_socket_sendmsg+0x98/0x360 [ 1808.671803][ T990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.671818][ T990] sock_sendmsg_nosec+0x14e/0x190 [ 1808.671837][ T990] __sys_sendto+0x408/0x5a0 [ 1808.671857][ T990] ? __pfx___sys_sendto+0x10/0x10 [ 1808.671893][ T990] ? do_user_addr_fault+0xd3f/0x1480 [ 1808.671914][ T990] __x64_sys_sendto+0xde/0x100 [ 1808.671933][ T990] do_syscall_64+0x166/0x520 [ 1808.671948][ T990] ? trace_irq_disable+0x3b/0x140 [ 1808.671962][ T990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.671992][ T990] ? clear_bhb_loop+0x70/0xc0 [ 1808.672009][ T990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.672024][ T990] RIP: 0033:0x7f51ae95e98e [ 1808.672039][ T990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1808.672053][ T990] RSP: 002b:00007f51af7f0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1808.672070][ T990] RAX: ffffffffffffffda RBX: 00007f51af7f26c0 RCX: 00007f51ae95e98e [ 1808.672082][ T990] RDX: 0000000000000020 RSI: 00007f51af7f1000 RDI: 0000000000000008 [ 1808.672092][ T990] RBP: 0000000000000000 R08: 00007f51af7f0f04 R09: 000000000000000c [ 1808.672103][ T990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1808.672112][ T990] R13: 00007f51af7f0f58 R14: 00007f51af7f1000 R15: 0000000000000000 [ 1808.672136][ T990] [ 1808.761756][T18190] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1808.938488][T18190] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1808.938524][T18190] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1808.947018][T18190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.947035][T18190] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1808.996250][T18190] usb 4-1: string descriptor 0 read error: -22 [ 1808.996355][T18190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.136140][T18190] usb 4-1: selecting invalid altsetting 1 [ 1809.136740][T18190] usb 4-1: unit 3 not found! [ 1809.214779][ T930] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.278214][T18190] usb 4-1: cannot request logical cluster ID: 0 (err: -32) [ 1809.278233][T18190] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1809.508827][T18190] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1809.531199][T18190] usb 4-1: USB disconnect, device number 87 [ 1809.725202][ T930] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.908924][ T996] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 1810.273431][ T4929] Bluetooth: hci1: command tx timeout [ 1810.912739][ C0] net_ratelimit: 203 callbacks suppressed [ 1811.184727][T11967] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.184769][T11967] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.184795][T11967] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.184820][T11967] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.296552][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1811.428497][T32362] overlayfs: failed lookup in lower (newroot/32, name='bus', err=-40): overlapping layers [ 1811.428637][T32362] overlayfs: failed lookup in lower (newroot/32, name='bus', err=-40): overlapping layers [ 1811.477745][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1811.477779][ T10] usb 4-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1811.487884][ T10] usb 4-1: config 1 has an invalid interface number: 97 but max is 1 [ 1811.487902][ T10] usb 4-1: config 1 has no interface number 1 [ 1811.487929][ T10] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1811.487949][ T10] usb 4-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1811.487975][ T10] usb 4-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1811.487995][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1811.488009][ T10] usb 4-1: config 1 interface 97 has no altsetting 0 [ 1811.580410][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.580426][ T10] usb 4-1: Product: syz [ 1811.580437][ T10] usb 4-1: Manufacturer: syz [ 1811.580448][ T10] usb 4-1: SerialNumber: syz [ 1811.679001][ T930] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1811.749717][ T930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1811.750542][ T930] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1811.910969][ T930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.939459][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 1811.961273][ T10] smsusb:smsusb_probe: board id=8, interface number 97 [ 1811.990859][ T10] usb 4-1: USB disconnect, device number 88 [ 1812.207431][ T930] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1812.255768][ T930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1812.268336][ T930] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1812.315023][ T1026] FAULT_INJECTION: forcing a failure. [ 1812.315023][ T1026] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.315046][ T1026] CPU: 0 UID: 0 PID: 1026 Comm: syz.7.6996 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1812.315068][ T1026] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1812.315074][ T1026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1812.315084][ T1026] Call Trace: [ 1812.315090][ T1026] [ 1812.315097][ T1026] dump_stack_lvl+0xe8/0x150 [ 1812.315115][ T1026] should_fail_ex+0x3eb/0x540 [ 1812.315134][ T1026] should_failslab+0xa8/0x100 [ 1812.315149][ T1026] ? skb_clone+0x212/0x3a0 [ 1812.315164][ T1026] kmem_cache_alloc_noprof+0x9c/0x600 [ 1812.315181][ T1026] ? skb_clone+0x212/0x3a0 [ 1812.315199][ T1026] skb_clone+0x212/0x3a0 [ 1812.315215][ T1026] __netlink_deliver_tap+0x355/0x6e0 [ 1812.315238][ T1026] ? netlink_deliver_tap+0x2e/0x1b0 [ 1812.315253][ T1026] netlink_deliver_tap+0x19c/0x1b0 [ 1812.315269][ T1026] netlink_sendskb+0x68/0x140 [ 1812.315292][ T1026] ctrl_getfamily+0x4c8/0x5c0 [ 1812.315309][ T1026] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1812.315324][ T1026] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1812.315346][ T1026] genl_family_rcv_msg_doit+0x233/0x340 [ 1812.315366][ T1026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1812.315396][ T1026] genl_rcv_msg+0x614/0x7a0 [ 1812.315414][ T1026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1812.315428][ T1026] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1812.315445][ T1026] ? __asan_memcpy+0x40/0x70 [ 1812.315464][ T1026] netlink_rcv_skb+0x226/0x4a0 [ 1812.315480][ T1026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1812.315495][ T1026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1812.315520][ T1026] ? down_read+0x2b9/0x320 [ 1812.315538][ T1026] genl_rcv+0x28/0x40 [ 1812.315551][ T1026] netlink_unicast+0x7bd/0x940 [ 1812.315572][ T1026] netlink_sendmsg+0x7c3/0xae0 [ 1812.315591][ T1026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.315611][ T1026] ? apparmor_socket_sendmsg+0x98/0x360 [ 1812.315628][ T1026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.315660][ T1026] sock_sendmsg_nosec+0x14e/0x190 [ 1812.315679][ T1026] __sys_sendto+0x408/0x5a0 [ 1812.315698][ T1026] ? __pfx___sys_sendto+0x10/0x10 [ 1812.315733][ T1026] ? rcu_is_watching+0x16/0xb0 [ 1812.315754][ T1026] __x64_sys_sendto+0xde/0x100 [ 1812.315772][ T1026] do_syscall_64+0x166/0x520 [ 1812.315786][ T1026] ? trace_irq_disable+0x3b/0x140 [ 1812.315800][ T1026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.315817][ T1026] ? clear_bhb_loop+0x70/0xc0 [ 1812.315837][ T1026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.315853][ T1026] RIP: 0033:0x7fabdf55e98e [ 1812.315887][ T1026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1812.315901][ T1026] RSP: 002b:00007fabe0523e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1812.315918][ T1026] RAX: ffffffffffffffda RBX: 00007fabe05256c0 RCX: 00007fabdf55e98e [ 1812.315930][ T1026] RDX: 0000000000000020 RSI: 00007fabe0524000 RDI: 0000000000000008 [ 1812.315941][ T1026] RBP: 0000000000000000 R08: 00007fabe0523f04 R09: 000000000000000c [ 1812.315952][ T1026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1812.315962][ T1026] R13: 00007fabe0523f58 R14: 00007fabe0524000 R15: 0000000000000000 [ 1812.315987][ T1026] [ 1812.358851][ T4929] Bluetooth: hci1: command tx timeout [ 1812.443044][ T930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.309675][ T930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.367359][ T930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.390857][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.390924][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1813.433116][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.433192][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1813.862419][ T1053] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1814.363292][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1814.383741][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1814.392750][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1814.411559][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1814.428906][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1814.762249][T11969] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.798431][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.798777][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.798806][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1815.095771][T31305] overlayfs: failed lookup in lower (newroot/111, name='bus', err=-40): overlapping layers [ 1815.095966][T31305] overlayfs: failed lookup in lower (newroot/111, name='bus', err=-40): overlapping layers [ 1815.899879][ T930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.955571][ C0] net_ratelimit: 200 callbacks suppressed [ 1816.440237][T29625] Bluetooth: hci3: command tx timeout [ 1816.497583][T11969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.497609][T11969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.759289][ T1071] lo speed is unknown, defaulting to 1000 [ 1816.765315][ T1071] lo speed is unknown, defaulting to 1000 [ 1816.965018][T11969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1816.965042][T11969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.324885][T11969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1817.324910][T11969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.595186][T11969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1817.595217][T11969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.080003][ T930] veth0_vlan: entered promiscuous mode [ 1818.272988][ T930] veth1_vlan: entered promiscuous mode [ 1818.520973][T29625] Bluetooth: hci3: command tx timeout [ 1819.199567][T11969] bridge_slave_1: left allmulticast mode [ 1819.199582][T11969] bridge_slave_1: left promiscuous mode [ 1819.199736][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.229881][T11969] bridge_slave_0: left allmulticast mode [ 1819.229897][T11969] bridge_slave_0: left promiscuous mode [ 1819.232000][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.281899][T11969] tipc: Resetting bearer [ 1819.633103][T11969] tipc: Disabling bearer [ 1819.840257][T11969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.846764][T11969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.869119][T11969] bond0 (unregistering): Released all slaves [ 1820.059619][ T930] veth0_macvtap: entered promiscuous mode [ 1820.110716][T11969] tipc: Left network mode [ 1820.111237][ T930] veth1_macvtap: entered promiscuous mode [ 1820.134293][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.134366][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.134517][ T1071] bridge_slave_0: entered allmulticast mode [ 1820.159281][ T1071] bridge_slave_0: entered promiscuous mode [ 1820.202781][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.202849][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.203012][ T1071] bridge_slave_1: entered allmulticast mode [ 1820.230558][ T1071] bridge_slave_1: entered promiscuous mode [ 1820.463035][ T1071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1820.491255][ T1071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1820.598332][T29625] Bluetooth: hci3: command tx timeout [ 1820.709285][ T930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.786437][ T1071] team0: Port device team_slave_0 added [ 1820.797526][ T1071] team0: Port device team_slave_1 added [ 1820.811747][ T930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1821.051433][T11969] hsr_slave_0: left promiscuous mode [ 1821.061876][T11969] hsr_slave_1: left promiscuous mode [ 1821.062669][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.062683][T11969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1821.064036][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1821.064048][T11969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.080691][ C0] net_ratelimit: 239 callbacks suppressed [ 1821.142279][T11969] veth1_macvtap: left promiscuous mode [ 1821.142306][T11969] veth0_macvtap: left promiscuous mode [ 1821.142375][T11969] veth1_vlan: left promiscuous mode [ 1821.142421][T11969] veth0_vlan: left promiscuous mode [ 1822.079648][T11969] team0 (unregistering): Port device team_slave_1 removed [ 1822.130344][T11969] team0 (unregistering): Port device team_slave_0 removed [ 1822.544783][ T1071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.544791][ T1071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.544811][ T1071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.584929][T17751] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.600772][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1822.613667][ T357] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.678199][ T1071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.678207][ T1071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.678226][ T1071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.679205][T29625] Bluetooth: hci3: command tx timeout [ 1822.810066][T17751] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.810103][T17751] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.065075][ T1071] hsr_slave_0: entered promiscuous mode [ 1823.066006][ T1071] hsr_slave_1: entered promiscuous mode [ 1823.068549][ T1071] debugfs: 'hsr0' already exists in 'hsr' [ 1823.068562][ T1071] Cannot create hsr debugfs directory [ 1823.818902][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.818916][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.223488][ T357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.223499][ T357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.817430][ T1186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1824.853806][ T1186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1824.855723][ T1186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1824.883089][ T1186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1824.884372][ T1186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1825.352044][ T5690] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1825.419548][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1825.513668][ T5690] usb 10-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1825.516789][ T5690] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.516836][ T5690] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.564319][ T5690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.564334][ T5690] usb 10-1: Product: syz [ 1825.564345][ T5690] usb 10-1: Manufacturer: syz [ 1825.564356][ T5690] usb 10-1: SerialNumber: syz [ 1825.605781][ T5690] usb 10-1: unsupported MDLM descriptors [ 1826.120359][ C0] net_ratelimit: 389 callbacks suppressed [ 1826.655252][ T1185] lo speed is unknown, defaulting to 1000 [ 1826.656490][ T1185] lo speed is unknown, defaulting to 1000 [ 1827.003187][ T1186] Bluetooth: hci0: command tx timeout [ 1827.287150][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1827.876995][ T5690] usb 10-1: USB disconnect, device number 32 [ 1828.014281][ T1071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1828.071512][ T1071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1828.083725][ T1071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1828.140063][ T1071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1828.156296][ T1071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1828.206633][ T1071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1828.207771][ T1227] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1828.234619][ T1071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1828.278911][ T1071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1829.084198][ T1186] Bluetooth: hci0: command tx timeout [ 1829.315133][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.315203][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.315356][ T1185] bridge_slave_0: entered allmulticast mode [ 1829.321542][ T1185] bridge_slave_0: entered promiscuous mode [ 1829.421028][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.421098][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.421512][ T1185] bridge_slave_1: entered allmulticast mode [ 1829.456489][ T1185] bridge_slave_1: entered promiscuous mode [ 1829.764721][ T1185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.807270][ T1185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.842607][T26889] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1829.921202][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1829.995330][T26889] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1829.995363][T26889] usb 10-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1829.996309][T26889] usb 10-1: config 1 has an invalid interface number: 97 but max is 1 [ 1829.996325][T26889] usb 10-1: config 1 has no interface number 1 [ 1829.996353][T26889] usb 10-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1829.996373][T26889] usb 10-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1829.996399][T26889] usb 10-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1829.996418][T26889] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1829.996432][T26889] usb 10-1: config 1 interface 97 has no altsetting 0 [ 1829.998712][ T1185] team0: Port device team_slave_0 added [ 1830.091091][T26889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.091107][T26889] usb 10-1: Product: syz [ 1830.091118][T26889] usb 10-1: Manufacturer: syz [ 1830.091129][T26889] usb 10-1: SerialNumber: syz [ 1830.148524][ T1185] team0: Port device team_slave_1 added [ 1830.335200][ T1185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.335208][ T1185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.335227][ T1185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.395759][ T1185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.395774][ T1185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.395815][ T1185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.474935][T26889] smsusb:smsusb_probe: board id=8, interface number 0 [ 1830.566518][T26889] smsusb:smsusb_probe: board id=8, interface number 97 [ 1830.594252][T26889] usb 10-1: USB disconnect, device number 33 [ 1830.808784][ T1185] hsr_slave_0: entered promiscuous mode [ 1830.820910][ T1185] hsr_slave_1: entered promiscuous mode [ 1830.832138][ T1185] debugfs: 'hsr0' already exists in 'hsr' [ 1830.832151][ T1185] Cannot create hsr debugfs directory [ 1831.008680][ T1071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.163371][ T1186] Bluetooth: hci0: command tx timeout [ 1831.403579][ C0] net_ratelimit: 227 callbacks suppressed [ 1831.428955][ T1071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.489949][ T1280] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1831.658668][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.658743][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.739706][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.739776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.247980][ T1186] Bluetooth: hci0: command tx timeout [ 1833.443103][ T1320] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1834.848625][ T5690] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1834.914418][ T1071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.021490][ T5690] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1835.021522][ T5690] usb 10-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1835.022439][ T5690] usb 10-1: config 1 has an invalid interface number: 97 but max is 1 [ 1835.022455][ T5690] usb 10-1: config 1 has no interface number 1 [ 1835.022482][ T5690] usb 10-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1835.022501][ T5690] usb 10-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1835.022526][ T5690] usb 10-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1835.022546][ T5690] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1835.022558][ T5690] usb 10-1: config 1 interface 97 has no altsetting 0 [ 1835.117399][ T5690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.117417][ T5690] usb 10-1: Product: syz [ 1835.117431][ T5690] usb 10-1: Manufacturer: syz [ 1835.117445][ T5690] usb 10-1: SerialNumber: syz [ 1835.373131][ T5690] smsusb:smsusb_probe: board id=8, interface number 0 [ 1835.388360][ T5690] smsusb:smsusb_probe: board id=8, interface number 97 [ 1835.423513][ T5690] usb 10-1: USB disconnect, device number 34 [ 1835.709523][ T1071] veth0_vlan: entered promiscuous mode [ 1835.863674][ T1071] veth1_vlan: entered promiscuous mode [ 1835.933839][ T1185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1835.958048][ T1185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1835.983336][ T1185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1836.031532][ T1185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1836.068203][ T1185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1836.211071][ T1185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1836.211936][ T1185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1836.290343][ T1185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1836.327058][ T1071] veth0_macvtap: entered promiscuous mode [ 1836.398109][ T1071] veth1_macvtap: entered promiscuous mode [ 1836.445705][ C0] net_ratelimit: 130 callbacks suppressed [ 1836.583034][ T1071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1836.671542][ T1071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1836.752842][ T1380] FAULT_INJECTION: forcing a failure. [ 1836.752842][ T1380] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.752865][ T1380] CPU: 0 UID: 0 PID: 1380 Comm: syz.7.7027 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1836.752890][ T1380] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1836.752897][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1836.752908][ T1380] Call Trace: [ 1836.752915][ T1380] [ 1836.752922][ T1380] dump_stack_lvl+0xe8/0x150 [ 1836.752941][ T1380] should_fail_ex+0x3eb/0x540 [ 1836.752961][ T1380] ? __alloc_skb+0x1db/0x7a0 [ 1836.752976][ T1380] should_failslab+0xa8/0x100 [ 1836.752994][ T1380] ? __alloc_skb+0x1db/0x7a0 [ 1836.753007][ T1380] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1836.753025][ T1380] ? __alloc_skb+0x18d/0x7a0 [ 1836.753040][ T1380] ? __alloc_skb+0x1db/0x7a0 [ 1836.753059][ T1380] __alloc_skb+0x1db/0x7a0 [ 1836.753078][ T1380] netlink_ack+0x136/0xb30 [ 1836.753092][ T1380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.753114][ T1380] ? __asan_memcpy+0x40/0x70 [ 1836.753134][ T1380] netlink_rcv_skb+0x2a4/0x4a0 [ 1836.753152][ T1380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.753168][ T1380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1836.753204][ T1380] ? down_read+0x2b9/0x320 [ 1836.753223][ T1380] genl_rcv+0x28/0x40 [ 1836.753237][ T1380] netlink_unicast+0x7bd/0x940 [ 1836.753261][ T1380] netlink_sendmsg+0x7c3/0xae0 [ 1836.753282][ T1380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.753304][ T1380] ? apparmor_socket_sendmsg+0x98/0x360 [ 1836.753323][ T1380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.753339][ T1380] sock_sendmsg_nosec+0x14e/0x190 [ 1836.753358][ T1380] __sys_sendto+0x408/0x5a0 [ 1836.753378][ T1380] ? __pfx___sys_sendto+0x10/0x10 [ 1836.753414][ T1380] ? do_user_addr_fault+0xd3f/0x1480 [ 1836.753435][ T1380] __x64_sys_sendto+0xde/0x100 [ 1836.753454][ T1380] do_syscall_64+0x166/0x520 [ 1836.753469][ T1380] ? trace_irq_disable+0x3b/0x140 [ 1836.753483][ T1380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.753500][ T1380] ? clear_bhb_loop+0x70/0xc0 [ 1836.753518][ T1380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.753534][ T1380] RIP: 0033:0x7fabdf55e98e [ 1836.753550][ T1380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1836.753565][ T1380] RSP: 002b:00007fabe0502e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1836.753583][ T1380] RAX: ffffffffffffffda RBX: 00007fabe05046c0 RCX: 00007fabdf55e98e [ 1836.753596][ T1380] RDX: 0000000000000020 RSI: 00007fabe0503000 RDI: 0000000000000008 [ 1836.753607][ T1380] RBP: 0000000000000000 R08: 00007fabe0502f04 R09: 000000000000000c [ 1836.753618][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1836.753628][ T1380] R13: 00007fabe0502f58 R14: 00007fabe0503000 R15: 0000000000000000 [ 1836.753652][ T1380] [ 1837.202750][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.283459][T11969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.297413][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.298559][ T205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.545604][ T1185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.761989][ T1185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.951800][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.951871][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.040115][ T468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.040126][ T468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.079087][T17751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.079180][T17751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.224318][ T1388] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1838.564749][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.564761][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.261045][ T5719] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1839.425488][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1839.425543][ T5719] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1839.426467][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.426483][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1839.476566][ T5719] usb 3-1: string descriptor 0 read error: -22 [ 1839.476673][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.524662][ T5719] usb 3-1: selecting invalid altsetting 1 [ 1839.525208][ T5719] usb 3-1: unit 3 not found! [ 1839.722734][ T5719] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 1839.722763][ T5719] usb 3-1: invalid MIXER UNIT descriptor 6 [ 1839.951248][ T5719] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1839.991434][ T5719] usb 3-1: USB disconnect, device number 102 [ 1840.352986][ T1185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.605471][ T1185] veth0_vlan: entered promiscuous mode [ 1840.650877][ T1185] veth1_vlan: entered promiscuous mode [ 1840.803965][ T1185] veth0_macvtap: entered promiscuous mode [ 1840.830533][ T1185] veth1_macvtap: entered promiscuous mode [ 1840.940790][ T1185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.038875][ T1185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1841.079758][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.082146][ T205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.131315][T17751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.131350][T17751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.174300][ T1451] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1841.473443][T32672] net_ratelimit: 476 callbacks suppressed [ 1841.649861][ T5690] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1841.701862][T17751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.701874][T17751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.816353][ T5690] usb 3-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1841.829982][ T5690] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.830371][ T5690] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1841.868321][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.868337][ T5690] usb 3-1: Product: syz [ 1841.868348][ T5690] usb 3-1: Manufacturer: syz [ 1841.868359][ T5690] usb 3-1: SerialNumber: syz [ 1841.951875][ T5690] usb 3-1: unsupported MDLM descriptors [ 1842.122524][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.122540][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.894141][ T1475] FAULT_INJECTION: forcing a failure. [ 1842.894141][ T1475] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.894167][ T1475] CPU: 0 UID: 0 PID: 1475 Comm: syz.3.7044 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1842.894192][ T1475] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1842.894199][ T1475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1842.894210][ T1475] Call Trace: [ 1842.894217][ T1475] [ 1842.894224][ T1475] dump_stack_lvl+0xe8/0x150 [ 1842.894246][ T1475] should_fail_ex+0x3eb/0x540 [ 1842.894267][ T1475] should_failslab+0xa8/0x100 [ 1842.894284][ T1475] ? skb_clone+0x212/0x3a0 [ 1842.894300][ T1475] kmem_cache_alloc_noprof+0x9c/0x600 [ 1842.894320][ T1475] ? skb_clone+0x212/0x3a0 [ 1842.894340][ T1475] skb_clone+0x212/0x3a0 [ 1842.894367][ T1475] __netlink_deliver_tap+0x355/0x6e0 [ 1842.894392][ T1475] ? netlink_deliver_tap+0x2e/0x1b0 [ 1842.894410][ T1475] netlink_deliver_tap+0x19c/0x1b0 [ 1842.894427][ T1475] netlink_sendskb+0x68/0x140 [ 1842.894446][ T1475] ctrl_getfamily+0x4c8/0x5c0 [ 1842.894464][ T1475] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1842.894481][ T1475] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1842.894505][ T1475] genl_family_rcv_msg_doit+0x233/0x340 [ 1842.894526][ T1475] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1842.894560][ T1475] genl_rcv_msg+0x614/0x7a0 [ 1842.894581][ T1475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1842.894596][ T1475] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1842.894616][ T1475] ? __asan_memcpy+0x40/0x70 [ 1842.894637][ T1475] netlink_rcv_skb+0x226/0x4a0 [ 1842.894654][ T1475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1842.894671][ T1475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1842.894698][ T1475] ? down_read+0x2b9/0x320 [ 1842.894718][ T1475] genl_rcv+0x28/0x40 [ 1842.894732][ T1475] netlink_unicast+0x7bd/0x940 [ 1842.894756][ T1475] netlink_sendmsg+0x7c3/0xae0 [ 1842.894789][ T1475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.894810][ T1475] ? apparmor_socket_sendmsg+0x98/0x360 [ 1842.894829][ T1475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.894843][ T1475] sock_sendmsg_nosec+0x14e/0x190 [ 1842.894862][ T1475] __sys_sendto+0x408/0x5a0 [ 1842.894885][ T1475] ? __pfx___sys_sendto+0x10/0x10 [ 1842.894920][ T1475] ? do_user_addr_fault+0xd3f/0x1480 [ 1842.894940][ T1475] __x64_sys_sendto+0xde/0x100 [ 1842.894958][ T1475] do_syscall_64+0x166/0x520 [ 1842.894973][ T1475] ? trace_irq_disable+0x3b/0x140 [ 1842.894988][ T1475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.895004][ T1475] ? clear_bhb_loop+0x70/0xc0 [ 1842.895021][ T1475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.895038][ T1475] RIP: 0033:0x7f4d8475e98e [ 1842.895053][ T1475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1842.895067][ T1475] RSP: 002b:00007f4d8564be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1842.895084][ T1475] RAX: ffffffffffffffda RBX: 00007f4d8564d6c0 RCX: 00007f4d8475e98e [ 1842.895095][ T1475] RDX: 0000000000000020 RSI: 00007f4d8564c000 RDI: 0000000000000008 [ 1842.895106][ T1475] RBP: 0000000000000000 R08: 00007f4d8564bf04 R09: 000000000000000c [ 1842.895116][ T1475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1842.895126][ T1475] R13: 00007f4d8564bf58 R14: 00007f4d8564c000 R15: 0000000000000000 [ 1842.895149][ T1475] [ 1843.205611][ T5764] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1843.440801][ T5764] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1843.440836][ T5764] usb 10-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 1843.442402][ T5764] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.442418][ T5764] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1843.502032][ T5764] usb 10-1: string descriptor 0 read error: -22 [ 1843.502184][ T5764] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.571238][ T5764] usb 10-1: selecting invalid altsetting 1 [ 1843.582733][ T5764] usb 10-1: unit 3 not found! [ 1843.751483][ T5764] usb 10-1: cannot request logical cluster ID: 0 (err: -5) [ 1843.751500][ T5764] usb 10-1: invalid MIXER UNIT descriptor 6 [ 1844.005640][ T5764] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1844.026173][ T5764] usb 10-1: USB disconnect, device number 35 [ 1844.405564][ T5764] usb 3-1: USB disconnect, device number 103 [ 1844.940830][ T5764] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1845.107698][ T5764] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1845.107732][ T5764] usb 3-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1845.108682][ T5764] usb 3-1: config 1 has an invalid interface number: 97 but max is 1 [ 1845.108698][ T5764] usb 3-1: config 1 has no interface number 1 [ 1845.108724][ T5764] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1845.108744][ T5764] usb 3-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1845.108770][ T5764] usb 3-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1845.108789][ T5764] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1845.108802][ T5764] usb 3-1: config 1 interface 97 has no altsetting 0 [ 1845.213623][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.213637][ T5764] usb 3-1: Product: syz [ 1845.213647][ T5764] usb 3-1: Manufacturer: syz [ 1845.213657][ T5764] usb 3-1: SerialNumber: syz [ 1845.284357][ T1516] FAULT_INJECTION: forcing a failure. [ 1845.284357][ T1516] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.284381][ T1516] CPU: 0 UID: 0 PID: 1516 Comm: syz.3.7055 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1845.284405][ T1516] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1845.284412][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1845.284422][ T1516] Call Trace: [ 1845.284429][ T1516] [ 1845.284436][ T1516] dump_stack_lvl+0xe8/0x150 [ 1845.284460][ T1516] should_fail_ex+0x3eb/0x540 [ 1845.284480][ T1516] should_failslab+0xa8/0x100 [ 1845.284496][ T1516] ? skb_clone+0x212/0x3a0 [ 1845.284512][ T1516] kmem_cache_alloc_noprof+0x9c/0x600 [ 1845.284530][ T1516] ? skb_clone+0x212/0x3a0 [ 1845.284549][ T1516] skb_clone+0x212/0x3a0 [ 1845.284567][ T1516] __netlink_deliver_tap+0x355/0x6e0 [ 1845.284591][ T1516] ? netlink_deliver_tap+0x2e/0x1b0 [ 1845.284608][ T1516] netlink_deliver_tap+0x19c/0x1b0 [ 1845.284625][ T1516] netlink_sendskb+0x68/0x140 [ 1845.284642][ T1516] ctrl_getfamily+0x4c8/0x5c0 [ 1845.284660][ T1516] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1845.284676][ T1516] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1845.284698][ T1516] genl_family_rcv_msg_doit+0x233/0x340 [ 1845.284719][ T1516] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1845.284751][ T1516] genl_rcv_msg+0x614/0x7a0 [ 1845.284806][ T1516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1845.284821][ T1516] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1845.284840][ T1516] ? __asan_memcpy+0x40/0x70 [ 1845.284860][ T1516] netlink_rcv_skb+0x226/0x4a0 [ 1845.284878][ T1516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1845.284895][ T1516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1845.284922][ T1516] ? down_read+0x2b9/0x320 [ 1845.284942][ T1516] genl_rcv+0x28/0x40 [ 1845.284956][ T1516] netlink_unicast+0x7bd/0x940 [ 1845.284980][ T1516] netlink_sendmsg+0x7c3/0xae0 [ 1845.285001][ T1516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1845.285023][ T1516] ? apparmor_socket_sendmsg+0x98/0x360 [ 1845.285042][ T1516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1845.285056][ T1516] sock_sendmsg_nosec+0x14e/0x190 [ 1845.285076][ T1516] __sys_sendto+0x408/0x5a0 [ 1845.285096][ T1516] ? __pfx___sys_sendto+0x10/0x10 [ 1845.285131][ T1516] ? rcu_is_watching+0x16/0xb0 [ 1845.285153][ T1516] __x64_sys_sendto+0xde/0x100 [ 1845.285171][ T1516] do_syscall_64+0x166/0x520 [ 1845.285186][ T1516] ? trace_irq_disable+0x3b/0x140 [ 1845.285201][ T1516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.285218][ T1516] ? clear_bhb_loop+0x70/0xc0 [ 1845.285242][ T1516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.285258][ T1516] RIP: 0033:0x7f4d8475e98e [ 1845.285274][ T1516] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1845.285288][ T1516] RSP: 002b:00007f4d8564be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1845.285306][ T1516] RAX: ffffffffffffffda RBX: 00007f4d8564d6c0 RCX: 00007f4d8475e98e [ 1845.285319][ T1516] RDX: 0000000000000020 RSI: 00007f4d8564c000 RDI: 0000000000000008 [ 1845.285330][ T1516] RBP: 0000000000000000 R08: 00007f4d8564bf04 R09: 000000000000000c [ 1845.285340][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1845.285350][ T1516] R13: 00007f4d8564bf58 R14: 00007f4d8564c000 R15: 0000000000000000 [ 1845.285375][ T1516] [ 1845.756461][ T5764] smsusb:smsusb_probe: board id=8, interface number 0 [ 1845.794022][ T5764] smsusb:smsusb_probe: board id=8, interface number 97 [ 1845.824525][ T5764] usb 3-1: USB disconnect, device number 104 [ 1846.441840][ T5764] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1846.560867][ T5690] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1846.602103][ T5764] usb 4-1: Using ep0 maxpacket: 16 [ 1846.602849][ T5764] usb 4-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1846.603427][ T5764] usb 4-1: config 0 has no interfaces? [ 1846.605872][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.605912][ T5764] usb 4-1: Product: syz [ 1846.605924][ T5764] usb 4-1: Manufacturer: syz [ 1846.605935][ T5764] usb 4-1: SerialNumber: syz [ 1846.667248][ T5764] usb 4-1: config 0 descriptor?? [ 1846.731492][ T5690] usb 10-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1846.732451][ T5690] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.732497][ T5690] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1846.734631][ T5690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.734647][ T5690] usb 10-1: Product: syz [ 1846.734657][ T5690] usb 10-1: Manufacturer: syz [ 1846.734668][ T5690] usb 10-1: SerialNumber: syz [ 1846.776983][ C0] net_ratelimit: 350 callbacks suppressed [ 1846.830320][ T5690] usb 10-1: unsupported MDLM descriptors [ 1846.886566][ T5690] usb 4-1: USB disconnect, device number 89 [ 1848.772423][ T5690] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1848.923206][ T5690] usb 3-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1848.924221][ T5690] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.924266][ T5690] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1848.926363][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.926378][ T5690] usb 3-1: Product: syz [ 1848.926389][ T5690] usb 3-1: Manufacturer: syz [ 1848.926400][ T5690] usb 3-1: SerialNumber: syz [ 1849.007695][ T5690] usb 3-1: unsupported MDLM descriptors [ 1849.237552][ T5690] usb 10-1: USB disconnect, device number 36 [ 1849.562333][ T468] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.564028][T11969] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.564059][T11969] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.564097][T11969] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.851312][ T930] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 1849.851445][ T930] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 1851.398944][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1851.431316][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1851.442309][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1851.457496][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1851.460003][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1851.584798][T29625] Bluetooth: hci2: command 0x0406 tx timeout [ 1851.784653][T18190] usb 3-1: USB disconnect, device number 105 [ 1851.813264][ C0] net_ratelimit: 229 callbacks suppressed [ 1852.360671][ T468] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1852.360821][ T468] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1852.360862][ T468] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1852.360888][ T468] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1852.692072][ T1071] overlayfs: failed lookup in lower (newroot/13, name='bus', err=-40): overlapping layers [ 1852.692220][ T1071] overlayfs: failed lookup in lower (newroot/13, name='bus', err=-40): overlapping layers [ 1853.421019][ T1636] lo speed is unknown, defaulting to 1000 [ 1853.433654][ T1636] lo speed is unknown, defaulting to 1000 [ 1853.495895][ T1186] Bluetooth: hci1: command tx timeout [ 1853.534203][ T5690] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1853.688295][ T5690] usb 4-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1853.691595][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.691640][ T5690] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1853.734780][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.734796][ T5690] usb 4-1: Product: syz [ 1853.734808][ T5690] usb 4-1: Manufacturer: syz [ 1853.734819][ T5690] usb 4-1: SerialNumber: syz [ 1853.780799][ T5690] usb 4-1: unsupported MDLM descriptors [ 1854.019008][T18190] usb 4-1: USB disconnect, device number 90 [ 1854.620317][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.620354][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.740459][T29625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1854.758205][T29625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1854.761143][T29625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1854.790440][T29625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1854.795829][T29625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1855.460047][ T5690] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1855.556620][ T1696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.556633][ T1696] IPv6: NLM_F_CREATE should be set when creating new route [ 1855.556883][ T1696] IPv6: NLM_F_CREATE should be set when creating new route [ 1855.556902][ T1696] IPv6: NLM_F_CREATE should be set when creating new route [ 1855.580969][T29625] Bluetooth: hci1: command tx timeout [ 1855.626355][ T5690] usb 4-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1855.627356][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.627402][ T5690] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1855.633799][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.633814][ T5690] usb 4-1: Product: syz [ 1855.633825][ T5690] usb 4-1: Manufacturer: syz [ 1855.633836][ T5690] usb 4-1: SerialNumber: syz [ 1855.723388][ T5690] usb 4-1: unsupported MDLM descriptors [ 1855.772506][ T1702] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1855.773007][ T1702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1855.900514][ T1696] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7091'. [ 1856.043406][ T5690] usb 4-1: USB disconnect, device number 91 [ 1856.078558][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.078636][ T1636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.078817][ T1636] bridge_slave_0: entered allmulticast mode [ 1856.080096][ T1636] bridge_slave_0: entered promiscuous mode [ 1856.139277][ T1636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.142002][ T1636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.142209][ T1636] bridge_slave_1: entered allmulticast mode [ 1856.179471][ T1636] bridge_slave_1: entered promiscuous mode [ 1856.447625][ T1636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.483551][ T1636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1856.758381][ T1636] team0: Port device team_slave_0 added [ 1856.780025][ T1636] team0: Port device team_slave_1 added [ 1856.856094][T29625] Bluetooth: hci3: command tx timeout [ 1857.104133][ T1636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.104142][ T1636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.104161][ T1636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.162119][ T1636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.162128][ T1636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.162149][ T1636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1857.200949][ C0] net_ratelimit: 254 callbacks suppressed [ 1857.665359][T29625] Bluetooth: hci1: command tx timeout [ 1857.681707][ T1636] hsr_slave_0: entered promiscuous mode [ 1857.697341][ T1636] hsr_slave_1: entered promiscuous mode [ 1857.698039][ T1636] debugfs: 'hsr0' already exists in 'hsr' [ 1857.698053][ T1636] Cannot create hsr debugfs directory [ 1857.732650][ T1683] lo speed is unknown, defaulting to 1000 [ 1857.733849][ T1683] lo speed is unknown, defaulting to 1000 [ 1858.918319][ T5719] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1858.937147][T29625] Bluetooth: hci3: command tx timeout [ 1859.069090][ T5719] usb 4-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 1859.070363][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.070407][ T5719] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.072629][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.072643][ T5719] usb 4-1: Product: syz [ 1859.072654][ T5719] usb 4-1: Manufacturer: syz [ 1859.072665][ T5719] usb 4-1: SerialNumber: syz [ 1859.171688][ T5719] usb 4-1: unsupported MDLM descriptors [ 1859.741702][T29625] Bluetooth: hci1: command tx timeout [ 1861.020911][ T1186] Bluetooth: hci3: command tx timeout [ 1861.276575][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.287152][ T1683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.306573][ T1683] bridge_slave_0: entered allmulticast mode [ 1861.316039][ T1683] bridge_slave_0: entered promiscuous mode [ 1861.335413][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.335488][ T1683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.335662][ T1683] bridge_slave_1: entered allmulticast mode [ 1861.362436][ T1683] bridge_slave_1: entered promiscuous mode [ 1861.595664][ T5719] usb 4-1: USB disconnect, device number 92 [ 1861.882557][ T1683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.924119][ T1683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.925564][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.925708][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.925749][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1861.925790][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.218123][ T1683] team0: Port device team_slave_0 added [ 1862.251397][ T1683] team0: Port device team_slave_1 added [ 1862.274570][ T1185] overlayfs: failed lookup in lower (newroot/21, name='bus', err=-40): overlapping layers [ 1862.274709][ T1185] overlayfs: failed lookup in lower (newroot/21, name='bus', err=-40): overlapping layers [ 1862.300273][ C0] net_ratelimit: 221 callbacks suppressed [ 1862.583231][ T1683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.583240][ T1683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.583260][ T1683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.649435][ T1683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.649444][ T1683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.649464][ T1683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.100788][ T1186] Bluetooth: hci3: command tx timeout [ 1863.122064][ T1683] hsr_slave_0: entered promiscuous mode [ 1863.141216][ T1683] hsr_slave_1: entered promiscuous mode [ 1863.145395][ T1683] debugfs: 'hsr0' already exists in 'hsr' [ 1863.145407][ T1683] Cannot create hsr debugfs directory [ 1864.437116][T29625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1864.452588][T29625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1864.457791][T29625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1864.486311][T29625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1864.487659][T29625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1864.992074][ T1636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1865.033284][ T1636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1865.033979][ T1636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1865.107295][ T1636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1865.253219][ T1636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1865.296399][ T1636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1865.306186][ T1636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1865.342137][ T1636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1866.140309][ C0] wireguard: wg2: Handshake for peer 109 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 1866.140389][ C0] wireguard: wg2: Handshake for peer 108 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1866.140436][ C0] wireguard: wg1: Handshake for peer 107 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 19) [ 1866.142920][ T34] INFO: task syz.0.6761:32170 blocked for more than 143 seconds. [ 1866.142941][ T34] Tainted: G L Y syzkaller #0 [ 1866.142951][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1866.142959][ T34] task:syz.0.6761 state:D stack:27624 pid:32170 tgid:32169 ppid:31109 task_flags:0x400140 flags:0x00080002 [ 1866.143012][ T34] Call Trace: [ 1866.143018][ T34] [ 1866.143028][ T34] __schedule+0x1b47/0x5b40 [ 1866.143063][ T34] ? preempt_schedule_notrace+0x56/0x90 [ 1866.143085][ T34] ? __pfx___schedule+0x10/0x10 [ 1866.143108][ T34] ? schedule+0x90/0x2b0 [ 1866.143125][ T34] schedule+0x164/0x2b0 [ 1866.143142][ T34] schedule_preempt_disabled+0x13/0x30 [ 1866.143158][ T34] __mutex_lock+0x7c4/0x15a0 [ 1866.143177][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 1866.143195][ T34] ? write_threads+0x3b1/0x610 [ 1866.143213][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 1866.143227][ T34] ? simple_strntoull+0x114/0x190 [ 1866.143250][ T34] ? qword_get+0x5ad/0x650 [ 1866.143270][ T34] write_threads+0x3b1/0x610 [ 1866.143288][ T34] ? __pfx_write_threads+0x10/0x10 [ 1866.143316][ T34] ? _copy_from_user+0x94/0xb0 [ 1866.143333][ T34] ? simple_transaction_get+0x12d/0x160 [ 1866.143352][ T34] nfsctl_transaction_write+0x10f/0x160 [ 1866.143370][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1866.143387][ T34] vfs_write+0x296/0xba0 [ 1866.143409][ T34] ? __pfx_vfs_write+0x10/0x10 [ 1866.143426][ T34] ? __fget_files+0x2a/0x420 [ 1866.143441][ T34] ? __fget_files+0x3a2/0x420 [ 1866.143455][ T34] ? __fget_files+0x2a/0x420 [ 1866.143474][ T34] ? fdget+0x1ac/0x250 [ 1866.143493][ T34] ksys_write+0x150/0x270 [ 1866.143510][ T34] ? __pfx_ksys_write+0x10/0x10 [ 1866.143534][ T34] do_syscall_64+0x166/0x520 [ 1866.143549][ T34] ? trace_irq_disable+0x3b/0x140 [ 1866.143571][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.143588][ T34] ? clear_bhb_loop+0x70/0xc0 [ 1866.143605][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.143621][ T34] RIP: 0033:0x7f83da19e159 [ 1866.143636][ T34] RSP: 002b:00007f83db14c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1866.143652][ T34] RAX: ffffffffffffffda RBX: 00007f83da425fa0 RCX: 00007f83da19e159 [ 1866.143663][ T34] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006 [ 1866.143674][ T34] RBP: 00007f83da23506b R08: 0000000000000000 R09: 0000000000000000 [ 1866.143684][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1866.143694][ T34] R13: 00007f83da426038 R14: 00007f83da425fa0 R15: 00007ffcea9b9c88 [ 1866.143718][ T34] [ 1866.143757][ T34] [ 1866.143757][ T34] Showing all locks held in the system: [ 1866.143766][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 1866.143778][ T34] #0: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1866.143837][ T34] locks held by kworker/0:5/5719: 3, on CPU#0: [ 1866.143848][ T34] #0: ffff88813fe0ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1866.143887][ T34] #1: ffffc90004d5fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1866.143925][ T34] #2: ffff8880362bf258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1866.143966][ T34] locks held by kworker/u8:21/17755: 3, on CPU#0: [ 1866.143978][ T34] #0: ffff888031e9d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1866.144041][ T34] #1: ffffc900041a7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1866.144080][ T34] #2: ffffffff9067ae20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1866.144122][ T34] locks held by syz.7.6298/29504: 2, on CPU#0: [ 1866.144134][ T34] #0: ffffffff906df268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1866.144170][ T34] #1: ffffffff8f49de60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1866.144212][ T34] locks held by syz.0.6761/32170: 3, on CPU#0: [ 1866.144224][ T34] #0: ffff88803432f970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1866.144259][ T34] #1: ffff888025846460 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1866.144299][ T34] #2: ffffffff8f49de60 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1866.144340][ T34] locks held by syz-executor/1636: 1, on CPU#0: [ 1866.144351][ T34] #0: ffffffff9067ae20 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 1866.144389][ T34] locks held by syz-executor/1683: 8, last CPU#0: [ 1866.144400][ T34] #0: ffff888034512460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1866.144439][ T34] #1: ffff888031dae480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1866.144475][ T34] #2: ffff8880295474b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1866.144514][ T34] #3: ffffffff8fee8e60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1866.144550][ T34] #4: ffff88802c080128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1866.144594][ T34] #5: ffff888031f2a258 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1866.144636][ T34] #6: ffffffff9067ae20 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1866.144672][ T34] #7: ffff888083c90e70 (&dev->lock){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xe0d/0x1d80 [ 1866.144711][ T34] locks held by syz-executor/1804: 1, on CPU#0: [ 1866.144722][ T34] #0: ffffffff9067ae20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1866.144760][ T34] locks held by dhcpcd-run-hook/1832: 4, last CPU#0: [ 1866.144772][ T34] #0: ffffffff8f2362f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 1866.144808][ T34] #1: ffff88803222e540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1866.144844][ T34] #2: ffff88803222b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1866.144883][ T34] #3: ffffffff8f15a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1866.144921][ T34] [ 1866.144926][ T34] ============================================= [ 1866.144926][ T34] [ 1866.144939][ T34] NMI backtrace for cpu 0 [ 1866.144951][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1866.144974][ T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1866.144981][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1866.144991][ T34] Call Trace: [ 1866.144998][ T34] [ 1866.145004][ T34] dump_stack_lvl+0xe8/0x150 [ 1866.145021][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 1866.145038][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1866.145056][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1866.145074][ T34] sys_info+0x135/0x170 [ 1866.145089][ T34] watchdog+0x1058/0x10d0 [ 1866.145110][ T34] ? watchdog+0x209/0x10d0 [ 1866.145129][ T34] kthread+0x38b/0x480 [ 1866.145144][ T34] ? __pfx_watchdog+0x10/0x10 [ 1866.145157][ T34] ? __pfx_kthread+0x10/0x10 [ 1866.145173][ T34] ret_from_fork+0x514/0xb70 [ 1866.145191][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1866.145205][ T34] ? __switch_to+0xc78/0x1410 [ 1866.145222][ T34] ? __pfx_kthread+0x10/0x10 [ 1866.145238][ T34] ret_from_fork_asm+0x1a/0x30 [ 1866.145265][ T34] [ 1866.145281][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 1866.877493][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1866.888262][ T34] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1866.894078][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1866.904137][ T34] Call Trace: [ 1866.907427][ T34] [ 1866.910372][ T34] vpanic+0x26f/0x710 [ 1866.914364][ T34] panic+0xc5/0xd0 [ 1866.918100][ T34] ? __pfx_panic+0x10/0x10 [ 1866.922525][ T34] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1866.927731][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1866.933893][ T34] watchdog+0x10cc/0x10d0 [ 1866.938250][ T34] ? watchdog+0x209/0x10d0 [ 1866.942673][ T34] kthread+0x38b/0x480 [ 1866.946744][ T34] ? __pfx_watchdog+0x10/0x10 [ 1866.951421][ T34] ? __pfx_kthread+0x10/0x10 [ 1866.956018][ T34] ret_from_fork+0x514/0xb70 [ 1866.960629][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1866.965764][ T34] ? __switch_to+0xc78/0x1410 [ 1866.970465][ T34] ? __pfx_kthread+0x10/0x10 [ 1866.975061][ T34] ret_from_fork_asm+0x1a/0x30 [ 1866.979835][ T34] [ 1866.982925][ T34] Kernel Offset: disabled [ 1866.987277][ T34] Rebooting in 86400 seconds..