last executing test programs: 38.9355883s ago: executing program 4 (id=255): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x5, 0xffffffff924a4422, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x10, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.515807317s ago: executing program 4 (id=260): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xdc, {0x3ff}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000897000/0x1000)=nil, &(0x7f0000aee000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r4 = io_uring_setup(0x516, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r5, 0x0, 0x0) close_range(r4, r5, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x2000a, 0xd0da, 0x0, r4}) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r6, 0x2b, 0x1, 0xfffffff8, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)}, 0x40) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8905, &(0x7f0000000040)={'syzkaller0\x00'}) 36.345963431s ago: executing program 0 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 35.80496634s ago: executing program 3 (id=268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 35.695163661s ago: executing program 0 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2000000002, 0xffffffffffffffff], 0x0, 0x10280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.585781485s ago: executing program 1 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c000980080001400001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 35.545925616s ago: executing program 3 (id=272): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x2400c855) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @mcast1, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') 35.420632022s ago: executing program 4 (id=273): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1, r0}, 0xc) 33.976782107s ago: executing program 4 (id=274): openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000ec0)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) 33.848711329s ago: executing program 2 (id=275): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 33.828611384s ago: executing program 0 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 33.808656697s ago: executing program 1 (id=277): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 33.807384763s ago: executing program 3 (id=278): io_setup(0x7, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 33.397722015s ago: executing program 0 (id=279): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 33.383180567s ago: executing program 4 (id=280): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.209313725s ago: executing program 2 (id=281): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 33.192835772s ago: executing program 1 (id=282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 32.902388951s ago: executing program 3 (id=283): openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000600)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 32.733841508s ago: executing program 2 (id=284): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000440)={0x1}) 32.733603151s ago: executing program 1 (id=285): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x5, 0xffffffff924a4422, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x10, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.487424923s ago: executing program 3 (id=286): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r8, &(0x7f00000002c0)={0x130, 0x0, r9, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r10, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 32.393580067s ago: executing program 2 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 30.9182338s ago: executing program 1 (id=288): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 30.403335259s ago: executing program 3 (id=289): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x9, 0xfffffff7, 0x34325842, 0x7, 0xd, [{0x8, 0x8000}, {0x3, 0x3ff}, {0x20000000, 0xfffffff7}, {0x729096d5, 0xff8}, {0x5, 0x2}, {0x4, 0x6}, {0xffff, 0x1000}, {0xe9a00, 0x4}], 0x1b, 0x4, 0x2, 0x2, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x5, 0x4}}}}}}}}]}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x103081, 0x0) sendmsg$key(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000840)={0x2, 0x15, 0x2, 0x8, 0x212, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_key={0x201, 0x5330fc8a585dbcd1, 0x7ff8, 0x0, "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"}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in6=@empty, 0x1d, 0x14, 0x10}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, @sadb_key={0x3, 0x8, 0x78, 0x0, "6930a3aad3dabe1348557026037729"}]}, 0x1090}}, 0x40) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r7, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x20000014) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 30.384814001s ago: executing program 0 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000600)=0xfffffffb, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_create(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x10, 0x0, &(0x7f0000000140)="7da63c2dc985e8a8a7f50d63519ebe19", 0x0, 0x6d2af30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0x1, 0xb7, 0x10300}}) 30.134334881s ago: executing program 2 (id=291): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 30.11753005s ago: executing program 4 (id=292): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 29.000990894s ago: executing program 0 (id=293): io_setup(0x7, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 17.833724525s ago: executing program 2 (id=294): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 17.833371697s ago: executing program 1 (id=295): socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7400fedbdf250700e1000800010058"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x40000080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) 15.08127492s ago: executing program 32 (id=289): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x9, 0xfffffff7, 0x34325842, 0x7, 0xd, [{0x8, 0x8000}, {0x3, 0x3ff}, {0x20000000, 0xfffffff7}, {0x729096d5, 0xff8}, {0x5, 0x2}, {0x4, 0x6}, {0xffff, 0x1000}, {0xe9a00, 0x4}], 0x1b, 0x4, 0x2, 0x2, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x5, 0x4}}}}}}}}]}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x103081, 0x0) sendmsg$key(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000840)={0x2, 0x15, 0x2, 0x8, 0x212, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_key={0x201, 0x5330fc8a585dbcd1, 0x7ff8, 0x0, "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"}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in6=@empty, 0x1d, 0x14, 0x10}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, @sadb_key={0x3, 0x8, 0x78, 0x0, "6930a3aad3dabe1348557026037729"}]}, 0x1090}}, 0x40) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r7, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x20000014) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 14.460144353s ago: executing program 33 (id=292): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9.717609787s ago: executing program 34 (id=293): io_setup(0x7, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 94.453586ms ago: executing program 35 (id=295): socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7400fedbdf250700e1000800010058"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x40000080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) 0s ago: executing program 36 (id=294): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 84.132799][ T5593] cgroup: Unknown subsys name 'net' [ 84.384202][ T5593] cgroup: Unknown subsys name 'cpuset' [ 84.428856][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.360114][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.118971][ T821] cfg80211: failed to load regulatory.db [ 88.992299][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.004812][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.037317][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.039252][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.040201][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.051895][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.076132][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.090461][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.090990][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.091652][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.092789][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.097565][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.097849][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.100492][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.101644][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.102202][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.104356][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.105282][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.105706][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.106183][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.110070][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.111281][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.113819][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.115871][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.117320][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.259656][ T5611] Bluetooth: hci3: command tx timeout [ 91.259775][ T5611] Bluetooth: hci2: command tx timeout [ 91.338396][ T5611] Bluetooth: hci1: command tx timeout [ 91.338555][ T5611] Bluetooth: hci4: command tx timeout [ 91.338746][ T5623] Bluetooth: hci0: command tx timeout [ 91.751861][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.753009][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.753348][ T5605] bridge_slave_0: entered allmulticast mode [ 91.755132][ T5605] bridge_slave_0: entered promiscuous mode [ 91.816034][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.816218][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.816399][ T5605] bridge_slave_1: entered allmulticast mode [ 91.818448][ T5605] bridge_slave_1: entered promiscuous mode [ 91.914181][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.914392][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.914562][ T5607] bridge_slave_0: entered allmulticast mode [ 91.916576][ T5607] bridge_slave_0: entered promiscuous mode [ 91.971279][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.971420][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.971611][ T5606] bridge_slave_0: entered allmulticast mode [ 91.973853][ T5606] bridge_slave_0: entered promiscuous mode [ 91.977328][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.977483][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.978052][ T5607] bridge_slave_1: entered allmulticast mode [ 91.984181][ T5607] bridge_slave_1: entered promiscuous mode [ 92.013700][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.019595][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.019726][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.019945][ T5613] bridge_slave_0: entered allmulticast mode [ 92.022765][ T5613] bridge_slave_0: entered promiscuous mode [ 92.025880][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.026004][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.026599][ T5606] bridge_slave_1: entered allmulticast mode [ 92.034014][ T5606] bridge_slave_1: entered promiscuous mode [ 92.058064][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.058187][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.058536][ T5610] bridge_slave_0: entered allmulticast mode [ 92.062236][ T5610] bridge_slave_0: entered promiscuous mode [ 92.071490][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.090243][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.090381][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.090588][ T5613] bridge_slave_1: entered allmulticast mode [ 92.093248][ T5613] bridge_slave_1: entered promiscuous mode [ 92.173022][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.173170][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.173339][ T5610] bridge_slave_1: entered allmulticast mode [ 92.175190][ T5610] bridge_slave_1: entered promiscuous mode [ 92.232141][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.279664][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.283277][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.308164][ T5605] team0: Port device team_slave_0 added [ 92.314603][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.317254][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.342874][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.345069][ T5605] team0: Port device team_slave_1 added [ 92.347204][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.403837][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.446107][ T5607] team0: Port device team_slave_0 added [ 92.491409][ T5606] team0: Port device team_slave_0 added [ 92.493587][ T5607] team0: Port device team_slave_1 added [ 92.512599][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.512617][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.512645][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.516408][ T5613] team0: Port device team_slave_0 added [ 92.519890][ T5606] team0: Port device team_slave_1 added [ 92.546821][ T5610] team0: Port device team_slave_0 added [ 92.549233][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.549247][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.549270][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.554421][ T5613] team0: Port device team_slave_1 added [ 92.606007][ T5610] team0: Port device team_slave_1 added [ 92.671739][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.671758][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.671783][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.717664][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.717681][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.717705][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.724797][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.724813][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.724837][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.750477][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.750493][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.750516][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.753534][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.753548][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.753571][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.790498][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.790517][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.790541][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.813625][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.813642][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.813665][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.841343][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.841368][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.841391][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.889874][ T5605] hsr_slave_0: entered promiscuous mode [ 92.892026][ T5605] hsr_slave_1: entered promiscuous mode [ 93.037705][ T5607] hsr_slave_0: entered promiscuous mode [ 93.039670][ T5607] hsr_slave_1: entered promiscuous mode [ 93.043118][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 93.043216][ T5607] Cannot create hsr debugfs directory [ 93.072362][ T5606] hsr_slave_0: entered promiscuous mode [ 93.073220][ T5606] hsr_slave_1: entered promiscuous mode [ 93.073781][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 93.073800][ T5606] Cannot create hsr debugfs directory [ 93.142777][ T5613] hsr_slave_0: entered promiscuous mode [ 93.143635][ T5613] hsr_slave_1: entered promiscuous mode [ 93.144248][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 93.144265][ T5613] Cannot create hsr debugfs directory [ 93.154184][ T5610] hsr_slave_0: entered promiscuous mode [ 93.156089][ T5610] hsr_slave_1: entered promiscuous mode [ 93.157104][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 93.157127][ T5610] Cannot create hsr debugfs directory [ 93.338657][ T5621] Bluetooth: hci2: command tx timeout [ 93.338684][ T5623] Bluetooth: hci3: command tx timeout [ 93.418445][ T5623] Bluetooth: hci0: command tx timeout [ 93.418482][ T5623] Bluetooth: hci4: command tx timeout [ 93.418502][ T5621] Bluetooth: hci1: command tx timeout [ 94.452541][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.499275][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.506467][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.533566][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.537843][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.583683][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.608939][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.645838][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.777886][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.837525][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.855666][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.894196][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.916453][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.943053][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.956503][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.981444][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.126519][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.162828][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.167386][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.212964][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.237009][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.272683][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.286325][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.312261][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.424713][ T5623] Bluetooth: hci3: command tx timeout [ 95.424761][ T5623] Bluetooth: hci2: command tx timeout [ 95.454616][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.475024][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.491978][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.498715][ T5623] Bluetooth: hci4: command tx timeout [ 95.498750][ T5623] Bluetooth: hci1: command tx timeout [ 95.498766][ T5611] Bluetooth: hci0: command tx timeout [ 95.552368][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.569062][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.596610][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.615606][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.656163][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.804877][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.805193][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.851879][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.868312][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.891309][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.898009][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.942279][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.946649][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.981718][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.054365][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.077365][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.106516][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.107456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.177469][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.177691][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.241940][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.303300][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.303443][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.314198][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.356107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.356208][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.449054][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.474034][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.509838][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.509958][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.588692][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.589225][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.690669][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.752644][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.757760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.757996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.889934][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.891954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.020198][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.070269][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.070397][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.175040][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.175284][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.499862][ T5623] Bluetooth: hci3: command tx timeout [ 97.501476][ T5623] Bluetooth: hci2: command tx timeout [ 97.579051][ T5621] Bluetooth: hci4: command tx timeout [ 97.579070][ T5611] Bluetooth: hci1: command tx timeout [ 97.579122][ T5623] Bluetooth: hci0: command tx timeout [ 97.973083][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.607494][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.872739][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.092700][ T5607] veth0_vlan: entered promiscuous mode [ 99.197666][ T5607] veth1_vlan: entered promiscuous mode [ 99.226595][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.244468][ T5606] veth0_vlan: entered promiscuous mode [ 99.262478][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.304984][ T5605] veth0_vlan: entered promiscuous mode [ 99.307342][ T5606] veth1_vlan: entered promiscuous mode [ 99.360674][ T5605] veth1_vlan: entered promiscuous mode [ 99.405565][ T5607] veth0_macvtap: entered promiscuous mode [ 99.442374][ T5607] veth1_macvtap: entered promiscuous mode [ 99.487158][ T5613] veth0_vlan: entered promiscuous mode [ 99.493997][ T5606] veth0_macvtap: entered promiscuous mode [ 99.530582][ T5610] veth0_vlan: entered promiscuous mode [ 99.534754][ T5606] veth1_macvtap: entered promiscuous mode [ 99.554124][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.573731][ T5613] veth1_vlan: entered promiscuous mode [ 99.578129][ T5605] veth0_macvtap: entered promiscuous mode [ 99.592446][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.611067][ T5610] veth1_vlan: entered promiscuous mode [ 99.625437][ T5605] veth1_macvtap: entered promiscuous mode [ 99.650712][ T158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.657132][ T158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.672618][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.692204][ T158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697555][ T158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.712825][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.801850][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.869230][ T1038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.880411][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.890488][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.891223][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.004309][ T4343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.054346][ T5613] veth0_macvtap: entered promiscuous mode [ 100.081817][ T4343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.087483][ T4343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.128527][ T4343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.130556][ T5613] veth1_macvtap: entered promiscuous mode [ 100.135254][ T5610] veth0_macvtap: entered promiscuous mode [ 100.137275][ T4343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.245217][ T5610] veth1_macvtap: entered promiscuous mode [ 100.533709][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.533731][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.597499][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.734855][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.737097][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.795606][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.796656][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.809427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.809447][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.839749][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.861027][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.866548][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.923235][ T1237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.927035][ T1237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.947361][ T1237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.953463][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.953483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.007352][ T1237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.256134][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.256156][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.652132][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.652153][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.026498][ T5799] 9pnet_virtio: no channels available for device syz [ 102.033645][ T5799] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 102.154965][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.154986][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.187166][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.187188][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.337044][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.337066][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.809025][ T5803] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 102.811744][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.811766][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.269032][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.269056][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.560315][ T5821] Bluetooth: MGMT ver 1.23 [ 106.528080][ T5828] sctp: [Deprecated]: syz.4.7 (pid 5828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.528080][ T5828] Use struct sctp_sack_info instead [ 124.218236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.979987][ T5898] 9pnet_virtio: no channels available for device syz [ 127.109166][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 127.134178][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 127.668237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.968238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.098239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.158241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.228241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.418242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.488283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.558239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.688300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.116963][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.419026][ T5741] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.525181][ T5928] input: syz1 as /devices/virtual/input/input5 [ 129.608335][ T5741] usb 4-1: Using ep0 maxpacket: 8 [ 129.659557][ T5741] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 129.679158][ T5741] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.679190][ T5741] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.679214][ T5741] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.679237][ T5741] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.679281][ T5741] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.679305][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.123566][ T5741] usb 4-1: GET_CAPABILITIES returned 0 [ 131.123600][ T5741] usbtmc 4-1:16.0: can't read capabilities [ 131.441653][ T5614] usb 4-1: USB disconnect, device number 2 [ 131.578389][ T5810] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.818609][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 132.866072][ T5810] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 132.866105][ T5810] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 132.866149][ T5810] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 132.866169][ T5810] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 132.866191][ T5810] usb 5-1: config 250 has no interface number 0 [ 132.866262][ T5810] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 132.866289][ T5810] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.866314][ T5810] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 132.866342][ T5810] usb 5-1: config 250 interface 228 has no altsetting 0 [ 132.967625][ T5810] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 132.967658][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.967679][ T5810] usb 5-1: Product: syz [ 132.967711][ T5810] usb 5-1: SerialNumber: syz [ 133.104014][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104117][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.751827][ T5810] hub 5-1:250.228: bad descriptor, ignoring hub [ 133.751854][ T5810] hub 5-1:250.228: probe with driver hub failed with error -5 [ 134.099512][ T9] usb 5-1: USB disconnect, device number 2 [ 134.299851][ T5970] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 134.448467][ T5741] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 134.604462][ T5741] usb 5-1: config 4 has an invalid interface number: 56 but max is 0 [ 134.604493][ T5741] usb 5-1: config 4 has no interface number 0 [ 134.604526][ T5741] usb 5-1: config 4 interface 56 has no altsetting 0 [ 134.634283][ T5741] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=25.aa [ 134.634315][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.634336][ T5741] usb 5-1: Product: syz [ 134.634350][ T5741] usb 5-1: Manufacturer: syz [ 134.634363][ T5741] usb 5-1: SerialNumber: syz [ 138.231224][ T5741] usb-storage 5-1:4.56: USB Mass Storage device detected [ 138.401872][ T5741] usb-storage 5-1:4.56: Quirks match for vid 152d pid 0539: 4000000 [ 138.707801][ T5741] usb 5-1: USB disconnect, device number 3 [ 139.333233][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50'. [ 139.334532][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50'. [ 140.138462][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.291313][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 140.291343][ T9] usb 5-1: config 1 has no interface number 0 [ 140.291392][ T9] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 140.291418][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.291445][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.328378][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 140.328412][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.328433][ T9] usb 5-1: Product: syz [ 140.328446][ T9] usb 5-1: Manufacturer: syz [ 140.328460][ T9] usb 5-1: SerialNumber: syz [ 140.389760][ T6020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.825177][ T9] usb 5-1: Error in usbnet_get_endpoints (-71) [ 140.956039][ T9] usb 5-1: USB disconnect, device number 4 [ 141.140002][ T6034] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 141.264072][ T6034] VFS: Can't find a romfs filesystem on dev nullb0. [ 141.264072][ T6034] [ 142.871172][ T5741] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.871467][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 142.999686][ T5741] usb 5-1: device descriptor read/64, error -32 [ 145.465953][ T5741] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.638305][ T5741] usb 5-1: Using ep0 maxpacket: 8 [ 145.737407][ T5741] usb 5-1: device descriptor read/all, error -71 [ 145.757627][ T5741] usb usb5-port1: attempt power cycle [ 148.962372][ T6103] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 149.097219][ T6103] VFS: Can't find a romfs filesystem on dev nullb0. [ 149.097219][ T6103] [ 149.717152][ T6114] process 'syz.1.80' launched './file1' with NULL argv: empty string added [ 149.868821][ T6119] ======================================================= [ 149.868821][ T6119] WARNING: The mand mount option has been deprecated and [ 149.868821][ T6119] and is ignored by this kernel. Remove the mand [ 149.868821][ T6119] option from the mount to silence this warning. [ 149.868821][ T6119] ======================================================= [ 150.281978][ T6110] syz.4.78 (6110) used greatest stack depth: 16552 bytes left [ 150.453692][ T6122] fuse: Bad value for 'fd' [ 150.788324][ T5741] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.960643][ T5741] usb 2-1: config 0 has no interfaces? [ 150.960687][ T5741] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 150.960711][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.021372][ T5741] usb 2-1: config 0 descriptor?? [ 151.414692][ T5893] usb 2-1: USB disconnect, device number 2 [ 152.874296][ T6138] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 152.922282][ T6147] capability: warning: `syz.0.86' uses deprecated v2 capabilities in a way that may be insecure [ 153.135661][ T6151] mmap: syz.4.90 (6151) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.778441][ T36] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 154.808993][ T36] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 154.809012][ T36] usb 4-1: config 0 has no interface number 0 [ 154.809037][ T36] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 154.809051][ T36] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.809065][ T36] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.811024][ T36] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 154.811042][ T36] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 154.811053][ T36] usb 4-1: Product: syz [ 154.811062][ T36] usb 4-1: SerialNumber: syz [ 155.069277][ T36] usb 4-1: config 0 descriptor?? [ 155.251051][ T36] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 155.264586][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 155.942297][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.944647][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.946627][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.946882][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.947148][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.947402][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.947646][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.947930][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.948244][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 155.948486][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.649313][ T36] usb 4-1: USB disconnect, device number 3 [ 156.649402][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 156.878549][ T37] audit: type=1804 audit(1779941674.249:2): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.93" name="/newroot/15/file0" dev="tmpfs" ino=94 res=1 errno=0 [ 157.051769][ T36] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 158.268811][ T6181] fuse: Bad value for 'fd' [ 158.613221][ T5623] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 158.687338][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.005405][ T5810] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.167647][ T5810] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.167680][ T5810] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.167700][ T5810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.167755][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.167782][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.231871][ T5810] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.231905][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.231926][ T5810] usb 4-1: Product: syz [ 161.231941][ T5810] usb 4-1: Manufacturer: syz [ 162.385117][ T5810] cdc_wdm 4-1:1.0: skipping garbage [ 162.385140][ T5810] cdc_wdm 4-1:1.0: skipping garbage [ 163.684432][ T5810] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 163.684456][ T5810] cdc_wdm 4-1:1.0: Unknown control protocol [ 163.706572][ T5810] usb 4-1: USB disconnect, device number 4 [ 165.399859][ T6218] input: syz1 as /devices/virtual/input/input9 [ 165.557260][ T6223] fuse: Bad value for 'fd' [ 165.868440][ T5810] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 166.021288][ T5810] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 166.021322][ T5810] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 166.021343][ T5810] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 166.021381][ T5810] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 166.021543][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 166.021567][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 166.021588][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 166.026467][ T5810] usb 4-1: string descriptor 0 read error: -22 [ 166.026614][ T5810] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 166.026632][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.175216][ T5810] usb 4-1: config 0 descriptor?? [ 166.184668][ T5810] hub 4-1:0.0: bad descriptor, ignoring hub [ 166.184710][ T5810] hub 4-1:0.0: probe with driver hub failed with error -5 [ 166.217575][ T5810] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 166.561089][ T5892] usb 4-1: USB disconnect, device number 5 [ 166.805668][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 167.482193][ T6242] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.236976][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 169.323199][ T6269] input: syz1 as /devices/virtual/input/input13 [ 170.927007][ T5623] Bluetooth: hci4: link tx timeout [ 170.936343][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.116040][ T5611] Bluetooth: hci4: link tx timeout [ 171.116063][ T5611] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.497622][ T6290] binder: 6286:6290 ioctl c0306201 0 returned -14 [ 173.028777][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 174.248873][ T6299] input: syz1 as /devices/virtual/input/input14 [ 175.493300][ T6317] input: syz1 as /devices/virtual/input/input15 [ 176.047446][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 177.742271][ T37] audit: type=1326 audit(1779941695.239:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6350 comm="syz.2.157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c133cce59 code=0x0 [ 180.238497][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.318793][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.318831][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.318854][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.318897][ T36] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.318919][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.325601][ T36] usb 4-1: config 0 descriptor?? [ 183.992756][ T6411] Can't find a SQUASHFS superblock on nullb0 [ 184.971637][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971716][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971744][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971769][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971794][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971820][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971844][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971869][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971894][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 184.971925][ T36] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 185.161165][ T36] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.252031][ T36] usb 4-1: USB disconnect, device number 6 [ 185.729763][ T6414] fido_id[6414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 189.878520][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 192.741119][ T36] IPVS: starting estimator thread 0... [ 192.888407][ T6482] IPVS: using max 8 ests per chain, 19200 per kthread [ 193.968427][ T5830] IPVS: starting estimator thread 0... [ 194.058596][ T6503] IPVS: using max 7 ests per chain, 16800 per kthread [ 194.545740][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.545822][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.222548][ T5614] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 196.386368][ T5614] usb 4-1: not running at top speed; connect to a high speed hub [ 196.387294][ T5614] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.387313][ T5614] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.389876][ T5614] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 196.389903][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.389921][ T5614] usb 4-1: Manufacturer: ј [ 196.389934][ T5614] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 196.708097][ T6510] netlink: 260 bytes leftover after parsing attributes in process `syz.3.206'. [ 196.779991][ T6510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.206'. [ 196.780008][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 197.105873][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 197.534285][ T6530] ip6erspan0: entered promiscuous mode [ 197.553681][ T6528] warning: `syz.3.206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.976949][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.982285][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.485466][ T5614] usbhid 4-1:1.0: can't add hid device: -71 [ 199.485548][ T5614] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 199.497287][ T5614] usb 4-1: USB disconnect, device number 7 [ 203.630769][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 206.273342][ T6603] input: syz1 as /devices/virtual/input/input18 [ 207.628766][ T37] audit: type=1326 audit(1779941725.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.630311][ T37] audit: type=1326 audit(1779941725.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.706894][ T37] audit: type=1326 audit(1779941725.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.706948][ T37] audit: type=1326 audit(1779941725.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.709997][ T37] audit: type=1326 audit(1779941725.209:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.710052][ T37] audit: type=1326 audit(1779941725.209:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.710092][ T37] audit: type=1326 audit(1779941725.209:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.710129][ T37] audit: type=1326 audit(1779941725.209:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.710167][ T37] audit: type=1326 audit(1779941725.209:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.710444][ T37] audit: type=1326 audit(1779941725.209:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.4.243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee5ace59 code=0x7ffc0000 [ 207.846907][ T6622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 207.846926][ T6622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.850094][ T6622] vhci_hcd vhci_hcd.0: Device attached [ 208.058566][ T5830] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 208.129965][ T5830] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 208.134010][ T6623] vhci_hcd: connection closed [ 208.222224][ T6624] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 208.222477][ T2953] vhci_hcd vhci_hcd.2: stop threads [ 208.223334][ T2953] vhci_hcd vhci_hcd.2: release socket [ 208.274011][ T2953] vhci_hcd vhci_hcd.2: disconnect device [ 209.485152][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 209.698429][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 209.973305][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.973343][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.973368][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.973380][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.095479][ T6633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.179799][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.326468][ T6640] input: syz1 as /devices/virtual/input/input19 [ 212.013610][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 212.030463][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 212.030581][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 212.076598][ T4920] Bluetooth: hci0: command 0x0406 tx timeout [ 213.083952][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 213.083972][ T37] audit: type=1326 audit(1779941730.579:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6649 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a047ce59 code=0x0 [ 213.425392][ T5830] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 213.770418][ T5893] usb 2-1: USB disconnect, device number 3 [ 215.408030][ T6683] fuse: Bad value for 'fd' [ 215.573235][ T6686] input: syz1 as /devices/virtual/input/input20 [ 218.286796][ T6710] input: syz1 as /devices/virtual/input/input21 [ 218.405382][ T6717] fuse: Bad value for 'fd' [ 220.185484][ T6741] CUSE: unknown device info "" [ 220.185547][ T6741] CUSE: unknown device info "" [ 220.185557][ T6741] CUSE: unknown device info "" [ 220.185645][ T6741] CUSE: unknown device info "" [ 220.185707][ T6741] CUSE: unknown device info "" [ 220.185716][ T6741] CUSE: unknown device info "" [ 220.185775][ T6741] CUSE: unknown device info "" [ 220.185785][ T6741] CUSE: unknown device info "" [ 220.185843][ T6741] CUSE: unknown device info "" [ 220.185910][ T6741] CUSE: unknown device info "" [ 220.185920][ T6741] CUSE: unknown device info "" [ 220.185978][ T6741] CUSE: unknown device info "r" [ 220.185987][ T6741] CUSE: unknown device info "#" [ 220.186075][ T6741] CUSE: unknown device info "" [ 220.186134][ T6741] CUSE: unknown device info "" [ 220.186143][ T6741] CUSE: unknown device info "" [ 220.186203][ T6741] CUSE: DEVNAME unspecified [ 220.225210][ T5618] IPVS: starting estimator thread 0... [ 220.348960][ T6743] IPVS: using max 7 ests per chain, 16800 per kthread [ 222.208290][ T36] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.422346][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.424778][ T36] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 227.424803][ T36] usb 4-1: chopping to 0 config(s) [ 227.424830][ T36] usb 4-1: can't read configurations, error -32 [ 227.588295][ T36] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.718310][ T36] usb 4-1: device descriptor read/64, error -32 [ 227.839695][ T36] usb usb4-port1: attempt power cycle [ 228.178417][ T36] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.198707][ T36] usb 4-1: device descriptor read/8, error -32 [ 228.440105][ T36] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 228.458626][ T36] usb 4-1: device descriptor read/8, error -32 [ 228.569866][ T36] usb usb4-port1: unable to enumerate USB device [ 235.725737][ T6759] input: syz1 as /devices/virtual/input/input22 [ 237.125976][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.170656][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.172123][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.174599][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.175441][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.284842][ T5616] Bluetooth: hci5: command tx timeout [ 241.341562][ T5616] Bluetooth: hci5: command tx timeout [ 242.246135][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.292331][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.294063][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.301295][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.324039][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.085205][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.160835][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.163672][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.185196][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.210891][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.428622][ T5616] Bluetooth: hci5: command tx timeout [ 244.396459][ T5616] Bluetooth: hci6: command tx timeout [ 245.259932][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.260633][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.292926][ T6762] bridge_slave_0: entered allmulticast mode [ 245.306549][ T6762] bridge_slave_0: entered promiscuous mode [ 245.399219][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.404490][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.404801][ T6762] bridge_slave_1: entered allmulticast mode [ 245.424887][ T5616] Bluetooth: hci7: command tx timeout [ 245.446201][ T6762] bridge_slave_1: entered promiscuous mode [ 245.508578][ T5616] Bluetooth: hci5: command tx timeout [ 245.699174][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.821814][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.967289][ T6762] team0: Port device team_slave_0 added [ 246.458302][ T5616] Bluetooth: hci6: command tx timeout [ 247.498503][ T5616] Bluetooth: hci7: command tx timeout [ 248.538348][ T5616] Bluetooth: hci6: command tx timeout [ 249.578237][ T5616] Bluetooth: hci7: command tx timeout [ 250.618250][ T5616] Bluetooth: hci6: command tx timeout [ 251.660500][ T5616] Bluetooth: hci7: command tx timeout [ 252.532053][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 252.597508][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 252.617773][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 252.626462][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 252.632022][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.920758][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 252.965388][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 252.986989][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 252.995413][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 252.997969][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 254.778293][ T5624] Bluetooth: hci9: command tx timeout [ 255.098389][ T5624] Bluetooth: hci8: command tx timeout [ 255.986254][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986335][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.858242][ T5624] Bluetooth: hci9: command tx timeout [ 257.178326][ T5624] Bluetooth: hci8: command tx timeout [ 258.938327][ T5624] Bluetooth: hci9: command tx timeout [ 259.258301][ T5624] Bluetooth: hci8: command tx timeout [ 261.018881][ T5624] Bluetooth: hci9: command tx timeout [ 261.338398][ T5624] Bluetooth: hci8: command tx timeout [ 280.314988][ T6762] team0: Port device team_slave_1 added [ 287.217426][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.217444][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.217472][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.414373][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.414391][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.414419][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.730496][ T6762] hsr_slave_0: entered promiscuous mode [ 288.750318][ T6762] hsr_slave_1: entered promiscuous mode [ 288.754696][ T6762] debugfs: 'hsr0' already exists in 'hsr' [ 288.754726][ T6762] Cannot create hsr debugfs directory [ 293.902331][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 296.077758][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.077902][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.094784][ T6781] bridge_slave_0: entered allmulticast mode [ 296.109953][ T6781] bridge_slave_0: entered promiscuous mode [ 296.189832][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.189975][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.190219][ T6781] bridge_slave_1: entered allmulticast mode [ 296.222281][ T6781] bridge_slave_1: entered promiscuous mode [ 296.564929][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.707449][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.891837][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.892069][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.892739][ T6773] bridge_slave_0: entered allmulticast mode [ 296.896283][ T6773] bridge_slave_0: entered promiscuous mode [ 297.550658][ T5621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 297.594957][ T5621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 297.597333][ T5621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 297.624419][ T5621] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 297.625426][ T5621] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 298.047847][ T5611] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 298.088739][ T5611] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 298.090266][ T5611] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 298.092813][ T5611] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 298.095000][ T5611] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 303.137438][ T4920] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 303.187836][ T4920] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 303.200989][ T4920] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 303.202820][ T4920] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 303.203716][ T4920] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 312.122415][ T5623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 312.168884][ T5623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 312.172938][ T5623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 312.201239][ T5623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 312.202142][ T5623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 312.630365][ T5608] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 312.686254][ T5608] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 312.697083][ T5608] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 312.717421][ T5608] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 312.726037][ T5608] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 313.455872][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.456018][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.456294][ T6773] bridge_slave_1: entered allmulticast mode [ 313.487903][ T6773] bridge_slave_1: entered promiscuous mode [ 313.530460][ T6781] team0: Port device team_slave_0 added [ 317.421561][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.421639][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.678165][ T5608] Bluetooth: hci14: command tx timeout [ 325.658467][ T5611] Bluetooth: hci12: command tx timeout [ 325.658922][ T5611] Bluetooth: hci11: command tx timeout [ 325.659159][ T5611] Bluetooth: hci10: command tx timeout [ 325.704349][ T5608] Bluetooth: hci13: command tx timeout [ 325.748535][ T5623] Bluetooth: hci14: command tx timeout [ 327.738367][ T5623] Bluetooth: hci11: command tx timeout [ 327.738403][ T5623] Bluetooth: hci12: command tx timeout [ 327.738426][ T5623] Bluetooth: hci13: command tx timeout [ 327.738448][ T5623] Bluetooth: hci10: command tx timeout [ 327.818436][ T5611] Bluetooth: hci14: command tx timeout [ 329.818536][ T5611] Bluetooth: hci10: command tx timeout [ 329.818571][ T5611] Bluetooth: hci13: command tx timeout [ 329.818594][ T5611] Bluetooth: hci12: command tx timeout [ 329.818615][ T5611] Bluetooth: hci11: command tx timeout [ 329.898655][ T5611] Bluetooth: hci14: command tx timeout [ 331.898517][ T5608] Bluetooth: hci12: command tx timeout [ 331.898553][ T5608] Bluetooth: hci10: command tx timeout [ 331.898615][ T5623] Bluetooth: hci11: command tx timeout [ 331.898653][ T5611] Bluetooth: hci13: command tx timeout [ 357.631589][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.717621][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.726599][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.739384][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.740331][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.172637][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.226318][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.255892][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.274817][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.275814][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.474010][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 363.625500][ T5608] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 363.663780][ T5608] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 363.688002][ T5608] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 363.705974][ T5608] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 363.706863][ T5608] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 372.653364][ T4920] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.696939][ T4920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.710111][ T4920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.732235][ T4920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.735408][ T4920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.142978][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.185741][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.203039][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.204482][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.205423][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 378.874462][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.874544][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.273767][ T5616] Bluetooth: hci1: command tx timeout [ 384.299093][ T5623] Bluetooth: hci2: command tx timeout [ 386.298439][ T5623] Bluetooth: hci1: command tx timeout [ 386.378514][ T5623] Bluetooth: hci2: command tx timeout [ 388.378371][ T5623] Bluetooth: hci1: command tx timeout [ 388.458623][ T5623] Bluetooth: hci2: command tx timeout [ 390.458318][ T5623] Bluetooth: hci1: command tx timeout [ 390.538633][ T5623] Bluetooth: hci2: command tx timeout [ 391.659131][ T38] INFO: task kworker/u8:5:150 blocked for more than 143 seconds. [ 391.659163][ T38] Tainted: G L syzkaller #0 [ 391.659174][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.659184][ T38] task:kworker/u8:5 state:D stack:20184 pid:150 tgid:150 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 391.659247][ T38] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 391.659285][ T38] Call Trace: [ 391.659293][ T38] [ 391.659308][ T38] __schedule+0x16ec/0x5620 [ 391.659371][ T38] ? unwind_next_frame+0xa6/0x2550 [ 391.659405][ T38] ? look_up_lock_class+0x57/0x110 [ 391.659440][ T38] ? __pfx___schedule+0x10/0x10 [ 391.659480][ T38] ? schedule+0x90/0x360 [ 391.659512][ T38] schedule+0x164/0x360 [ 391.659544][ T38] schedule_timeout+0xc3/0x2c0 [ 391.659575][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 391.659605][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.659641][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.659670][ T38] ? wait_for_completion+0x274/0x5e0 [ 391.659702][ T38] wait_for_completion+0x2cc/0x5e0 [ 391.659746][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 391.659791][ T38] __synchronize_srcu+0x249/0x300 [ 391.659823][ T38] ? __pfx___synchronize_srcu+0x10/0x10 [ 391.659849][ T38] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 391.659881][ T38] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 391.659911][ T38] ? synchronize_srcu+0x20d/0x270 [ 391.659942][ T38] fsnotify_connector_destroy_workfn+0x44/0xb0 [ 391.659971][ T38] ? process_scheduled_works+0xa70/0x1860 [ 391.659995][ T38] process_scheduled_works+0xb5d/0x1860 [ 391.660053][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.660084][ T38] ? assign_work+0x3d5/0x5e0 [ 391.660113][ T38] worker_thread+0xa53/0xfc0 [ 391.660167][ T38] kthread+0x388/0x470 [ 391.660213][ T38] ? __pfx_worker_thread+0x10/0x10 [ 391.660235][ T38] ? __pfx_kthread+0x10/0x10 [ 391.660265][ T38] ret_from_fork+0x514/0xb70 [ 391.660293][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 391.660317][ T38] ? __switch_to+0xc79/0x1410 [ 391.660359][ T38] ? __pfx_kthread+0x10/0x10 [ 391.660389][ T38] ret_from_fork_asm+0x1a/0x30 [ 391.660435][ T38] [ 391.660503][ T38] INFO: task kworker/u8:16:4343 blocked for more than 143 seconds. [ 391.660521][ T38] Tainted: G L syzkaller #0 [ 391.663573][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.663584][ T38] task:kworker/u8:16 state:D stack:20800 pid:4343 tgid:4343 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 391.663645][ T38] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 391.663676][ T38] Call Trace: [ 391.663683][ T38] [ 391.663696][ T38] __schedule+0x16ec/0x5620 [ 391.663745][ T38] ? unwind_next_frame+0xa6/0x2550 [ 391.663779][ T38] ? look_up_lock_class+0x57/0x110 SYZFAIL: failed to recv rpc [ 391.663812][ T38] ? __pfx___schedule+0x10/0x10 [ 391.663851][ T38] ? schedule+0x90/0x360 [ 391.668188][ T38] schedule+0x164/0x360 [ 391.668225][ T38] schedule_timeout+0xc3/0x2c0 [ 391.668258][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 391.668287][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.668339][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.668377][ T38] ? wait_for_completion+0x274/0x5e0 [ 391.668409][ T38] wait_for_completion+0x2cc/0x5e0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.668453][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 391.668498][ T38] __synchronize_srcu+0x249/0x300 [ 391.668530][ T38] ? __pfx___synchronize_srcu+0x10/0x10 [ 391.668558][ T38] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 391.668590][ T38] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 391.668619][ T38] ? synchronize_srcu+0x20d/0x270 [ 391.668619][ T38] ? synchronize_srcu+0x20d/0x270 [ 391.668651][ T38] fsnotify_mark_destroy_workfn+0x109/0x300 [ 391.668684][ T38] ? __pfx_fsnotify_mark_destroy_workfn+0x10/0x10 [ 391.668719][ T38] ? process_scheduled_works+0xa70/0x1860 [ 391.668741][ T38] ? process_scheduled_works+0xa70/0x1860 [ 391.668767][ T38] process_scheduled_works+0xb5d/0x1860 [ 391.668824][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.668854][ T38] ? assign_work+0x3d5/0x5e0 [ 391.668884][ T38] worker_thread+0xa53/0xfc0 [ 391.668938][ T38] kthread+0x388/0x470 [ 391.668967][ T38] ? __pfx_worker_thread+0x10/0x10 [ 391.668988][ T38] ? __pfx_kthread+0x10/0x10 [ 391.669018][ T38] ret_from_fork+0x514/0xb70 [ 391.669047][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 391.669071][ T38] ? __switch_to+0xc79/0x1410 [ 391.669107][ T38] ? __pfx_kthread+0x10/0x10 [ 391.669136][ T38] ret_from_fork_asm+0x1a/0x30 [ 391.669182][ T38] [ 391.669260][ T38] [ 391.669260][ T38] Showing all locks held in the system: [ 391.669269][ T38] 5 locks held by kworker/u8:0/12: [ 391.669283][ T38] 6 locks held by ktimers/0/16: [ 391.669298][ T38] 1 lock held by khungtaskd/38: [ 391.669309][ T38] #0: ffffffff8ddc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 391.669380][ T38] 6 locks held by kworker/u8:3/56: [ 391.669393][ T38] 3 locks held by kworker/u8:4/67: [ 391.669405][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.669456][ T38] #1: ffffc9000153fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.669505][ T38] #2: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 391.669559][ T38] 2 locks held by kworker/u8:5/150: [ 391.669571][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.868441][ T38] #1: ffffc90003947c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.868531][ T38] 6 locks held by kworker/u8:11/2953: [ 391.868544][ T38] #0: ffff88801aad0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.868596][ T38] #1: ffffc9000dc6fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.868646][ T38] #2: ffffffff8f140620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 391.868701][ T38] #3: ffff88803eacc160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 391.868751][ T38] #4: ffff88803a868310 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 391.868808][ T38] #5: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 391.868864][ T38] 2 locks held by kworker/u8:12/3363: [ 391.868876][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.868927][ T38] #1: ffffc9000e2efc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.868980][ T38] 6 locks held by kworker/u8:14/3413: [ 391.868991][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.869042][ T38] #1: ffffc9000e63fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.869094][ T38] #2: ffff88801a328310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 391.869153][ T38] #3: ffff88805f7a1520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 391.869220][ T38] #4: ffffffff8ddc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 391.869273][ T38] #5: ffff88813fe08d58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 391.869334][ T38] 2 locks held by kworker/u8:16/4343: [ 391.869345][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.869404][ T38] #1: ffffc9000fd9fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.869455][ T38] 4 locks held by kworker/u9:1/4920: [ 391.869467][ T38] #0: ffff888062ad6938 ((wq_completion)hci8#3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.869521][ T38] #1: ffffc900108efc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.869572][ T38] #2: ffff88805d5cc0b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x16b0 [ 391.869623][ T38] #3: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 391.869673][ T38] 2 locks held by klogd/4960: [ 391.869685][ T38] 1 lock held by udevd/4971: [ 391.869696][ T38] #0: ffff88803664a480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 391.869752][ T38] 2 locks held by getty/5361: [ 391.869763][ T38] #0: ffff888035cfb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.869813][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 391.971069][ T38] 1 lock held by sshd-session/5592: [ 391.971086][ T38] #0: ffff88803f8ae0d8 (&pipe->rd_wait){+.+.}-{3:3}, at: remove_wait_queue+0x23/0x110 [ 391.971152][ T38] 2 locks held by syz-executor/5593: [ 391.971164][ T38] 1 lock held by syz-executor/5606: [ 391.971175][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 391.971242][ T38] 1 lock held by syz-executor/5607: [ 391.971253][ T38] #0: ffff8880303280d0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 391.971310][ T38] 4 locks held by kworker/u9:2/5608: [ 391.971321][ T38] #0: ffff88803a053938 ((wq_completion)hci7#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.971379][ T38] #1: ffffc900040d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.971429][ T38] #2: ffff8880342200b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x16b0 [ 391.971481][ T38] #3: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 391.971531][ T38] 3 locks held by syz-executor/5610: [ 391.971542][ T38] #0: ffff88803ba30f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 391.971601][ T38] #1: ffff88803ba300b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 391.971651][ T38] #2: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 391.971704][ T38] 4 locks held by kworker/u9:3/5611: [ 391.971715][ T38] #0: ffff88805bfdf138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.971776][ T38] #1: ffffc900040f7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.971827][ T38] #2: ffff88803e3740b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x16b0 [ 391.971878][ T38] #3: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 391.971934][ T38] 3 locks held by kworker/0:6/5810: [ 391.971946][ T38] #0: ffff88813fe37938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.971996][ T38] #1: ffffc900055d7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.972046][ T38] #2: ffff88805f4c5280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 391.972098][ T38] 6 locks held by kworker/u8:17/5869: [ 391.972110][ T38] 3 locks held by kworker/u8:18/5870: [ 391.972122][ T38] #0: ffff88803164f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.972172][ T38] #1: ffffc90005817c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.972237][ T38] #2: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 391.972285][ T38] 3 locks held by kworker/1:7/5892: [ 391.972297][ T38] #0: ffff88813fe37938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 391.972346][ T38] #1: ffffc900058c7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 391.972395][ T38] #2: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 391.972453][ T38] 2 locks held by kworker/1:8/5893: [ 391.972464][ T38] #0: ffff88813fe37938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 392.053990][ T38] #1: ffffc900058d7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 392.054042][ T38] 3 locks held by syz.4.292/6758: [ 392.054053][ T38] #0: ffff888033484f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 392.054105][ T38] #1: ffff8880334840b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 392.054149][ T38] #2: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 392.054196][ T38] 7 locks held by syz-executor/6762: [ 392.054207][ T38] #0: ffff888035f94480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 392.054256][ T38] #1: ffff888036c86878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 392.054305][ T38] #2: ffff888027e10968 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 392.054357][ T38] #3: ffffffff8e9d4738 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 392.054406][ T38] #4: ffff88805e5ae160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 392.054450][ T38] #5: ffff888020efe310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc30 [ 392.054504][ T38] #6: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 392.054552][ T38] 1 lock held by syz.0.293/6769: [ 392.054562][ T38] #0: ffff888033b980d0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 392.054611][ T38] 2 locks held by syz-executor/6773: [ 392.054621][ T38] #0: ffff88805ea00f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 392.054670][ T38] #1: ffff88805ea000b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 392.054714][ T38] 1 lock held by syz-executor/6781: [ 392.054724][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 392.054777][ T38] 1 lock held by syz-executor/6807: [ 392.054786][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 392.054843][ T38] 1 lock held by syz-executor/6808: [ 392.054853][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 392.054904][ T38] 3 locks held by syz-executor/6851: [ 392.054914][ T38] #0: ffff888030dfcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 392.054962][ T38] #1: ffff888030dfc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 392.055005][ T38] #2: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 392.055051][ T38] 3 locks held by syz-executor/6856: [ 392.055061][ T38] #0: ffff88805e7e8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 392.055109][ T38] #1: ffff88805e7e80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 392.055151][ T38] #2: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 392.055198][ T38] 4 locks held by syz-executor/6861: [ 392.055208][ T38] #0: ffff88803bf24f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 392.055257][ T38] #1: ffff88803bf240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 392.055299][ T38] #2: ffffffff8f2cf9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 392.055344][ T38] #3: ffff888030969b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 392.055394][ T38] 1 lock held by syz-executor/6870: [ 392.055405][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055453][ T38] 1 lock held by syz-executor/6875: [ 392.055463][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055511][ T38] 1 lock held by syz-executor/6897: [ 392.055521][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055569][ T38] 1 lock held by syz-executor/6902: [ 392.055579][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055627][ T38] 1 lock held by syz-executor/6907: [ 392.055637][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055685][ T38] 1 lock held by syz-executor/6919: [ 392.055695][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055743][ T38] 1 lock held by syz-executor/6924: [ 392.055753][ T38] #0: ffffffff8f14f378 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 392.055801][ T38] 1 lock held by dhcpcd/6928: [ 392.055811][ T38] #0: ffff888064942358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.055866][ T38] 1 lock held by dhcpcd/6929: [ 392.055876][ T38] #0: ffff88803057a358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.055922][ T38] 1 lock held by dhcpcd/6930: [ 392.055932][ T38] #0: ffff888038bce358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.055979][ T38] 1 lock held by dhcpcd/6931: [ 392.055988][ T38] #0: ffff888061440358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.056035][ T38] 1 lock held by dhcpcd/6932: [ 392.056045][ T38] #0: ffff888032154358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.056091][ T38] 1 lock held by dhcpcd/6933: [ 392.056101][ T38] #0: ffff888032156358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 392.056148][ T38] [ 392.056153][ T38] ============================================= [ 392.056153][ T38] [ 392.056162][ T38] NMI backtrace for cpu 0 [ 392.056178][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.056203][ T38] Tainted: [L]=SOFTLOCKUP [ 392.056209][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.056219][ T38] Call Trace: [ 392.056228][ T38] [ 392.056236][ T38] dump_stack_lvl+0xe8/0x150 [ 392.056260][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 392.056282][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.056303][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.056327][ T38] sys_info+0x135/0x170 [ 392.056344][ T38] watchdog+0xfd3/0x1030 [ 392.056371][ T38] ? watchdog+0x1c9/0x1030 [ 392.056396][ T38] kthread+0x388/0x470 [ 392.056420][ T38] ? __pfx_watchdog+0x10/0x10 [ 392.056438][ T38] ? __pfx_kthread+0x10/0x10 [ 392.056463][ T38] ret_from_fork+0x514/0xb70 [ 392.056487][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 392.056507][ T38] ? __switch_to+0xc79/0x1410 [ 392.056535][ T38] ? __pfx_kthread+0x10/0x10 [ 392.056560][ T38] ret_from_fork_asm+0x1a/0x30 [ 392.056596][ T38] [ 392.056603][ T38] Sending NMI from CPU 0 to CPUs 1: [ 392.056626][ C1] NMI backtrace for cpu 1 [ 392.056660][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.056681][ C1] Tainted: [L]=SOFTLOCKUP [ 392.056687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.056696][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 392.056719][ C1] Code: 2c 90 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cc 57 f7 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 392.056732][ C1] RSP: 0018:ffffc90000167a30 EFLAGS: 00000202 [ 392.056747][ C1] RAX: 000000000000002b RBX: 000000000000002b RCX: 0000000000000000 [ 392.056758][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.056768][ C1] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 392.056778][ C1] R10: dffffc0000000000 R11: ffffffff85343ff0 R12: dffffc0000000000 [ 392.056790][ C1] R13: 0000000000000001 R14: ffffffff99907920 R15: 0000000000000000 [ 392.056800][ C1] FS: 0000000000000000(0000) GS:ffff888126486000(0000) knlGS:0000000000000000 [ 392.056814][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.056825][ C1] CR2: 00007f0ab80e7e20 CR3: 0000000036b10000 CR4: 00000000003526f0 [ 392.056841][ C1] Call Trace: [ 392.056847][ C1] [ 392.056855][ C1] serial8250_console_write+0x12e1/0x1b90 [ 392.056882][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 392.056901][ C1] ? console_flush_one_record+0xfa/0xb90 [ 392.056923][ C1] ? console_flush_one_record+0x48f/0xb90 [ 392.056944][ C1] console_flush_one_record+0x68b/0xb90 [ 392.056966][ C1] ? console_flush_one_record+0xfa/0xb90 [ 392.056988][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 392.057008][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.057033][ C1] legacy_kthread_func+0x1b6/0x250 [ 392.057053][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 392.057072][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 392.057092][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 392.057113][ C1] kthread+0x388/0x470 [ 392.057133][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 392.057150][ C1] ? __pfx_kthread+0x10/0x10 [ 392.057170][ C1] ret_from_fork+0x514/0xb70 [ 392.057188][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 392.057204][ C1] ? __switch_to+0xc79/0x1410 [ 392.057227][ C1] ? __pfx_kthread+0x10/0x10 [ 392.057247][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.057272][ C1] [ 392.057625][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 392.057640][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.057665][ T38] Tainted: [L]=SOFTLOCKUP [ 392.057672][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.057681][ T38] Call Trace: [ 392.057688][ T38] [ 392.057695][ T38] vpanic+0x56c/0xa60 [ 392.057721][ T38] ? __pfx_vpanic+0x10/0x10 [ 392.057751][ T38] panic+0xc5/0xd0 [ 392.057772][ T38] ? __pfx_panic+0x10/0x10 [ 392.057801][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 392.057833][ T38] watchdog+0x102c/0x1030 [ 392.057860][ T38] ? watchdog+0x1c9/0x1030 [ 392.057885][ T38] kthread+0x388/0x470 [ 392.057908][ T38] ? __pfx_watchdog+0x10/0x10 [ 392.057926][ T38] ? __pfx_kthread+0x10/0x10 [ 392.057951][ T38] ret_from_fork+0x514/0xb70 [ 392.057974][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 392.057994][ T38] ? __switch_to+0xc79/0x1410 [ 392.058022][ T38] ? __pfx_kthread+0x10/0x10 [ 392.058046][ T38] ret_from_fork_asm+0x1a/0x30 [ 392.058086][ T38] [ 392.058433][ T38] Kernel Offset: disabled