last executing test programs: 6.798121262s ago: executing program 2 (id=3): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0x4, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb9, 0xc8, 0x4}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x1, 0x3cc, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xa, 0x1, 0x18, 0x20, 0xbda, 0x819a, 0xcf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ba, 0x1, 0xb, 0x4, 0xc0, 0x6, "", [{{0x9, 0x4, 0xde, 0x5b, 0xb, 0xff, 0xff, 0xff, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0xfe, 0x1, {0x22, 0x54f}}, @hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x1ac}}], [{{0x9, 0x5, 0x2, 0x1, 0x8, 0xfb, 0x2, 0x10, [@generic={0x53, 0x21, "db06deafb819cf09122aad28fbf7450e5c1614b4b5197ce408c2407fb59bd1ab8c56ec7f234bc9b63f9de58d284d85bb9176d80d3224f6639d858606f5e35ea4d3b539e28da15e38c67ed94d3626d41a50"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x8, 0xe, 0xff, [@generic={0x1b, 0x30, "9ff554bb36e3be8387417b7653c322798c56b41b89b159ee9c"}, @generic={0x99, 0xe, "b19b27e4b86043a8825f177f5ba51fb3da9f41790e13fcc10625c6872a0a66284ceca3e36d8ac3ad72f19d49551b843ec8e4289f26e09e1559171b3441157e91191fe7194c6baedbed7139f82b6a22985b883ad03870e8f0f22d0102b9f0ae298d6c9325d078bd3c52682ffcca406b8d395ee0392668194e3437cc67f43e4e39142a528ee35cfde521506cc6c20d43aceae60d56b2f9ac"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x4, 0x4, [@generic={0x1a, 0xc, "c8e9a302fed09299fcbce499ae301738f066158c0cbbfba3"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1, 0xff, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x9c6a}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x4d3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x40, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xca4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x5, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0xd, 0x42, [@generic={0x9, 0xb5912a937093c54c, "d9c4d99eb21492"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x20, 0x0, 0xf5, [@generic={0xc2, 0x30, "27690d95a5762595077aca422537e0ac896d9d7dd44e84a849b96ac9a9f60eaadd075dc58c35cf5890bbda06c5ffda26be9ef9f8886329a29d0cac342de6db26af7b5ab4d3216e9f0e04d1ea4dc61f9dd87118ba9a13f5cc5acee54dbb8f7e29530eefae6f63e707e137aa8a4eab63e70b9a91207b4d82097b560b70c141764f5b171d80eae3052ed8ef38e160265bf8fbabd6896a9575b901d7e046e5420c41d9dd05551a68c78980afe75c4da6659da5973a3aac43711a0fef2f37d824e2e4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xb, 0x7, 0xd, [@generic={0xdb, 0x2, "42930e8f241051fe611c32f292ebe3322d5236241706b68c6ea42beeadedce63581436bc920951b4c6feb54d69928b977602ce3dd785d122c6b9df1f972a7ba9dbf9b8cd21586746838f7606ae81276d6c9508c4ed582b7393cd398725a5f42b12469f0b7dc6c7e3980b49298bcb0c11d4b49b108de5f18d4cbba0aa9593b606c2b7002b12a527d0a0f9f14d9fc1367dcad4b6d8b301d7e47bda0e3e96a54b3456d321e293142172185dd9c56ad339d5a9cc00629c8acf0ee67dea63fc2940a61404cd36508bdfd0c70b91914c8de6ad5e383b32f3cae0f6c8"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x3, 0x2, 0x4, [@generic={0x42, 0x22, "95ea16f889fd4ad78f607bd2bdc4a6054c6db8f62649cdffe5f50e3dc153b22ecc1c89911456d8086e8a093105dd6060eee491eae5a68694fa8276cccbd55da4"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x8, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x29, 0x9}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xe, 0x0, 0x78, 0x40, 0x4}, 0x58, &(0x7f0000000540)={0x5, 0xf, 0x58, 0x1, [@generic={0x53, 0x10, 0xb, "b2dcfea21ad407c7f9ceeed16380551079ef482293b78d998b41d8e3ad9eeab062a96de65795a4fe0f1e0d01e2ea1af2e00a0924d6fb4001b075ed8f96e3c6809e2dc70263dd280b4cfe44c4ca6dcff7"}]}, 0x1, [{0xf9, &(0x7f00000005c0)=@string={0xf9, 0x3, "6cf55943824e7d89422827b1011f1cc7d41e55ac6d43ff22b8d646bddfff9e830aa28720beafca7ce64242b4a25ef9496806c9cd022e66c737a5622e14ea2cd379193b4980f599de11f74bc220ab4121ce9c659860c72ed322d6e2fcff19acf0b0b27a4cef81a0c341522a4690ae0d85983c9091c0739ddce984a8a4cdd7949149c0fad5b61e5131962c6474d12872c04f81705a9967a4e78c566206e68c57f7d8ef48f98df359094843223c4f376124af05380141fe2315499d15c9266fccdca2f9adbb25e134716efd1bd85c87536bbc4258a69d168d7ebd2bd0a1f0f52887012b37b416e0c4010efdc019b0ab0215249a02372d3fc2"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x2, 0x26, {0x26, 0xa, "c2630000950000000000fcffffff00"/36}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.913684093s ago: executing program 2 (id=7): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601030000000000000000070000001c0007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000ac0), 0x41, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000b00)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000c40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000cc0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000d00)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000d40)={0x0, 0x1, 0x0, 0x4, 0x35}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x109, 0x8200, 0x0, 0x365}}], 0x1, &(0x7f0000001040)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x7, 0x0, 0x53) r11 = io_uring_setup(0x4b0e, &(0x7f0000000900)={0x0, 0xbd21, 0x0, 0x0, 0x80, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f0000000980)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f00000009c0)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f0000000a00)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f0000000a40)={0x0, 0x61}, 0x1) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)) r16 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r16) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r18, 0x4020aed2, &(0x7f00000008c0)={0xffff1000, 0x0, 0x8}) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r19) 1.909229245s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 1.817667664s ago: executing program 0 (id=36): socket$igmp(0x2, 0x3, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xc, {"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", 0x7c4}}, 0x1006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.530013498s ago: executing program 0 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000004c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000580)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.486065395s ago: executing program 2 (id=42): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 1.227076898s ago: executing program 4 (id=45): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x6375, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000580)={0x20000000, 0x1, 0xffffffffffffffff}) 1.121986419s ago: executing program 0 (id=47): capset(0x0, &(0x7f0000000080)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.121811388s ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000280)=0x3000) 1.104101622s ago: executing program 1 (id=49): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.06785859s ago: executing program 4 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)}) 925.933057ms ago: executing program 3 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 925.640917ms ago: executing program 1 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 925.552679ms ago: executing program 0 (id=53): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 925.388583ms ago: executing program 4 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x90, 0x0, [{0x1, 0x82, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0x12, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0xa, '\x00', 0xb}, {0xd, 0x1b, 0x45, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x8, 0x7, 0x4, '\x00', 0x3a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x0, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x49, 0x0, '\x00', 0x6}]}}) 880.263511ms ago: executing program 1 (id=55): r0 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 798.915719ms ago: executing program 3 (id=56): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'veth0_to_team\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pimreg\x00', 0x1}, 0x18) 750.863377ms ago: executing program 0 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000007c0)={[0x7b, 0xdb58, 0x9, 0x800, 0x7fe, 0x404, 0x5, 0x800000000000007, 0xfffffffffffffe00, 0x400000ffffffff, 0x7fffffffffffffff, 0x1000000089, 0xc183, 0x0, 0x7f, 0xbe], 0x3ff8, 0x312283}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 639.566216ms ago: executing program 1 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000002580)={0x24, r1, 0x1, 0x70bd28, 0x25dffbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4840}, 0x20040840) 492.056804ms ago: executing program 4 (id=59): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000740)={0x6, 0x3, 0x3}) 418.437001ms ago: executing program 3 (id=60): mkdirat(0xffffffffffffff9c, 0x0, 0x1fd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) 372.293854ms ago: executing program 1 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x28, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "dd9dec79219e"}}}}, 0x0) 312.812603ms ago: executing program 4 (id=62): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) 254.737126ms ago: executing program 2 (id=63): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="54001280110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 197.611473ms ago: executing program 1 (id=64): syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xf, 0x8}, {0x5, 0x1a, 0x1800, 0x7}}}}, 0x15) 156.77641ms ago: executing program 3 (id=65): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 106.175533ms ago: executing program 4 (id=66): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa4242, 0x0) sendfile(r1, r0, 0x0, 0x1002000ff) 98.807021ms ago: executing program 0 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x41, 0x1, 0x80002, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 2 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x200}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 76.290413][ T5606] cgroup: Unknown subsys name 'net' [ 76.371420][ T5606] cgroup: Unknown subsys name 'cpuset' [ 76.374592][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.794218][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.191220][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.191607][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.193605][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.194229][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.194237][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.194679][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.195020][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.196481][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.197251][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.197720][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.197958][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.199809][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.204569][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.205128][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.206612][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.208001][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.209927][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.224138][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.224583][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.232508][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.232996][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.233442][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.233633][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.262507][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.296451][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.306879][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.306979][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.307102][ T5638] bridge_slave_0: entered allmulticast mode [ 81.312889][ T5638] bridge_slave_0: entered promiscuous mode [ 81.367780][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.367870][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.371249][ T5638] bridge_slave_1: entered allmulticast mode [ 81.376063][ T5638] bridge_slave_1: entered promiscuous mode [ 81.457917][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.458676][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.459021][ T5639] bridge_slave_0: entered allmulticast mode [ 81.464166][ T5639] bridge_slave_0: entered promiscuous mode [ 81.503825][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.503885][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.503960][ T5634] bridge_slave_0: entered allmulticast mode [ 81.505149][ T5634] bridge_slave_0: entered promiscuous mode [ 81.520500][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.520588][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.520697][ T5636] bridge_slave_0: entered allmulticast mode [ 81.523765][ T5636] bridge_slave_0: entered promiscuous mode [ 81.531504][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.531799][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.532646][ T5636] bridge_slave_1: entered allmulticast mode [ 81.534543][ T5636] bridge_slave_1: entered promiscuous mode [ 81.590099][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.590296][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.590384][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.590494][ T5639] bridge_slave_1: entered allmulticast mode [ 81.591930][ T5639] bridge_slave_1: entered promiscuous mode [ 81.617391][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.617610][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.620293][ T5634] bridge_slave_1: entered allmulticast mode [ 81.624280][ T5634] bridge_slave_1: entered promiscuous mode [ 81.658261][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.753394][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.755552][ T5638] team0: Port device team_slave_0 added [ 81.757354][ T5638] team0: Port device team_slave_1 added [ 81.765539][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.767541][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.767615][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.767710][ T5637] bridge_slave_0: entered allmulticast mode [ 81.770244][ T5637] bridge_slave_0: entered promiscuous mode [ 81.789371][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.797280][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.848744][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.848959][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.849090][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.849202][ T5637] bridge_slave_1: entered allmulticast mode [ 81.850331][ T5637] bridge_slave_1: entered promiscuous mode [ 81.853387][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.939345][ T5636] team0: Port device team_slave_0 added [ 81.944646][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.944660][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.944690][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.014382][ T5636] team0: Port device team_slave_1 added [ 82.015827][ T5634] team0: Port device team_slave_0 added [ 82.016515][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.016525][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.016545][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.069994][ T5639] team0: Port device team_slave_0 added [ 82.080820][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.104224][ T5634] team0: Port device team_slave_1 added [ 82.121100][ T5639] team0: Port device team_slave_1 added [ 82.122937][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.146835][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.146847][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.146871][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.237047][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.237058][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.237075][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.290244][ T4935] Bluetooth: hci1: command tx timeout [ 82.290264][ T5629] Bluetooth: hci2: command tx timeout [ 82.290457][ T5626] Bluetooth: hci3: command tx timeout [ 82.291835][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.291847][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.291876][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.292830][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.292843][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.292866][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.293795][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.293806][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.293826][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.392802][ T5629] Bluetooth: hci4: command tx timeout [ 82.392823][ T4935] Bluetooth: hci0: command tx timeout [ 82.406097][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.406140][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.406212][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.505899][ T5637] team0: Port device team_slave_0 added [ 82.515198][ T5637] team0: Port device team_slave_1 added [ 82.534949][ T5638] hsr_slave_0: entered promiscuous mode [ 82.535757][ T5638] hsr_slave_1: entered promiscuous mode [ 82.581867][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.581880][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.581900][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.642440][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.642452][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.642472][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.706624][ T5639] hsr_slave_0: entered promiscuous mode [ 82.707332][ T5639] hsr_slave_1: entered promiscuous mode [ 82.707780][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 82.707843][ T5639] Cannot create hsr debugfs directory [ 82.735118][ T5636] hsr_slave_0: entered promiscuous mode [ 82.735847][ T5636] hsr_slave_1: entered promiscuous mode [ 82.736300][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 82.736317][ T5636] Cannot create hsr debugfs directory [ 82.801146][ T5634] hsr_slave_0: entered promiscuous mode [ 82.801800][ T5634] hsr_slave_1: entered promiscuous mode [ 82.802297][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 82.802314][ T5634] Cannot create hsr debugfs directory [ 82.940798][ T5637] hsr_slave_0: entered promiscuous mode [ 82.941745][ T5637] hsr_slave_1: entered promiscuous mode [ 82.942214][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 82.942232][ T5637] Cannot create hsr debugfs directory [ 83.352172][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.356936][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.357673][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.381554][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.395191][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.404933][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.420845][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.423192][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.477850][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.493588][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.497430][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.515825][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.527456][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.539199][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.556539][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.564180][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.645052][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.660496][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.661074][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.663306][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.689816][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.700851][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.704944][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.722887][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.810272][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.813487][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.814201][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.817466][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.854631][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.865455][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.879552][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.895874][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.906355][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.985251][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.995599][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.996370][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.011587][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.019509][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.036107][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.041728][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.055506][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.055693][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.076048][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.085185][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.090512][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.106140][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.106357][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.163401][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.199316][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.199379][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.239693][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.239765][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.331193][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.368364][ T4935] Bluetooth: hci2: command tx timeout [ 84.368387][ T5629] Bluetooth: hci1: command tx timeout [ 84.368408][ T5629] Bluetooth: hci3: command tx timeout [ 84.410108][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.439284][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.439375][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.449569][ T5626] Bluetooth: hci0: command tx timeout [ 84.449771][ T4935] Bluetooth: hci4: command tx timeout [ 84.484159][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.486406][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.486471][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.517537][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.531666][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.563732][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.581089][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.609537][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.609601][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.610972][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.611031][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.613339][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.661009][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.661069][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.662373][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.662447][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.756017][ T5636] veth0_vlan: entered promiscuous mode [ 84.795248][ T5638] veth0_vlan: entered promiscuous mode [ 84.812369][ T5636] veth1_vlan: entered promiscuous mode [ 84.855316][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.857932][ T5638] veth1_vlan: entered promiscuous mode [ 84.920024][ T5636] veth0_macvtap: entered promiscuous mode [ 84.924462][ T5636] veth1_macvtap: entered promiscuous mode [ 84.961477][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.966748][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.985855][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.000724][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.006709][ T5638] veth0_macvtap: entered promiscuous mode [ 85.029970][ T5638] veth1_macvtap: entered promiscuous mode [ 85.092280][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.093545][ T5634] veth0_vlan: entered promiscuous mode [ 85.099618][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.099884][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.099984][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.118855][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155860][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.193670][ T5634] veth1_vlan: entered promiscuous mode [ 85.242301][ T5637] veth0_vlan: entered promiscuous mode [ 85.285016][ T5639] veth0_vlan: entered promiscuous mode [ 85.295471][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.295493][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.321678][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321734][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.324821][ T5637] veth1_vlan: entered promiscuous mode [ 85.357088][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.406377][ T5639] veth1_vlan: entered promiscuous mode [ 85.412437][ T5634] veth0_macvtap: entered promiscuous mode [ 85.434487][ T5634] veth1_macvtap: entered promiscuous mode [ 85.445684][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.445702][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.469295][ T1273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.500727][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.500744][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.563347][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.587709][ T5636] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.623807][ T5636] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.624207][ T5636] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.624493][ T5636] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.625248][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.626099][ T5636] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 85.626478][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.626494][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.636510][ T5637] veth0_macvtap: entered promiscuous mode [ 85.656411][ T5637] veth1_macvtap: entered promiscuous mode [ 85.731483][ T5639] veth0_macvtap: entered promiscuous mode [ 85.755030][ T5639] veth1_macvtap: entered promiscuous mode [ 85.817512][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.839457][ T136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846476][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846874][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.847266][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.879497][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.884205][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.941627][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.990234][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.009572][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.010346][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.010386][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.017279][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.017296][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.109039][ T5719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.128621][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.178437][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.178604][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.178746][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.183092][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.183108][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284544][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.284560][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.296975][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 86.309933][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.310019][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.335615][ T9] usb 3-1: config 0 descriptor?? [ 86.398315][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.398331][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448134][ T4935] Bluetooth: hci2: command tx timeout [ 86.448316][ T5626] Bluetooth: hci1: command tx timeout [ 86.448383][ T4935] Bluetooth: hci3: command tx timeout [ 86.463584][ T5715] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.501714][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.501731][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.528764][ T5626] Bluetooth: hci0: command tx timeout [ 86.528834][ T4935] Bluetooth: hci4: command tx timeout [ 86.557962][ T5717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.572407][ T5717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.577082][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.577105][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.617166][ T29] cfg80211: failed to load regulatory.db [ 86.628079][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 86.628959][ T5715] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 86.633401][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 86.633432][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.633452][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.633474][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 86.633508][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724133][ T5715] usb 2-1: config 0 descriptor?? [ 86.728174][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.728384][ T5720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.817107][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 86.817213][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.889355][ T9] usb 3-1: USB disconnect, device number 2 [ 86.983321][ T4935] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 86.999311][ T5713] usb 2-1: USB disconnect, device number 2 [ 87.027956][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 87.368322][ T5732] Zero length message leads to an empty skb [ 87.801216][ T5747] syzkaller1: entered promiscuous mode [ 87.801236][ T5747] syzkaller1: entered allmulticast mode [ 87.958702][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.005089][ T5754] FAULT_INJECTION: forcing a failure. [ 88.005089][ T5754] name failslab, interval 1, probability 0, space 0, times 1 [ 88.005138][ T5754] CPU: 0 UID: 0 PID: 5754 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 88.005179][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.005208][ T5754] Call Trace: [ 88.005221][ T5754] [ 88.005230][ T5754] dump_stack_lvl+0xe8/0x150 [ 88.005278][ T5754] should_fail_ex+0x410/0x560 [ 88.005322][ T5754] ? __alloc_skb+0x1db/0x7a0 [ 88.005340][ T5754] should_failslab+0xa8/0x100 [ 88.005367][ T5754] ? __alloc_skb+0x1db/0x7a0 [ 88.005383][ T5754] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 88.005405][ T5754] ? __alloc_skb+0x18d/0x7a0 [ 88.005423][ T5754] ? __alloc_skb+0x1db/0x7a0 [ 88.005446][ T5754] __alloc_skb+0x1db/0x7a0 [ 88.005469][ T5754] netlink_sendmsg+0x5d4/0xb40 [ 88.005503][ T5754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.005535][ T5754] ? apparmor_socket_sendmsg+0x98/0x360 [ 88.005564][ T5754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.005588][ T5754] sock_sendmsg_nosec+0x13a/0x180 [ 88.005617][ T5754] ____sys_sendmsg+0x54e/0x850 [ 88.005644][ T5754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.005679][ T5754] ___sys_sendmsg+0x2a5/0x360 [ 88.005700][ T5754] ? __lock_acquire+0x747/0x2de0 [ 88.005725][ T5754] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.005746][ T5754] ? get_pid_task+0x20/0x1f0 [ 88.005764][ T5754] ? get_pid_task+0x20/0x1f0 [ 88.005781][ T5754] ? get_pid_task+0x20/0x1f0 [ 88.005827][ T5754] ? __fget_files+0x2a/0x420 [ 88.005843][ T5754] ? __fget_files+0x3a2/0x420 [ 88.005870][ T5754] __sys_sendmsg+0x177/0x240 [ 88.005894][ T5754] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.005936][ T5754] __do_fast_syscall_32+0x27a/0x6b0 [ 88.005987][ T5754] ? do_fast_syscall_32+0x33/0x70 [ 88.006018][ T5754] ? asm_int80_emulation+0x1a/0x20 [ 88.006040][ T5754] ? do_int80_emulation+0x299/0x500 [ 88.006067][ T5754] ? trace_irq_disable+0x3b/0x140 [ 88.006096][ T5754] do_fast_syscall_32+0x33/0x70 [ 88.006124][ T5754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.006151][ T5754] RIP: 0023:0xf742f0ec [ 88.006175][ T5754] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 88.006193][ T5754] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 88.006221][ T5754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 88.006236][ T5754] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.006249][ T5754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.006262][ T5754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.006275][ T5754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.006307][ T5754] [ 88.193534][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.263013][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 88.263043][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.339015][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.339046][ T29] usb 3-1: Product: syz [ 88.339062][ T29] usb 3-1: Manufacturer: syz [ 88.339078][ T29] usb 3-1: SerialNumber: syz [ 88.372311][ T29] usb 3-1: config 0 descriptor?? [ 88.391062][ T29] usb 3-1: selecting invalid altsetting 0 [ 88.529292][ T4935] Bluetooth: hci3: command tx timeout [ 88.529323][ T4935] Bluetooth: hci1: command tx timeout [ 88.529343][ T4935] Bluetooth: hci2: command tx timeout [ 88.608509][ T5626] Bluetooth: hci4: command tx timeout [ 88.608540][ T5626] Bluetooth: hci0: command tx timeout [ 88.756100][ T24] usb 3-1: USB disconnect, device number 3 [ 89.003181][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 89.126351][ T5783] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.294611][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.459830][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.479146][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.479171][ T24] usb 3-1: Product: syz [ 89.479185][ T24] usb 3-1: Manufacturer: syz [ 89.479198][ T24] usb 3-1: SerialNumber: syz [ 89.655841][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.724661][ T5800] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 89.724782][ T5800] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 89.764549][ T5797] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.764707][ T5797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.790939][ T5797] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.808928][ T5797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.809024][ T5797] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.817330][ T5797] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.845854][ T5797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.847201][ T5797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.898634][ T5734] usb 3-1: USB disconnect, device number 4 [ 90.002494][ T5797] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.035754][ T5797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.035947][ T5797] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.066575][ T5797] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.085738][ T5797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.086006][ T5797] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.114166][ T5797] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.700469][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 90.700781][ T29] ath9k_htc: Failed to initialize the device [ 90.703455][ T5734] usb 3-1: ath9k_htc: USB layer deinitialized [ 91.014440][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 91.042270][ T5835] syzkaller0: entered promiscuous mode [ 91.042288][ T5835] syzkaller0: entered allmulticast mode [ 91.427804][ T5858] binder: 5856:5858 ioctl c0306201 80000680 returned -14 [ 91.672055][ T5869] vivid-002: ================= START STATUS ================= [ 91.672102][ T5869] vivid-002: RDS Tx I/O Mode: Controls [ 91.672136][ T5869] vivid-002: RDS Program ID: 32904 [ 91.672157][ T5869] vivid-002: RDS Program Type: 3 [ 91.672176][ T5869] vivid-002: RDS PS Name: VIVID-TX [ 91.672195][ T5869] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 91.672218][ T5869] vivid-002: RDS Stereo: true [ 91.672235][ T5869] vivid-002: RDS Artificial Head: false [ 91.672264][ T5869] vivid-002: RDS Compressed: false [ 91.672282][ T5869] vivid-002: RDS Dynamic PTY: false [ 91.672299][ T5869] vivid-002: RDS Traffic Announcement: false [ 91.672317][ T5869] vivid-002: RDS Traffic Program: true [ 91.672650][ T5869] vivid-002: RDS Music: true [ 91.672676][ T5869] vivid-002: ================== END STATUS ================== [ 91.810834][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.843278][ T5873] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 91.852831][ T5871] IPVS: stopping backup sync thread 5873 ... [ 91.888769][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.888845][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.049222][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.129268][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.307117][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 92.373689][ T4935] Bluetooth: hci3: unexpected event for opcode 0x0035 [ 92.395544][ T5896] openvswitch: netlink: IP tunnel TTL not specified. [ 92.501639][ T5894] [ 92.504030][ T5894] ====================================================== [ 92.511061][ T5894] WARNING: possible circular locking dependency detected [ 92.518102][ T5894] syzkaller #0 Not tainted [ 92.522537][ T5894] ------------------------------------------------------ [ 92.529571][ T5894] syz.3.65/5894 is trying to acquire lock: [ 92.535386][ T5894] ffffffff8fe903e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 92.544814][ T5894] [ 92.544814][ T5894] but task is already holding lock: [ 92.552184][ T5894] ffff8880283d3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 92.561275][ T5894] [ 92.561275][ T5894] which lock already depends on the new lock. [ 92.561275][ T5894] [ 92.571691][ T5894] [ 92.571691][ T5894] the existing dependency chain (in reverse order) is: [ 92.580744][ T5894] [ 92.580744][ T5894] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 92.588401][ T5894] __mutex_lock+0x19d/0x1550 [ 92.593569][ T5894] blkcg_activate_policy+0x1cb/0x8e0 [ 92.599399][ T5894] blk_throtl_init+0x2f7/0x420 [ 92.604695][ T5894] tg_set_conf+0x1db/0x4e0 [ 92.609654][ T5894] cgroup_file_write+0x331/0x8f0 [ 92.615148][ T5894] kernfs_fop_write_iter+0x3a4/0x540 [ 92.620979][ T5894] vfs_write+0x612/0xba0 [ 92.625758][ T5894] ksys_write+0x150/0x270 [ 92.630619][ T5894] __do_fast_syscall_32+0x27a/0x6b0 [ 92.636351][ T5894] do_fast_syscall_32+0x33/0x70 [ 92.641766][ T5894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.648644][ T5894] [ 92.648644][ T5894] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 92.657259][ T5894] blk_alloc_queue+0x544/0x690 [ 92.662555][ T5894] __blk_mq_alloc_disk+0x194/0x390 [ 92.668202][ T5894] loop_add+0x480/0xb40 [ 92.672888][ T5894] loop_init+0xd7/0x160 [ 92.677585][ T5894] do_one_initcall+0x250/0x870 [ 92.682876][ T5894] do_initcall_level+0x10a/0x1a0 [ 92.688367][ T5894] do_initcalls+0x59/0xa0 [ 92.693256][ T5894] kernel_init_freeable+0x29d/0x3e0 [ 92.698980][ T5894] kernel_init+0x22/0x1d0 [ 92.703857][ T5894] ret_from_fork+0x514/0xb70 [ 92.708980][ T5894] ret_from_fork_asm+0x1a/0x30 [ 92.714292][ T5894] [ 92.714292][ T5894] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 92.721518][ T5894] __lock_acquire+0x164c/0x2de0 [ 92.726905][ T5894] lock_acquire+0x115/0x350 [ 92.731937][ T5894] fs_reclaim_acquire+0x71/0x100 [ 92.737437][ T5894] kmem_cache_alloc_noprof+0x5f/0x600 [ 92.743342][ T5894] __radix_tree_preload+0x2df/0x870 [ 92.749070][ T5894] blkg_conf_prep+0x621/0xd80 [ 92.754289][ T5894] tg_set_conf+0x20b/0x4e0 [ 92.759231][ T5894] cgroup_file_write+0x331/0x8f0 [ 92.764719][ T5894] kernfs_fop_write_iter+0x3a4/0x540 [ 92.770535][ T5894] vfs_write+0x612/0xba0 [ 92.775298][ T5894] ksys_write+0x150/0x270 [ 92.780155][ T5894] __do_fast_syscall_32+0x27a/0x6b0 [ 92.785882][ T5894] do_fast_syscall_32+0x33/0x70 [ 92.791275][ T5894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.798145][ T5894] [ 92.798145][ T5894] other info that might help us debug this: [ 92.798145][ T5894] [ 92.808369][ T5894] Chain exists of: [ 92.808369][ T5894] fs_reclaim --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex [ 92.808369][ T5894] [ 92.821947][ T5894] Possible unsafe locking scenario: [ 92.821947][ T5894] [ 92.829405][ T5894] CPU0 CPU1 [ 92.834774][ T5894] ---- ---- [ 92.840141][ T5894] lock(&q->blkcg_mutex); [ 92.844577][ T5894] lock(&q->q_usage_counter(io)#17); [ 92.852487][ T5894] lock(&q->blkcg_mutex); [ 92.859429][ T5894] lock(fs_reclaim); [ 92.863437][ T5894] [ 92.863437][ T5894] *** DEADLOCK *** [ 92.863437][ T5894] [ 92.871585][ T5894] locks held by syz.3.65/5894: 6, last CPU#0: [ 92.877661][ T5894] #0: ffff8880791767f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 92.886736][ T5894] #1: ffff88807ee0e460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 92.895753][ T5894] #2: ffff888079b82880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 92.905514][ T5894] #3: ffff888075b690f8 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 92.915563][ T5894] #4: ffff8880283d3a40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a8/0x3c0 [ 92.925676][ T5894] #5: ffff8880283d3bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 92.935186][ T5894] [ 92.935186][ T5894] stack backtrace: [ 92.941084][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(full) [ 92.950209][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.960289][ T5894] Call Trace: [ 92.963593][ T5894] [ 92.966545][ T5894] dump_stack_lvl+0xe8/0x150 [ 92.971159][ T5894] print_circular_bug+0x2e2/0x300 [ 92.976206][ T5894] check_noncircular+0x12f/0x150 [ 92.981172][ T5894] __lock_acquire+0x164c/0x2de0 [ 92.986039][ T5894] ? check_noncircular+0xdb/0x150 [ 92.991085][ T5894] ? add_lock_to_list+0xc7/0x100 [ 92.996052][ T5894] ? lockdep_unlock+0x5c/0xd0 [ 93.000748][ T5894] ? __lock_acquire+0x1511/0x2de0 [ 93.005806][ T5894] lock_acquire+0x115/0x350 [ 93.010336][ T5894] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 93.015903][ T5894] ? __radix_tree_preload+0x2df/0x870 [ 93.021291][ T5894] fs_reclaim_acquire+0x71/0x100 [ 93.026242][ T5894] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 93.031795][ T5894] kmem_cache_alloc_noprof+0x5f/0x600 [ 93.037176][ T5894] ? __radix_tree_preload+0x2df/0x870 [ 93.042565][ T5894] ? __radix_tree_preload+0x82/0x870 [ 93.047877][ T5894] __radix_tree_preload+0x2df/0x870 [ 93.053084][ T5894] ? __radix_tree_preload+0x82/0x870 [ 93.058386][ T5894] blkg_conf_prep+0x621/0xd80 [ 93.063082][ T5894] tg_set_conf+0x20b/0x4e0 [ 93.067510][ T5894] ? lock_acquire+0x115/0x350 [ 93.072196][ T5894] ? __pfx_tg_set_conf+0x10/0x10 [ 93.077164][ T5894] ? kernfs_root+0x1c/0x230 [ 93.081677][ T5894] ? kernfs_root+0x1c/0x230 [ 93.086219][ T5894] ? kernfs_root+0x1c/0x230 [ 93.090731][ T5894] ? kernfs_root+0x1ea/0x230 [ 93.095337][ T5894] ? __pfx_tg_set_conf_u64+0x10/0x10 [ 93.100642][ T5894] cgroup_file_write+0x331/0x8f0 [ 93.105621][ T5894] ? __pfx_cgroup_file_write+0x10/0x10 [ 93.111104][ T5894] ? __kmalloc_noprof+0x38c/0x720 [ 93.116162][ T5894] ? __pfx_cgroup_file_write+0x10/0x10 [ 93.121640][ T5894] kernfs_fop_write_iter+0x3a4/0x540 [ 93.126957][ T5894] vfs_write+0x612/0xba0 [ 93.131223][ T5894] ? __pfx_vfs_write+0x10/0x10 [ 93.136019][ T5894] ? __fget_files+0x2a/0x420 [ 93.140614][ T5894] ksys_write+0x150/0x270 [ 93.144949][ T5894] ? __pfx_ksys_write+0x10/0x10 [ 93.149809][ T5894] __do_fast_syscall_32+0x27a/0x6b0 [ 93.155018][ T5894] ? do_fast_syscall_32+0x33/0x70 [ 93.160048][ T5894] ? asm_int80_emulation+0x1a/0x20 [ 93.165170][ T5894] ? do_int80_emulation+0x299/0x500 [ 93.170371][ T5894] ? trace_irq_disable+0x3b/0x140 [ 93.175416][ T5894] do_fast_syscall_32+0x33/0x70 [ 93.180285][ T5894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.186626][ T5894] RIP: 0023:0xf7fe90ec [ 93.190698][ T5894] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 93.210304][ T5894] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 93.218725][ T5894] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 93.226705][ T5894] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 93.234676][ T5894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.242695][ T5894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.250673][ T5894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.258722][ T5894] [ 93.888112][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.968085][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.128086][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.208084][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.968054][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.048088][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.208742][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.288209][ T4935] Bluetooth: hci4: command 0x0c1a tx timeout